Escape Proving Ground · Pasadena, MD

Privacy Policy

Effective August 3, 2026 · Last updated August 27, 2026

This policy explains what information Escape Proving Ground collects when you browse escapeprovingground.com, book a room, call or text us, join our mailing list, or play a game at 3201 Mountain Road — how we use it, who we share it with, and the choices you have. We keep it to what running an escape room actually requires. We do not sell your personal information.

1. Who we are

Escape Proving Ground is operated by EPG, Inc. ("Escape Proving Ground," "EPG," "we," "us," or "our"), an escape room located at 3201 Mountain Road, Pasadena, Maryland 21122. This policy covers our website at escapeprovingground.com, our online booking and mailing list, our phone and text lines, and information we collect at our location.

Questions about privacy? Email staff@escapeprovingground.com or call (443) 305-2786.

2. Information we collect

Information you give us

Booking details — your name, email address, phone number, the room, date, and time you selected, party size, any add-ons, and notes you add to your reservation. Bookings are managed through our PineappleOrangeJuice booking platform.
Payment details — card payments are handled by the payment processor presented at checkout. The processor collects and handles your full card number; Escape Proving Ground does not receive or store the complete card number. We receive transaction details such as confirmation status, amount, payment method, card brand and last four digits where available, and the name associated with the booking for accounting, customer service, dispute, and refund records.
Event and group details — for team building, birthdays, fundraisers, proposals, reveals, and similar events: the organization or group name, a billing contact, headcount, and anything you tell us so we can customize the room for your occasion.
Mailing list signups — your email address and any optional profile information you provide when you separately opt in to email marketing.
SMS choices — your mobile number, whether you selected the separate SMS-consent checkbox, the date and source of that consent, and any STOP, START, UNSTOP, HELP, or similar messaging requests.
Waivers and check-in — the name and signature of each player, the date of play, and, for players under 18, the name and signature of a parent or legal guardian. We collect any accessibility or medical note only if you choose to share one so staff can keep you safe.
Messages — anything you write or say when you email, call, or text us.
Reviews and social posts — if you tag us or review us publicly, that content is public and controlled by the platform, not by us.

Information collected automatically on the website

Log data — IP address, browser type and version, operating system, referring page, pages viewed, and the date and time of each request. Our host records this to serve the site and detect abuse.
Device and usage data — screen size, language, approximate city or region derived from IP address, and how you move through the site.
Cookies and tags — see section 5. Our site uses Google Tag Manager, which loads our analytics tags.

What we do not collect

We do not ask for Social Security numbers, driver's license numbers, financial account numbers, precise GPS location, or health records. Please do not send that information to us. We do not intentionally collect sensitive categories of personal information as defined by state privacy law, and we do not use information we hold to infer sensitive characteristics about you.

3. Cameras, audio, and game photos

Every game room is monitored by video and audio. Our game master watches and listens live so we can deliver clues, keep players safe, and open the door immediately in an emergency. Signage at the entrance and the room briefing tell you this before your game begins.

Live monitoring is not the same as recording. Game room and lobby camera footage is retained on a short rolling loop, typically about 30 days, and is reviewed only for safety incidents, injury or damage claims, theft, or suspected attempts to record or spoil our puzzles. It is not used for marketing and is not shared except with law enforcement, our insurer, professional advisers, or others when reasonably necessary for a legitimate incident or legal obligation.

Victory photos. We often take a group photo at the end of a game. Posing is optional; tell your game master and we will skip it, or take it and keep it private. We post photos to social media or our website only with the group's permission given at the time of the photo. If a photo of you is already posted and you want it removed, email staff@escapeprovingground.com with approximately when you played and we will ordinarily remove it within a few business days.

Leaderboards. If we display escape times, we use first names or the team name only, never full names or contact details, and we will leave you off entirely if you ask.

4. How we use your information

Purpose	What this means
Run your booking	Hold your slot, send confirmations and reminders through channels you authorized, handle reschedules and refunds, and have your waiver ready when you arrive.
Host your game	Staff the room, deliver clues, plan your event, and keep players safe.
Answer you	Reply to calls, texts, emails, and form submissions.
Send marketing email	Send deals, puzzles, and announcements only to people who separately opted in to email marketing. Every marketing email includes an unsubscribe link.
Improve the business	See which pages and rooms draw interest, fix errors, and plan new rooms, using aggregated numbers wherever possible.
Safety, security & property	Prevent injury, theft, vandalism, and attempts to record or publish our puzzle solutions.
Legal & financial	Meet tax and accounting obligations, resolve disputes, respond to lawful requests, and support insurance claims.

We do not make automated decisions about you that produce legal or similarly significant effects, and we do not profile you for targeted advertising.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months, and we do not provide customer lists to data brokers.

5. Cookies and analytics

Cookies are small files a website stores in your browser. We use two kinds:

Strictly necessary — cookies that let pages load correctly, secure form submissions, carry you through booking and payment checkout, and remember your cookie choices. These cannot be turned off without breaking some site or booking functions.
Analytics and measurement — we use Google Tag Manager to load Google Analytics, which counts page views, referral sources, and booking clicks so we know what is working. Where the provider supports it, we enable IP anonymization and disable advertising and unnecessary data-sharing features.

Our booking pages, payment checkout, embedded map, embedded video, and social media content may be served by third-party providers and may set their own cookies when they load.

You can block or delete cookies in your browser settings; strictly necessary ones may be reset on your next visit and some features may stop working. You can also install Google's Analytics opt-out browser add-on. We honor the Global Privacy Control signal where applicable law recognizes it. Because there is no consistent standard for browser "Do Not Track" headers, we do not respond to DNT separately.

6. Calls, texts, and email

You can reach us by phone at (443) 305-2786 and by text at (443) 351-6659. When you contact us, we keep the message and your number or address so we can respond and retain a record of what was arranged.

Transactional and customer-care texts. Merely entering or providing a mobile number does not enroll you in proactive text messages. During public online booking, you may separately select an optional, unchecked SMS-consent box agreeing to receive transactional messages from Escape Proving Ground, including booking confirmations, reminders, cancellations, payment or waiver links, and important reservation updates. The checkbox is not required, and consent is not a condition of booking or purchase. If you text us first with a booking-related question, we may reply to that conversation, but your message does not enroll you in unrelated proactive or promotional texts. If you previously opted out, you may re-enroll by texting START or UNSTOP to (443) 351-6659.

Message frequency varies based on your booking activity. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help. Full program details are in our SMS Terms & Conditions.

No mobile information will be sold or shared with third parties or affiliates for marketing or promotional purposes. This includes your mobile phone number, your opt-in status, text messaging originator opt-in data and consent, and the content of your text messages with us.

All categories described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties or their affiliates for marketing or promotional purposes. We share mobile information only with service providers that deliver messages on our behalf, and they may not use it for their own marketing.

Email. Booking confirmations and receipts are transactional and are sent as necessary to administer a booking. Marketing email goes only to people who separately opted in to the mailing list, and every marketing message includes an unsubscribe link.

We share personal information only in these situations:

Service providers acting on our instructions — PineappleOrangeJuice for booking and scheduling, the payment processor selected for checkout, our website host and content delivery network, Google for Tag Manager and Analytics, our email and text messaging providers, and our waiver and photo-storage providers. Each may use your data only to provide its service to us, subject to its applicable contract and privacy terms.
Group organizers — if someone books and pays for your group, they may see reservation details needed to manage that booking. If you would rather your details not appear on a group booking, tell us and we will handle your waiver separately when practical.
Professional advisers and insurers — our accountant, insurer, or attorney, where reasonably necessary, including for an incident or claim.
Legal and safety reasons — when we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of EPG, our guests, or the public. Where legally permitted, we will try to notify you first.
Business transfers — if EPG, Inc. is sold, merged, or reorganized, customer information may transfer with the business. We will provide notice before your information becomes subject to a materially different policy.

Service-provider access does not permit those providers or their affiliates to use mobile numbers, SMS opt-in data, or consent for their own marketing or promotional purposes.

8. How long we keep data

Type of data	Typical retention
Booking and event records	3 years after the reservation date
Payment and accounting records	7 years, for tax and audit requirements
Signed waivers	7 years from the date of play; longer for a minor, until 3 years past their 18th birthday
Video and audio from cameras	Approximately 30 days on a rolling loop, unless preserved for a specific incident or claim
Victory photos	Until you ask us to delete them; unposted photos are ordinarily cleared within about 12 months
Mailing list	Until you unsubscribe, plus a suppression record so we do not re-add you
Texts, emails, and voicemails	Up to 24 months
SMS consent and suppression records	For as long as reasonably necessary to document consent and honor opt-out requests
Website server logs	Up to 12 months
Aggregated analytics	Kept indefinitely once it no longer identifies anyone

We may keep information longer where needed to resolve a dispute, defend a claim, or comply with the law. When a retention period ends, we delete the data or strip it of information that identifies you.

9. Your rights and choices

Wherever you live, we will honor these requests, subject to applicable exceptions:

Access — request a copy of personal information we hold about you and information about its categories, sources, purposes, and recipients.
Correction — ask us to fix information that is inaccurate or incomplete.
Deletion — ask us to erase information, except records we must keep by law or reasonably need to administer a transaction, prevent fraud, preserve opt-out preferences, or defend a legal claim.
Portability — request available information in a portable, machine-readable format.
Communication choices — unsubscribe from marketing email using its unsubscribe link and opt out of SMS by replying STOP.
Photo choices — decline a victory photo, decline public posting, or ask us to remove a previously posted photo.
Opt out of sale, sharing, or targeted advertising — we do not do any of these, and we honor the GPC signal where applicable.
Non-discrimination — we will not charge you more, refuse a booking, or give you a worse experience because you exercised an applicable privacy right.

How to make a request: email staff@escapeprovingground.com with "Privacy Request" in the subject line, or call (443) 305-2786. We will verify your identity, usually by confirming that you control the email address or phone number associated with the booking, and respond within the period required by applicable law. You may use an authorized agent; we may request proof of authority and may confirm the request directly with you.

If we deny a request, we will explain why and provide any appeal instructions required by applicable law. To request reconsideration, reply to our decision with "Appeal" in the subject line.

Complaints: please contact us first so we have an opportunity to address the concern. Maryland residents may also contact the Maryland Attorney General's Consumer Protection Division.

10. Security

We use reasonable and appropriate safeguards, including HTTPS/TLS for our website, payment processing handled by established payment providers so complete card data is not stored by Escape Proving Ground, unique accounts and access controls for booking and camera systems, multi-factor authentication where available, access limited to personnel who need it, physical safeguards for paper records, and regular software updates.

No system is perfectly secure and we cannot guarantee absolute security. If a breach affects personal information, we will notify affected individuals and appropriate authorities as required by applicable law.

11. Children and minors

We are a family escape room and welcome children with a parent or guardian involved. We do not knowingly collect personal information online directly from children under 13, and our booking and mailing-list forms are intended for adults. A parent or legal guardian must sign the waiver for a player under 18 when required by our waiver process.

We do not sell or share the personal information of anyone under 16, and we do not intentionally post identifiable photos of minors to social media without appropriate permission. If you believe a child under 13 gave us information online without appropriate authorization, email staff@escapeprovingground.com and we will investigate and delete it where appropriate.

12. Third-party links and embedded content

Our site links to or embeds content and services provided by other businesses, including our booking platform, payment processors, Google Maps, analytics tools, video players, and social media services. Embedded content may behave as if you visited that provider directly, and the provider may collect information and set its own cookies. We are not responsible for third-party privacy practices; review the notices presented by those providers.

13. Visitors from outside the United States

We operate from Pasadena, Maryland, and our service providers are primarily in the United States. If you visit our site or book from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. If you are in the EEA or UK and wish to exercise applicable data-protection rights, email us and we will evaluate your request under the applicable standard.

14. Changes to this policy

We may update this policy as our business, technology, or legal obligations change. When we do, we will revise the "Last updated" date above. If a change is material, we will provide notice through an appropriate channel before it takes effect where required. Earlier versions are available on request.

15. Contact us

EPG, Inc. — Escape Proving Ground
3201 Mountain Road, Pasadena, MD 21122
Phone: (443) 305-2786 · Text: (443) 351-6659
Email: staff@escapeprovingground.com
Web: escapeprovingground.com

Put "Privacy Request" in the subject line and we will route it promptly. We aim to acknowledge messages within five business days.