Privacy Policy

Overview

RockCandy respects your privacy. This policy explains what information we collect, how we use it, how it may be shared, and the choices you have when interacting with RockCandy websites and digital experiences.

RockCandy operates digital experiences that may connect to content, locations, physical assets, partners, and other contexts. Some information is necessary to deliver those experiences, understand how they perform, maintain security, and improve them over time.

What we collect

We collect information needed to operate RockCandy websites and experiences, understand engagement, maintain security, and provide requested functionality.

Interaction data (e.g., experience views, taps, scans, content interactions, completion paths, and return visits)
Device and usage information (e.g., browser type, device type, operating system, and technical information associated with a request)
Location information when an experience uses location and you grant the required device or browser permission
Information you choose to provide (e.g., forms, submissions, email sign-ups, RSVP details, claims, or other opt-in interactions)

Note

When an experience requests personal information or device permissions such as location, the purpose of that request should be presented in the context of the experience.

How we use information

We use information to operate, maintain, measure, secure, and improve RockCandy websites and experiences, including to:

Deliver digital experiences and route entry points such as QR codes, NFC-enabled objects, and direct links
Measure experience performance, engagement depth, return behavior, and defined outcomes
Provide contextual or location-aware experience behavior when enabled
Understand performance across content, entry sources, locations, connected assets, partners, and sponsors
Improve experience structure, flow, usability, and performance
Support troubleshooting, quality assurance, fraud prevention, and security monitoring
Respond to requests or communications you initiate

Consent and transparency

When an experience asks you to provide personal information, the information is used for the purpose described at the point of collection and as otherwise described in this policy.

Location-aware features require the applicable device or browser permission. You can decline or withdraw that permission through your device or browser settings, although doing so may limit parts of an experience that depend on location.

RockCandy focuses measurement on experience engagement rather than building personal identity profiles.

How information may be shared

We may share information in limited circumstances, including:

With service providers that help us host, operate, secure, measure, or communicate through RockCandy websites and experiences, subject to appropriate contractual or confidentiality requirements
With the client or experience owner when information is collected as part of that client’s experience, such as a form submission, RSVP, claim, or other user-provided information
As necessary to comply with applicable law, regulation, legal process, or enforceable governmental request
As necessary to protect the security, integrity, rights, or safety of RockCandy, our clients, our users, or others

Data retention

We retain information for as long as reasonably necessary to operate experiences, provide reporting and services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of information, the experience, contractual requirements, and applicable legal obligations.

Note

If you interact with an experience operated for a third party, such as a brand, venue, event, team, producer, or creator, that party may have its own policies governing information it receives through the experience.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices

Depending on how you interact with RockCandy, you may have choices such as:

Declining to provide optional personal information
Declining or disabling location access through your device or browser settings, which may limit location-aware features
Using browser or device controls available to manage cookies, storage, or other supported tracking technologies
Choosing whether to participate in optional forms, submissions, claims, registrations, or other opt-in interactions

Updates to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above.

If changes are material, we will take reasonable steps to provide notice where appropriate.