YOUR INFORMATION

Privacy notice

Last updated November 9, 2026 · Version 2026-11-09

This notice describes information used by Funplay Kingdom LLC, doing business as Cosmic Minigolf and Play, through this website and its staff portal. For privacy questions, contact info@cosmicminigolfandplay.com.

Party reservations

We collect the adult organizer’s name, email, phone number, chosen store, date and time, party package, number of children, and acceptance of booking terms. We use this information to arrange the event, manage payments and cancellations, respond to questions, and keep business records. Please provide the adult organizer’s details rather than children’s personal information.

Card payments

Square provides the card-entry form and processes card payments. Our booking system receives a payment token and records the payment reference and status. It does not store your full card number or card security code. Square handles information under its own privacy notice.

Website storage and security checks

The site stores your selected location in your browser. A temporary payment reference and secret may be stored in session storage so you can check an interrupted payment. Staff sign-in and an authorized time-clock browser use authentication and device cookies. When enabled for live payments, Cloudflare Turnstile checks requests to help detect automated abuse and may process technical browser and network information.

The application counts repeated requests using keyed hashes rather than saving raw IP addresses in its rate-limit table. Hosting providers may process technical request logs for operation and security.

Advertising measurement

If you allow advertising measurement, we use Google Ads cookies and tags to understand which ads lead to website visits, completed admission purchases, and paid party deposits. Google may receive technical browser information, ad click identifiers, page addresses without private access codes, a non-personal transaction identifier, the amount paid, and currency. We do not send names, email addresses, phone numbers, card details, or private ticket or reservation links in our conversion events. Personalized advertising is disabled in this integration.

You can allow or decline measurement in the privacy choices prompt and change your choice using “Cookie choices” in the footer. The site remembers this preference in your browser and respects Global Privacy Control. Declining does not affect purchases or reservations. We use browser storage to help avoid duplicate conversion reports. Google handles information under its privacy policy. Payment simulations are excluded from advertising conversion reports.

Service providers and access

The website uses hosted infrastructure provided through OpenAI Sites and Cloudflare, Square for payment processing, and Resend for enabled transactional email confirmations. Authorized Cosmic staff can access reservations for their assigned store; administrators can access records across stores. We use customer information to provide and support Cosmic services and may disclose it when required by applicable law or to protect against fraud.

Advance admission tickets

Admission purchases store adult contact information, selected activities, price and payment status. Private ticket links and QR codes authorize access to the ticket; keep them private. Authorized store employees record activity and gift check-ins with the store, employee and timestamp. Used entries cannot be redeemed again. We retain these records for service, payment reconciliation and abuse prevention.

Cosmic Score digital scorecards

The optional digital scorecard stores player nicknames, selected location, hole scores, group par settings and mission challenges. Use nicknames rather than full names or other personal details, especially for children. Group members with the crew code can view scores and claim an unclaimed player. Each player can edit their own score during the round; the host can enter and correct all scores. These are self-reported scores, with no public store-wide ranking or prizes.

A private access token is stored in your browser to reconnect to your round. Keep the crew code within your group. Rounds expire for access 24 hours after creation; expired rounds are removed during cleanup triggered by later game creation. They are excluded from the operational database snapshots. If the browser cannot save your access, keep its tab open. The scorecard needs an internet connection to save and synchronize across phones.

You can choose to export a branded result image and share it through your phone. The image contains your crew’s nicknames, point totals, store and round length. It does not include your crew code or private access token. Social apps receive the image only when you choose to share it.

Staff portal

Cosmic staff accounts store a username, name, assigned role and location, and a securely hashed password. Sign-in sessions use authentication cookies and may record the browser and IP address for account security. Account creation, password changes and access changes are recorded in an audit history. Only the owner can create accounts, reset temporary passwords or disable access.

The portal stores assigned accounts, employee names and payroll codes, hashed time-clock PINs, clock-in and clock-out records, correction history, authorized-browser records, repair reports and uploaded photos, inventory movements, and internal messages. Administrators review work records and operational activity. Store conversations are shared with the store account; messages to Luisa or Rafael are available to that store and the corresponding administrator. Do not post card details, identification documents, medical information, or unrelated confidential material in chat or repair photos.

Retention and requests

We retain records as needed to manage bookings, business operations, disputes, payroll review, and applicable recordkeeping obligations. Access is limited according to staff roles. Contact us to request access to, correction of, or deletion of your information. We will review the request, verify identity where appropriate, and explain any records that must be retained.

Children and event invitations

The reservation form is intended for adults arranging visits or events. It does not request children’s dates of birth or individual attendee lists. If you use the optional invitation tool, share the resulting invitation only with its intended recipients. Contact us if you believe a child has submitted personal information through this site.

Changes

We may update this notice when website features or information practices change. The current version and update date appear above.