Privacy policy
Effective date: October 5, 2026. This policy covers the Lockmates website (playlockmates.com) and its waitlist. The game has its own policy.
Who we are
Lockmates is made and published by 1901 Technologies Inc., 1025 King St E, Unit 107 #1771, Cambridge, ON N3H 3P5, Canada. The person in charge of protecting your personal information is our Privacy Officer, 1901 Technologies Inc. You can reach them at privacy@playlockmates.com.
What we collect, and why
- Your first name, to greet you in our emails.
- Your email address, to send your invite, launch news and updates about your place on the waitlist. If you later sign in to the game with the same email (or with the invite we sent you), we use it to give your account the waitlist’s Halloween characters and, if you are among the first 1,000 when the game opens to everyone, your Lockmates Founder number (terms, section 5).
- Your birth year (and birth month, only if we need it to work out your age), to check you are old enough to join.
- Your country and region, worked out from your connection, to apply the right age rules and privacy defaults where you live.
- Your consent: the wording you agreed to, its version and the time, as a record required by Canada's anti-spam law (CASL).
Confirming your email. When you join, we email you a 6-digit code, and you're on the waitlist once you type it. Until then you have no place and we send you nothing else; if you never type it, we delete what you entered after 24 hours.
We also run Cloudflare Turnstile to stop automated sign-ups. It looks at signals from your browser, not at what you type. We never sell your information, and we never give your email address to advertising companies.
Invite links and your place in line
Every signup gets a short referral code and a personal invite link. When a friend joins through your link, you move up the list, and you can see how many friends have joined. You never see who they are, and we never contact your friends: they only hear about Lockmates if you share the link yourself. This site does not remember your signup on your device, so someone else using the same computer can't see it. To check your place, use "Check your place" with your email or your code, or the link in our emails.
If someone types an email address that is already on the list, the site says it is already on the list and shows that person's place in line, invite link and how many friends joined. It does not show any other details.
Quebec
Lockmates is not available in Quebec yet, so this site does not accept sign-ups from Quebec. We hope to welcome players from Quebec later.
Minimum age
You need to be at least 16 in the European Union, the EEA, the UK and Switzerland, and 13 everywhere else. If you are younger, the form tells you so and nothing is saved.
Cookies and your choices
We group cookies and similar browser storage into four kinds:
- Essential keeps the page and the waitlist form working, including the check that you are a person, and remembers your cookie choices. Always on.
- Functional remembers small preferences. Nothing on this site uses it yet.
- Analytics lets us count visits over time and see which parts of the page help.
- Marketing lets advertising companies tell us when one of our ads led someone here.
Defaults depend on where you are:
- European Union and EEA, UK and Switzerland: nothing except Essential runs until you say yes. Not even anonymous visit counts. If we cannot tell where you are, we treat you the same way.
- United States: we count page visits anonymously, with no cookies and nothing stored on your device. Analytics cookies, session replays and Marketing stay off until you say yes.
- Everywhere else, including Canada outside Quebec: all four start on, and you can switch any of them off.
Do Not Sell or Share. The "Do Not Sell or Share My Personal Information" link at the bottom of every page turns Marketing off and saves that choice.
Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control signal, we turn Marketing off wherever you are, and the cookie panel says so. Browsers' older "Do Not Track" setting has no agreed meaning, so we do not act on it; use GPC or the cookie settings instead.
Changing your mind. Use Cookie settings, also linked at the bottom of every page, at any time. Turning something off reloads the page so it stops straight away.
Analytics
We use PostHog. Where anonymous counting is allowed, it records the page, where the visit came from (such as a link or ad campaign), your device and browser type, and an approximate location (country, region and city) worked out from your IP address. The IP address itself is not stored. With Analytics on, PostHog also stores an identifier so it can recognise a return visit, records clicks and scrolling as heatmaps, measures page speed, and may record how you moved through the page as a session replay. Anything you type, including your email, is hidden in replays.
Advertising
With Marketing on, and only then, this site loads the Meta Pixel, the TikTok Pixel and the Google tag for Google Ads. They tell us which ads bring visitors, and that someone joined the waitlist, without your email address. These companies may also use the data under their own privacy policies. None of them is used inside the game. Our ads are aimed at adults.
Who handles your information, and where
- Cloudflare serves this site and runs the person check, on its network around the world.
- Our own server and database, in Quebec, Canada, hold the waitlist.
- PostHog, in the United States, handles analytics.
- Resend, in the United States, sends our emails.
- Meta, TikTok and Google receive data only if you turn Marketing on.
Where information leaves your country, we choose providers that protect it to the standard of the laws below.
How long we keep it
Waitlist details: until the beta opens to everyone, or until you unsubscribe, whichever comes first. Analytics: 12 months. We keep a record of the emails we send you (which kind, when, and whether it was delivered or bounced, never what it said) for 12 months. If an address bounces for good or reports our email as spam, we stop emailing it and keep only the address and the reason, so it stays that way.
Emails
We only email you if you ticked the consent box. You get a welcome email with your place and your invite link, and an update, at most once a day, if other people move ahead of you or you are close to missing the next batch of invites. Later, we email your invite and launch news. Every email says who sent it and has an unsubscribe link that works straight away. Our emails have no tracking pixels and we do not track clicks.
Your rights
Under Canada's PIPEDA, Quebec's Law 25, the GDPR and the UK GDPR, depending on where you live, you can ask to see the information we hold about you, correct it, delete it, get a copy in a portable format, and withdraw your consent at any time. Email privacy@playlockmates.com and we will reply within 30 days. You can also complain to a regulator: the Commission d'accès à l'information (CAI) in Quebec, the Office of the Privacy Commissioner of Canada (OPC) elsewhere in Canada, or your local data protection authority in the EU or the UK.
Changes
If we change this policy, we will update the effective date at the top, and if the change is important we will email people on the waitlist before it applies.