Privacy for
your experience.

Who we are

Altoray LLC operates Obelisk. This notice covers our customer accounts, paid purchases, group participation and play. For information about browsing this website and requesting launch notices, see the discovery privacy notice.

For a privacy question or a request to access, correct or delete your information, email hello@obelisk.place. You can also use Help & safety to report a privacy concern.

Information we use

We use account and contact information to sign you in, recover your purchases and help you. Purchase, payment-status and agreement records establish what was bought and accepted. Stripe processes payment details; Obelisk receives payment status and transaction references, not your full card number.

Group membership, participant names, start time, progress and completion records let a group use and resume its experience. Other group members can see limited participation information, such as display names and shared progress. They do not receive your payment details or private support report.

We also keep information you choose to send in a support, safety or privacy report, and technical records needed to operate and protect the service. If you submit feedback, we use the information you provide to record and review it. Do not include sensitive information or another person's personal details.

Location, camera and audio

Your browser uses your current location to find nearby stops and check progress. The paid service saves completed stops and related progress; it is not designed to keep a continuous trail of your precise movements. A location you choose to include in a report is saved with that report.

Camera images used for augmented reality remain on your device unless a feature clearly asks you to upload something. Experience audio is delivered to your device. You can decline or revoke location and camera permission in your browser; the related feature may then be unavailable.

Fictional AI characters

Some experiences include fictional AI characters. Your messages and relevant conversation history are sent to Anthropic's Claude API to generate replies. Conversation history may also be saved by Obelisk or in your browser to let you continue the story.

Do not send sensitive personal information or information about children to a character. Replies can be inaccurate and are not emergency, medical, legal, access or navigation advice. Character chat is intended for story and clues. An adult should guide family conversations and review what is sent; it is not offered as an independent chat service for children.

Service providers and sharing

Providers help us with sign-in, hosting, databases, private storage, payments, email, maps and AI replies. These include Supabase, Vercel, Stripe, Resend, Apple iCloud Mail and Anthropic. Player maps use Esri imagery, CARTO maps or OpenStreetMap tiles, depending on the experience's settings. Providers may receive technical request information, such as your IP address, when your device connects to them.

We do not sell personal information or use paid-experience information for targeted advertising. We may share information when required by law, to protect participants or the service, with your direction, or in a business transaction subject to appropriate safeguards. Providers' own retention practices are separate from Obelisk's records.

How long we keep information

We keep information while needed to provide an active or unused purchased pass, preserve progress, handle a request or report, resolve a payment dispute, protect the service or meet legal obligations. We review access, correction and deletion requests manually. Some transaction, agreement, safety or security records may need to be retained for a continuing purpose; we explain applicable limits when handling a request.

Automatic deletion is not currently active across every data category. Recovery copies and provider backups can retain information after it is removed from the active service. We consider these copies when handling a request and record completed privacy actions so they can be reapplied if data is restored. We do not promise a fixed purge date for every copy.

We use access controls, private asset storage and encryption or hashing where appropriate. No system is perfectly secure.

Family participation

Paid Obelisk experiences are designed primarily for adults. Buyers and people who sign in or join individually are adults, including the adult responsible for a shared phone. Children may accompany an adult with a parent or legal guardian’s permission and supervision, subject to any age restrictions for the experience. The responsible adult should check its description, route and suitability guidance, and stays in charge of the phone and character chat. Children do not need an account to accompany the group. Do not submit a child’s name, email, photograph, voice recording or other personal information through account, guest, character, feedback or reporting features.

Contact us if information about a child has been submitted or a family experience raises a privacy concern. We review the information and take action where required.

Your requests and choices

Email hello@obelisk.place to request access, correction, deletion or another applicable privacy right. We verify that a request concerns your own information before disclosing or changing account-linked records. An adult guest may need invitation or outing context to identify their own record without exposing another participant's information. We do not routinely request identity documents.

A privacy request does not automatically cancel a purchased pass. We explain any information needed to handle your request and any justified retention limit. Signing out does not delete account, purchase or group records.

Versions and contact

This notice is version 2026-10-25 and applies from its publication. A new notice does not rewrite documents or acceptance evidence retained for an earlier purchase.

Contact Altoray LLC at hello@obelisk.place or 418 Broadway, STE N, Albany, NY 12207, USA.