Privacy Policy

Effective date: 01/01/2026 Last updated: 07/16/2026

Sprockets Fun Foundry (“Sprockets,” “we,” “us,” or “our”), operated by Rushmore Cave LLC, respects your privacy. This Privacy Policy explains what information we collect through the sprockets.fun website (the “Site”), how we use it, who we share it with, and the choices you have.

This policy covers only the Site. It does not cover the separate third-party ticketing and payment platform we link to, our on-site point-of-sale systems, or other third-party websites, which have their own privacy practices (see Section 4).

By using the Site, you agree to this Privacy Policy. If you do not agree, please do not use the Site.

1. Information we collect

a. Information you give us. We only collect the information you choose to submit through the Site, for example when you:

Contact us or submit a party, group, or company-event inquiry (your name, contact details, and the details of your message or request).
Join the Birthday Club — see Section 6. This program is intended to be completed by a parent or guardian. The current form requests a child’s name and date of birth and a parent’s name and mailing address. We handle children’s information under the special rules in Section 6.
Submit a donation request (your name, organization, contact details, request details, and any file you upload).
Apply for a job. Our employment application is hosted on our affiliated rushmtn.com site; the information you submit there is handled as described in the Rush Mountain Adventure Park privacy policy.

b. Information collected automatically. When you visit the Site, we and our analytics provider automatically collect standard technical information such as your IP address, browser and device type, the pages you view, the site that referred you, and the dates and times of your visits, using cookies and similar technologies (see Section 3).

We do not collect payment card information on the Site. Ticket, arcade, food, and beverage purchases are handled by our third-party ticketing platform or by our on-site systems, not on the Site (Section 4).

2. How we use information

We use the information we collect to:

Respond to your inquiries and party, group, and donation requests;
Administer the Birthday Club and send birthday offers to the parent or guardian who enrolled (Section 6);
Operate, maintain, secure, and improve the Site;
Understand how the Site is used through analytics;
Detect and prevent fraud, abuse, or technical problems; and
Comply with our legal obligations.

We do not sell your personal information, we do not sell or disclose children’s personal information, and we do not share personal information for cross-context behavioral advertising.

3. Cookies and analytics

We use cookies and similar technologies to keep the Site working and to measure how it is used through analytics (for example, Google Analytics). You can control or delete cookies through your browser settings, though some features of the Site may not work properly if you do. Because there is no common industry standard for “Do Not Track” signals, the Site does not currently respond to them.

4. Tickets, purchases, and payment

Ticket, pass, party, arcade “Fun Card,” food, and beverage purchases are handled either on a separate third-party ticketing and payment platform that we link to, or through our on-site point-of-sale systems, not on the Site. When you make an online purchase, you provide your information (including payment details) directly to the third-party platform, and its collection and use of your information are governed by its own privacy policy and terms, not this one. We do not receive or store your full payment card details. We encourage you to review that platform’s privacy policy before purchasing.

5. How we share information

We share information only as described here:

Service providers. We use trusted providers to operate the Site on our behalf, such as our website hosting provider, our analytics provider (for example, Google Analytics), and services that help deliver Site content and images. They may use your information only to provide services to us.
Our third-party ticketing provider, when you choose to make a purchase (Section 4).
Legal and safety. We may disclose information if required by law, subpoena, or legal process, or where we believe it is necessary to protect the rights, property, or safety of Sprockets, our guests, or the public.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not disclose children’s personal information to third parties except as strictly necessary to provide the Birthday Club, and never for third-party advertising (Section 6). We may share aggregated or de-identified information that cannot reasonably be used to identify anyone.

6. Children’s privacy (COPPA) — Birthday Club

We care about protecting children’s privacy and comply with the federal Children’s Online Privacy Protection Act (COPPA). The Site is intended for a general and family audience and is not directed to children under 13, and children should not submit forms on the Site themselves.

The Birthday Club is intended to be completed by a parent or guardian, not by a child. Because it can involve information about a child under 13, we handle it as follows:

Parental consent. We obtain verifiable parental consent before collecting personal information from or about a child under 13, and we explain what we collect and why at the point of enrollment. [CONFIRM: the Birthday Club form must be configured so that a parent or guardian completes it and provides consent. If the current form does not do this, it should be updated before this policy is published.]
What we collect and data minimization. We collect only what is needed to send a birthday offer. [CONFIRM: the current form collects the child’s full date of birth and a mailing address. To minimize children’s data, we recommend collecting only the child’s first name and birth month/day, and the parent’s contact information, and not the child’s birth year or full address. Update this section to match the final form.]
No unnecessary conditions. We do not require a child to disclose more information than is reasonably necessary to participate.
No third-party sharing for advertising. We do not disclose children’s personal information to third parties except as integral to running the Birthday Club (for example, a provider that helps us send the offer), and never for third-party or targeted advertising. We would obtain separate verifiable parental consent before any other disclosure.
Parents’ rights. A parent or guardian may, at any time, review the information we have collected about their child, ask us to delete it, and refuse further collection or use, by contacting us (Section 11). We may need to verify that you are the child’s parent or guardian first.
Retention. We keep children’s information only as long as reasonably necessary to run the Birthday Club, and then delete it (see Section 7).
Security. We maintain reasonable safeguards to protect children’s information and require providers that handle it to protect it as well.

If you believe we have collected personal information from a child under 13 without proper parental consent, please contact us (Section 11) and we will delete it.

7. Data retention

We keep the information we collect only for as long as reasonably necessary for the purposes described in this policy, to respond to you, to comply with our legal obligations, and to resolve disputes. When information is no longer needed, we delete or de-identify it.

Children’s data retention. Information collected through the Birthday Club is used solely to administer the birthday program and send a birthday offer. We retain it only while the child is enrolled and for a reasonable period afterward to run the current program cycle, and no longer than 24 months from the last birthday offer, after which we delete it. A parent or guardian may request deletion at any time (Section 6).

8. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including children’s information. No website or method of transmission or storage is completely secure, so we cannot guarantee absolute security. In the event of a data breach involving personal information, we will notify affected individuals (and, where required, the South Dakota Attorney General) consistent with South Dakota’s data breach notification law (SDCL §§ 22-40-19 through 22-40-26) and other applicable law.

9. Your choices and rights

You may:

Ask us for a copy of the information we hold about you, or ask us to correct or delete it (or, as a parent or guardian, your child’s Birthday Club information), by contacting us (Section 11); and
Control cookies through your browser (Section 3).

South Dakota does not currently have a comprehensive consumer data privacy law, but we will make reasonable efforts to honor access, correction, and deletion requests. If you are a resident of a state that grants additional privacy rights, you may contact us to exercise any rights available to you, and we will respond as required by applicable law. We will not treat you differently for exercising these choices.

10. Third-party links; where information is processed

The Site may link to third-party websites and services (including our sister property, Rush Mountain Adventure Park, our ticketing provider, and partner businesses). We are not responsible for their privacy practices, and this policy does not apply to them. We operate in the United States, and your information is processed and stored in the United States.

11. Accessibility, changes, and contact

Accessibility. We want the Site to be usable by everyone and aim to follow recognized accessibility guidelines (WCAG 2.1 Level AA) as a benchmark. If you have trouble accessing any part of the Site, please contact us and we will work to help.

Changes. We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above and, for significant changes (including any change affecting children’s information), provide a more prominent notice.

Contact us: Rushmore Cave LLC — Sprockets Fun Foundry 221 Swanzey Street, Keystone, SD 57751 Phone: (605) 666-4242 · Email: info@sprockets.fun For questions about children’s privacy or the Birthday Club, contact us at the same address and mark your message “Children’s Privacy.”