Privacy notice

What we hold about you.

Without an account: nothing. Your game stays on your phone. To tell a guest about treasures other players have hidden nearby, the phone asks the server, without an account, which squares of the six or so kilometres around it hold one, and the name and picture of one when you walk onto its square; the server sees that area and your IP address, never your route, and the game stores neither. To show Loot Drop areas, where businesses have scattered treasures, the phone asks the server for the areas near a position rounded to about a kilometre, with or without an account; nothing about the question is stored. With an account: your e-mail address and a technical user id; the identifiers of the squares you have cleared, each with the time it was cleared and whether you walked it, it was enclosed, or you walked it in a group; the squares inside a cleared pocket where you picked up a treasure, with the time; the squares you discovered first anywhere; the treasures you have found and when; the treasures you have hidden (name, description, picture, square, points, validity, how many may find them) and how many players found each; your special treasures and points that cannot be worked out again from the squares; and your profile if you set one: a nickname, a few words about yourself and a picture. The app also keeps a random public id for you, which is what other players see in place of your user id.

What we do not hold.

Your movement track. Your position is used on the phone to clear fog and is never uploaded as such; only the square identifiers above leave the phone, and they say where you have been, not the route or the speed. We do not use advertising or analytics services.

Why, and on what basis.

To run the game and keep your progress across phones (performance of our agreement with you, GDPR article 6(1)(b)); to keep the shared record of who cleared a square first and to show treasures you hid to the players who find them (our legitimate interest in a game that is the same for everyone, 6(1)(f)); to send you a sign-in code by e-mail (6(1)(b)); and to prevent abuse and keep the service secure (6(1)(f)). Location on your phone is used only with the permission you give the phone.

Who else sees it.

Other players see your public id, nickname, words and picture on the treasures you hid, and how many players found them, never who. Our servers run on Supabase in the EU (Stockholm); Supabase sends the sign-in e-mails. Map tiles come from OpenFreeMap, which sees your IP address and which part of the map you look at. The weather comes from Open-Meteo, which is sent your position rounded to about ten kilometres. None of these receive your name or e-mail. No data is transferred outside the EU or EEA by us.

How long.

As long as you have an account. You can delete it yourself (Account, Delete account): the account closes at once and is purged from our servers seven days later, except that the record of which squares were discovered first stays without any link to you. Deleting the app or signing out removes everything from the phone and nothing from the account.

Your rights.

You may ask what we hold about you, have it corrected or deleted, restrict or object to its processing, and receive it in a machine-readable form. Where processing rests on legitimate interest you may object at any time. Write to [email protected]; we answer within a month. You may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

No automated decisions are made about you and no profiling is done. Children may play: without an account nothing about the player leaves the phone. An account for a child under 13 is created and held by a parent or guardian, who is responsible for the child's play.