Privacy Notice
Beta terms and privacy notice
Version 2026-09-08-beta-1. Operated by Paul Benedetto.
Information used
We use your sign-in email and authenticated user identifier; the public display name and optional broad location you enter; uploaded photos and captions; hunt participation; voting-round assignments, votes or skips, and community awards; appreciations; reports; moderation outcomes; and terms/age acknowledgments with their version and time. Authentication and hosting providers also process technical information such as IP addresses, device/browser information, and service logs. We do not request precise device location or your full birth date.
What is public
Approved photos, captions, display names, optional broad locations, hunt dates, appreciation counts, and awarded community-favorite recognition appear in the public gallery. Pending, reported, and rejected photos are restricted to their uploader and authorized reviewers. Do not include information you want to keep private. Images may contain identifying details even after EXIF/XMP, IPTC metadata and comments are removed before storage and screening.
Why we use it
We use information to authenticate you, operate hunts and your passport, publish discoveries you authorize, prevent abuse, moderate content, handle reports and requests, and maintain evidence of permissions. We do not sell uploaded photos. This beta does not integrate advertising or marketing tracking. Future advertising or analytics would require reassessing this notice and any applicable consent controls before activation.
Providers and automated screening
Cloudflare hosts the game, database, and private photo storage. Supabase handles accounts and authentication, and Google or Apple handles provider sign-in if you choose it. The native app stores session credentials in operating-system secure storage. When automated moderation is configured, the submitted photo and caption are sent to OpenAI’s Moderation API. The moderation request does not intentionally include your account email or profile name. OpenAI processes submissions under its API data policies; special abuse or legal retention rules may apply. No promise of zero retention is made. Service providers may process data outside your country.
Cookies
Essential authentication cookies maintain your sign-in session. This beta does not include advertising cookies. Signing out clears the application’s local session; your Google or Apple session may remain active separately.
Retention and deletion
Photos remain stored until you delete them or the operator removes them; rejection alone does not delete a photo because review can be requested. Deleting a discovery removes the stored photo and hides the entry. The database currently retains its caption, identifiers, status, hunt history, and consent/moderation records. Voting records and recognition are retained with account activity until removal is requested, subject to necessary integrity and legal retention. Individual voting choices are not displayed publicly. Initiate permanent account deletion from Account settings in the app or website. Apple users confirm with Apple in the iPhone app. Discoveries are hidden when the request is accepted; background processing removes stored photos, profile, captions, participation records, blocks and authentication account, normally within minutes. Outages may delay completion and failed cleanup is retried. A minimal account identifier is retained for 24 hours after completion to prevent stale requests from recreating data. Contact us if deletion has not completed within 24 hours. Provider backups and security logs follow their configured retention. Upload-limit counters are removed after they are more than two UTC days old. Blocking records remain until unblocked or the account is deleted. Terms acceptance and participation data remain while the account exists; individual photo deletion retains the discovery record until account deletion. Hosting and authentication backups and security logs expire under provider retention settings; they are not immediately erased by an app deletion request.
Your choices and requests
You can edit your profile, omit broad location, delete discoveries, sign out, appeal blocked submissions, and contact the operator about access, correction, export, or deletion. We may verify account ownership before acting. Rights and required response periods vary by jurisdiction; this draft does not limit applicable rights. Contact details appear on Help & removal requests when configured.
Children
This beta is intended for adult account holders, 18 and older. Do not submit children’s photos or allow children to operate accounts. If you believe a child has supplied personal information, contact the operator for investigation and appropriate removal. An age checkbox alone is not a complete child-privacy compliance program.