privacy

what i collect

your email address, because that is how you sign in. there is no password. a username is made from your email when the account is created and you can change it.

your location, but only while you have a quest active. the app takes a position roughly every twenty seconds and sends them up in batches. that is how the game knows you actually went, which is the one thing it has to be sure of. with no quest active, it is not recording where you are.

the game state you build: quests accepted and finished, places visited, xp, coins, level, items, and your character.

anything you choose to add: an optional photo and caption, a private reaction to a place, a report that somewhere is closed or wrong.

a small amount of technical housekeeping: your ip address, used to stop the same address hammering the signup and bug report forms, and whatever you type into the bug report popup.

what i do not do

no advertising, no ad networks, no tracking pixels, no analytics script following you around. the app genuinely does not have any.

i do not sell your data and i do not share it with anyone for marketing. it is not a revenue plan i am keeping quiet about, the plan is people buying hats for their character.

i do not show anyone where you are right now, and neither does the app.

what other people can see

your profile page is public: your username, level, the places you have colored in, and any photos you chose to add. if you would rather it were not, turn on the private setting and it disappears from public view.

the leaderboard shows your username and level.

the map on the front page is everyone's completions mixed together. it carries no names, no times, and nothing that ties a spot to a person, it only shows places that were finished at least an hour ago, and it leaves out anyone with a private profile entirely. as of august 2026 it also only redraws once a day.

who else touches it

supabase stores the database, the sign in system, and any photos you upload. vercel hosts the site and keeps short lived server logs. resend sends the welcome and waitlist emails. those three see your data because they run the thing.

the map background comes from stadia maps, using stamen and openstreetmap data. loading map tiles means their servers see the requests your browser makes for them, which tells them roughly what part of the map you are looking at. they do not get your account or your quest history.

how long it is kept

while your account is open, i keep it. the location samples behind a finished quest are its receipt, so they stick around with it.

email me and i will delete your account, your quest history, your location samples and your photos. during the beta this is me doing it by hand rather than a button in the app, and i will confirm when it is done.

children

xyz is not for anyone under 13, and i do not knowingly keep data from anyone under 13. if that has happened, email me and it goes.

asking me things

want to know what i hold on you, want it corrected, want it gone: hiplstryxyz@gmail.com. depending on where you live you may have a legal right to those things, and either way you can just ask.

if this policy changes in a way that matters, i will say so in the app or by email before it takes effect.