Privacy Policy

Who we are

Questscape is currently operated by its two founders directly — Nicolas Lang, based in Valencia, Spain, and Jonas Klappert, based in Düsseldorf, Germany — as Questscape has not yet been incorporated as a company. Until incorporation, these individuals are the data controller for the purposes of GDPR. This section will be updated to name the incorporated entity once formed.

Contact for any privacy matter: hello@questscape.app

What we collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. If you choose to add or change information yourself (username, avatar, bio, etc.), we store what you provide.

Location data. Questscape is a location-based game and requires precise GPS location to function. We collect this both while the app is open and in the background, so the game world can respond to where you are even when you're not actively looking at your phone. We do not store a history or trail of your past locations — only your current position is used, in real time, to power gameplay.

Avatar images. If you upload a profile picture, it's stored via Google Cloud Storage (see "Who processes your data", below).

Crash and diagnostic reports. We use Google Firebase Crashlytics to detect and fix bugs. This may include device information, app version, and technical logs from the moment of a crash.

Cookies. We use a single, strictly functional session cookie on id.questscape.app to keep you signed in. We do not use analytics or advertising cookies, and — because this cookie is strictly necessary for the service you've asked for — no cookie consent banner is required for it under current EU rules. This will be revisited if that changes.

Who processes your data (and why we're not saying "no third parties")

We do not sell your data, and we do not share it with advertisers, data brokers, or marketing partners. However, a small number of infrastructure and platform providers necessarily process data on our behalf as part of running the service at all:

• Fly.io — hosts our servers and database. Hosted in Frankfurt, Germany (EU).
• Cloudflare — DNS and inbound email routing
• Google — several distinct roles: sign-in (OAuth), live map rendering (Maps — this means your current location is sent to Google each time the map is displayed), crash reporting (Firebase Crashlytics), and file storage for uploaded avatars (Firebase/Google Cloud Storage)

None of these providers may use your data for their own purposes beyond providing the service to us.

How long we keep it

• Account information and anything you've willingly shared is kept for as long as your account remains active, and deleted when you delete your account or request deletion via hello@questscape.app.
• Game state (progress, in-game items, etc.) is retained to preserve your gameplay history and contains no personal information — it is not linked to your identity in a way that makes it personal data once disconnected from your account.
• Location data is not retained as a history — it is used in real time for gameplay and not stored as a trail.

Your rights

If you're in the EU/EEA, you have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to how it's processed. Contact hello@questscape.app to exercise any of these. You also have the right to lodge a complaint with your local data protection authority — for the founders, that's the AEPD (Spain) or the relevant German state authority (BfDI or your state's DPA), though you may contact your own country's authority regardless of where we're based.

Age requirement

Questscape is intended for users 18 and older. We do not knowingly collect data from anyone under 18, and the service is not directed at children.

Changes to this policy

We'll update the "last updated" date above when this changes, and for material changes, we'll make a reasonable effort to notify active users directly.