What we keep.
What we don’t.

Playing as a guest

Guest progress is saved only in your own browser. It never leaves your device, and clearing your browser data erases it.

Before the game loads, a Cloudflare Turnstile check confirms you’re a person, not a bot. Cloudflare sees your browser and network details while it checks. Once you pass, we set one cookie that lets you into the game for a week. That cookie doesn’t identify you.

Signing in with Google

Signing in is optional and lets your progress follow you between devices. When you sign in, we store:

• The email address and account ID that Google shares with us
• Your saved game (where you are, what you’ve found, what you’re wearing), up to 4 KB

We don’t receive your Google password, contacts or anything else from your Google account. There’s no public profile, no custom display name and no chat.

Deleting your account: open Account & saves in the game and choose Delete account. That removes your account, your email address and your cloud save straight away.

Players under 13

The game asks for an age group before offering sign-in. The answer stays in that browser tab and is never sent to us. Players under 13 can play as guests but can’t create an account, and any feedback they send contains no free text.

Feedback you send

If you use Send feedback in the game, we store what you choose to send: a category, your message (with email addresses and phone numbers removed automatically), an optional screenshot, and details that help us reproduce a problem, such as the game version, where you were standing, your screen size and your last few in-game actions. Each report carries a scrambled device code so we can tell reports from the same device apart; it can’t be traced back to you. If you’re signed in, the report doesn’t include your email address.

Game statistics

For guests and signed-in players, the game sends limited gameplay events to our own site: session duration, event types, game version and coarse map areas. These carry a scrambled installation code and a session code, not your name, email or account ID. Event details contain no free text. You can turn this recording off in the game's Feedback panel.

The leaderboard shows community totals: current accounts, estimated recorded session hours and landmarks discovered by signed-in players. Hours include time left open and exclude unrecorded or opted-out play. Public rankings show generated names and points, not email addresses. Deleting an account also removes its points and landmark awards. Gameplay analytics are not linked to accounts, so deleting an account does not identify or remove those events.

The rest of the website

The public pages use Vercel Web Analytics to count page views. It doesn’t use cookies or track you across other sites.

Who handles the data

• Vercel hosts the site and handles gameplay event intake.
• Supabase stores accounts, cloud saves, points, feedback and gameplay events.
• Google handles sign-in, if you use it.
• Cloudflare runs the bot check.

Each of these runs standard server logs, such as IP addresses and request times, under its own privacy policy.

Changes

If this page changes, the date at the top will change with it. We won’t start collecting something new without updating this page first.