Controller
M. Panteli & Sons Ventures Ltd, trading as RELIQ WORLD, VAT CY60165667K, is the controller for the personal data described here.
You can play without an account
We do not ask for your name, email or phone number to play. Your device generates a random identifier (a "guest id") the first time you play. We treat that identifier as pseudonymous personal data — it does not identify you by name, but it is persistent, so this policy applies to it.
What we process, and why
- Precise location (GPS). Used live on your device to show how close you are, point the compass and verify a find. We do not store your coordinates and we do not build a movement history or track you between hunts.
- Camera. The live camera view is used only to draw AR treasure on your screen. Nothing from the camera is recorded, uploaded or seen by us.
- Compass / device motion. Used live to orient the arrow, map and AR view. Not stored.
- Gameplay records. Guest id, which hunt, start and finish times, completion time, number of treasures found, and which treasures were found. Used to run the game, resume an attempt, rank the leaderboard and prevent cheating.
- Leaderboard name. Only if you choose to submit one. It is published publicly next to your time. Do not enter a name you do not want shown.
- Feedback. A 1–5 rating and an optional free-text comment. Please do not include personal details in the comment.
- Campaign / QR attribution (optional). If a link or QR poster carries a tag, we can record which one brought you to a hunt. This is off unless you allow optional storage.
- Consent records. When a hunt or prize race requires you to accept documents, we record your guest id, which documents and versions you accepted, and when.
- Technical logs. Our hosting and database providers keep standard security logs, including IP address, for a limited period.
Legal bases
- Performance of a contract / taking steps at your request (Art. 6(1)(b)) — running the hunt you chose to play, leaderboards and prize race entries.
- Legitimate interests (Art. 6(1)(f)) — keeping the service secure, preventing cheating, and understanding aggregate usage so hunts work in the real world.
- Consent (Art. 6(1)(a)) — optional campaign/QR attribution storage, and any optional analytics detail. You can withdraw at any time.
- Legal obligation (Art. 6(1)(c)) — keeping records needed to run a prize race lawfully and to answer disputes.
Device permissions (location, camera, motion) are granted through your phone's operating system. They are a technical control, not the same thing as GDPR consent — we explain the purpose of each one separately before you start.
Storage on your device
We do not use cookies. We use your browser's local storage and session storage. Each key, its purpose and its lifetime is listed in the Cookie & Storage Notice.
Who we share it with
We do not sell your data and we do not use advertising networks. We use processors who host the app and database on our behalf, in the EU or under an adequacy decision or standard contractual clauses. Leaderboard names and times are public by design.
How long we keep it
- Gameplay analytics events: 14 months.
- Play sessions, completion times and leaderboard entries: 24 months.
- Feedback: 24 months.
- Consent and prize-race records: 5 years, to cover the claim window and statutory limitation periods.
- Location coordinates: never stored.
Expired records are deleted automatically by a scheduled job.
Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent at any time without affecting processing already carried out.
Because we do not know who you are, we identify your data by the guest id held on your device. You can view it, change your choices and request erasure from Manage Privacy Settings. If you clear that identifier or use another device we may be unable to locate your records.
You can complain to the Office of the Commissioner for Personal Data Protection (Cyprus), or to the supervisory authority where you live.
Children
Hunts state their own minimum age and supervision requirements, and prize races are age-restricted. We do not knowingly collect data from children below the stated age for a hunt.
Automated decisions
We do not carry out profiling or automated decision-making that produces legal effects. Suspected cheating is reviewed by a person before an attempt is voided.
Contact
M. Panteli & Sons Ventures Ltd.
