Privacy Policy

1. Data we collect

Mobile app

When you use the CipherWalk app, we collect:

• An account identifier, a UUID generated on first launch. When you open the app for the first time we create an anonymous account for you automatically, with a random display name and no email. This identifier is also attached to any crash reports we receive so we can correlate a crash with the affected account.
• Your email address, only if you choose to sign in. Signing in is optional and upgrades your anonymous account so you can restore your progress on another device. We support magic-link sign-in (you enter your email and we send a one-time link), Sign in with Apple, and Sign in with Google. Your email is stored on your account so we can recognise you when you sign in again and contact you about your account if needed. If you use Sign in with Apple and choose to share your name, we store that as your display name. If you never sign in, we never collect an email.
• A display name, only if you choose to set one. This is visible to other players in lobbies and on leaderboards.
• Your location, only while you have a quest open. Location is used to determine when you arrive at a quest stop. We do not track your location in the background and we do not store a continuous trail of your movements.
• Gameplay content, including puzzle state, answers you submit, hints you use, stops and quests you have completed, cities you have played in, and your team's progress in multiplayer sessions. This is needed to run the game and to show leaderboards.
• Purchase records, including which quests you have unlocked, how each unlock was granted (in-app purchase, promo code, or gift), the store transaction identifier, and the time of the purchase. This is stored on your account so we can give you access to the quests you have paid for.
• Support messages, if you email us for help. Messages sent to our support address are retained in our support inbox so we can respond and follow up.
• Basic technical data sent automatically by your device to our backend (such as IP address) for security and abuse prevention.
• Crash and diagnostic data. When the app hits an unexpected error we send a crash report that includes the stack trace, device model, operating system version, app version, device locale, recent console logs, and a breadcrumb trail of the screens you visited and the API calls the app made in the moments leading up to the error. We use this only to identify and fix bugs.

Marketing website (cipherwalk.com)

If you sign up for the new-quests email list, we store your email address until you unsubscribe. We use it only to send the monthly update.

If you purchase a quest on the website, payment is processed by Stripe. We do not see or store your card details. Stripe shares your email address and the amount paid with us so we can confirm your purchase and provide support. The purchase is linked to the CipherWalk account you sign in with at checkout.

2. How we use your data

• Provide and operate the Service (gameplay, multiplayer, leaderboards, purchase confirmation).
• Respond to support and refund requests.
• Detect and prevent abuse (e.g., cheating, fraudulent payments).
• Comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising.

3. Sub-processors

We use the following service providers to operate the Service. They process personal data on our behalf:

• Supabase — authentication, database, and realtime multiplayer. Data stored in the European Union.
• Stripe — payment processing for quest purchases on the website. Stripe is GDPR-compliant and processes data in the EU and the US under appropriate transfer safeguards.
• Sentry — crash and error reporting for the mobile app. When an error occurs, Sentry receives your account identifier, the stack trace, device model, operating system version, app version, device locale, recent console logs, and a breadcrumb trail of recent screens and API calls. Data may be processed in the EU or the US under appropriate transfer safeguards.
• Vercel — hosting and performance monitoring for cipherwalk.com. Used solely to operate the website.
• PostHog — cookieless product analytics for cipherwalk.com (page views, button clicks, form submissions, and JavaScript errors). No persistent identifier is stored on your device, so visits cannot be linked across sessions. Data is stored in the European Union.

4. How long we keep your data

• Game account data (account identifier, email, display name, gameplay content) is kept until you delete your account. You can delete your account at any time inside the app, in the Profile screen.
• Quest creator form submissions are kept for as long as we are following up with you, then deleted within a reasonable time.
• Payment records are kept for 10 years as required by Swiss commercial law.

5. Your rights

Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted. You can do this directly inside the app via Profile → Delete account.
• Object to or restrict certain processing.
• Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

To exercise any of these rights, email privacy@cipherwalk.com.

6. Children

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the Service, contact us and we will delete the data.

7. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated through the app or the website before they take effect.

8. Contact

Eskil Jarlskog
privacy@cipherwalk.com