Privacy Policy

Koziołki Lubelskie · App version 1.0.0

Effective date: 26 October 2026.

1. Who is responsible

The operator and data controller is Valerii Kot. Privacy and support contact: kot@valerii.eu. This notice concerns the Koziołki Lubelskie mobile app, identified on iOS as eu.valerii.goat.

2. The short version

The app helps you discover goat statues in Lublin. It uses location to show nearby statues and verify discoveries. Your camera photo is not uploaded: the app sends a SHA-256 fingerprint of it with the discovery request. Successful online discoveries include precise location stored on our server. A generated player identifier links your progress; “anonymous sign-in” does not mean the data is anonymous under data-protection law.

We do not include advertising, cross-app tracking or a dedicated third-party analytics SDK in this version. We do not sell personal data. Map, image, font and backend providers receive technical network information when the app contacts them.

3. Information processed

• Player/session data: a generated Supabase user ID and authentication/session information. You do not need to supply an email address or password to play. Authentication tokens are stored locally to keep your session.
• Optional nickname: stored locally and, when a backend session is available and you save it, sent to the server for your public profile. Avoid using your real name or contact details.
• Location: while the app is active and location permission is granted, it uses your location, accuracy and available heading information for the map, distance and radar. The app stops its location stream when it goes into the background. Discovery requests send latitude, longitude, statue ID and photo fingerprint. Successful server check-ins store the player ID, statue ID, location, calculated distance, discovery timestamp and fingerprint.
• Camera photo: processed on your device to show a preview and calculate its fingerprint. There is no image-recognition service and no upload of the image itself. Camera/plugin temporary files may remain in the device cache until cleared by the operating system; we do not promise immediate erasure of these files.
• Offline evidence: if verification cannot reach the server, the app may locally retain the statue ID, coordinates, fingerprint and scan time for a later retry. A successful or definitive invalid replay removes the pending evidence; temporarily failed requests can remain queued.
• Progress/preferences: local discoveries, quiz results, audio-guide history, language, nickname and battery-saving preferences. The current quiz results and audio-play history are local; synchronized discoveries are stored on the server.
• Technical and support data: service providers may process IP addresses, request times, device/app information and security logs. If you email us, we receive your email address, message and any information you choose to include. Please do not send passwords or unnecessary sensitive information.

4. Purposes and legal grounds

The GDPR grounds for processing are:

• Delivering the game, maintaining a player session, saving requested progress and displaying rankings: performance of the service agreement, Article 6(1)(b).
• Optional precise-location features and camera use: consent, Article 6(1)(a). You can refuse or revoke permissions in device Settings. This stops future access; it does not automatically erase earlier server check-ins. Device permission is a control, not a substitute for explaining server storage before a discovery is submitted.
• Security, preventing abuse and responding to ordinary support enquiries: legitimate interests, Article 6(1)(f), balanced against your rights. The interests are protecting the service and assisting users.
• Compliance with an applicable legal duty: Article 6(1)(c), only where such a duty applies.

Without location/camera permission you can still browse available content, but photo-and-GPS discoveries will not work. No legal or similarly significant decision about you is made solely by automated processing. Distance validation affects game progress only.

5. Public rankings and recipients

Other players can see the nickname (or a generated alias), discovery count and position of players included in the leaderboard. It shows up to 50 entries for the selected period. The leaderboard response does not expose player IDs, precise locations or camera images. A generated alias does not prevent your ranking from being linked to a nickname you choose.

Supabase hosts authentication, profiles and discovery records on our behalf. The map currently requests tiles from OpenStreetMap Foundation infrastructure. Tile requests reveal the map area requested and technical connection data, not a separately supplied raw GPS coordinate. Catalogue images may load from Wikimedia servers. The app may download fonts from Google Fonts when they are not cached. Recorded audio, when available, loads from the host specified in the catalogue; otherwise the device speech service reads the story. Device speech processing depends on the installed voice and operating-system settings.

Providers receive the information necessary for their requests. Their roles and protections must be covered by applicable provider terms and, for processors, data-processing agreements. We may disclose data where legally required or necessary to establish or defend legal claims. We do not share player records for advertising.

Provider information: Supabase legal documents, OpenStreetMap Foundation privacy policy, Wikimedia privacy policy, Google privacy policy.

6. Storage locations and international transfers

Providers may process data outside your country, including outside the EEA. International transfers are subject to applicable data-protection requirements, including an adequacy decision or appropriate safeguards where required. For information about processing locations and applicable safeguards, including how to obtain a copy, contact kot@valerii.eu.

Supabase’s published data residency and transfers information explains that its core database and backups are hosted in the project’s selected region, while support and operations may involve other countries, including Singapore and the United States. Its Data Processing Addendum describes standard contractual clauses for relevant international transfers. These provider safeguards do not mean that every category of data stays within the database region.

7. Retention and deletion

Discovery records and the player profile currently have no automatic inactivity expiry in the app. They remain until the relevant reset/deletion operation, subject to applicable legal requirements. Local settings and cached content remain until changed, cleared or removed with app data; device backups and restoration may affect this.

Settings → Reset progress deletes server discovery records when the server is reachable, then clears local discoveries, queued evidence, quiz results and audio-play history. If server reset fails, local progress is kept and an error is shown. Reset does not delete the Supabase authentication account or profile/nickname. Uninstalling the app does not delete server data.

For a request covering the account, profile and associated personal data, contact kot@valerii.eu. We may need proportionate information to identify your pseudonymous account and verify the request. Please contact us before uninstalling if possible; your device session may be needed to identify the record. Do not send your authentication tokens or database credentials. A nickname alone may not uniquely identify an account.

Operational logs and support correspondence are retained for as long as necessary to operate and protect the service, handle requests and meet applicable legal obligations. Backup retention depends on the hosting service settings and backup lifecycle. Contact kot@valerii.eu for details relating to your data.

8. Your rights and choices

Where applicable, you may request access, correction, erasure, restriction and a portable copy of your data, object to processing based on legitimate interests, and withdraw consent for future processing. Withdrawal does not affect earlier lawful processing. Contact kot@valerii.eu. Requests are normally answered within one month; lawful extensions and exceptions may apply. You can complain to the supervisory authority where you live, work or believe an infringement occurred; in Poland this is the President of the Personal Data Protection Office (UODO).

To make a privacy request, email kot@valerii.eu and state whether you are requesting access, correction, deletion or another right. You may include your in-app nickname and app version to help us locate the relevant information. We will ask only for additional information reasonably needed to verify and handle the request. Do not include passwords, session tokens or camera photographs. If we cannot identify the account, we will explain what additional information is needed; a nickname alone is not proof of account ownership.

9. Children, security and changes

Children should use the app with a parent or guardian. Where a child's consent requires parental authorization under applicable law, that authorization is required. We do not ask for a date of birth in this version.

This version does not provide age verification or an in-app parental-consent workflow. A parent or guardian who has a question about a child’s data or wants to request deletion can contact kot@valerii.eu.

The app connects to the configured backend over HTTPS and uses authentication and access controls. No storage or transmission system is guaranteed completely secure. We will update this notice if processing changes and give appropriate notice of material changes. A privacy notice is information about processing, not a request to consent to every use of data.

## 10. This document website

These document pages are hosted by Netlify. Delivering a page involves processing your IP address, requested page, time of request and browser/network information. Netlify may retain technical logs to operate and secure its infrastructure. The pages themselves use no analytics scripts, forms, tracking cookies or externally loaded fonts. Legal ground for necessary delivery and security: legitimate interests in making legal information available and protecting the website. Questions about hosting logs and international transfers can be sent to kot@valerii.eu. See Netlify’s privacy information. This section concerns visits to these pages, separately from app gameplay.

Netlify’s Data Processing Agreement describes its processing on customers’ behalf and international-transfer safeguards, including the EU–US Data Privacy Framework where applicable and standard contractual clauses for relevant transfers not covered by that framework. Its subprocessor list describes providers and processing locations.