Privacy Policy

QuestGogo (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the “Service”).

We operate in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable US privacy laws.

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not receive or store your Google password.

Location Data

QuestGogo is a location-based treasure hunt platform. With your permission, we collect GPS location data while you actively play quests. This data is used to track your progress, verify cache discoveries, and calculate distances traveled. Location data is only collected while the app is in use and you have an active quest session.

User-Generated Content

We store quests you create (including names, descriptions, clues, and cache locations), photos you upload for verification or as memories, and any other content you submit through the Service.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, quest completion data, and device information. We use Vercel Analytics for aggregated, privacy-friendly website analytics.

Push Notification Tokens

If you enable push notifications on mobile, we store your device push token to deliver notifications. Tokens expire after 90 days and are automatically cleaned up.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Track quest progress and verify cache discoveries
• Send quest invitations and notifications you have opted into
• Calculate statistics such as distances traveled and quests completed
• Award badges based on your achievements
• Respond to your inquiries and support requests
• Monitor and prevent abuse of the Service

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• With other users: Your display name, profile picture, and quest activity (e.g., quests created, participation) may be visible to other users of the Service.
• Service providers: We use third-party services to operate the platform, including Neon (database hosting), Vercel (web hosting and analytics), Amazon Web Services (file storage), Resend (email delivery), and Upstash (rate limiting). These providers only access your data as needed to perform their services.
• Legal requirements: We may disclose your information if required by law, regulation, or legal process.

4. Data Storage and Security

Your data is stored on servers in North America. We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication, and access controls to protect your information. However, no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or operational purposes. Aggregated, anonymized data may be retained indefinitely.

6. Your Rights

Under PIPEDA and applicable laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for data collection (e.g., location tracking)
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, please contact us through our contact page.

7. Cookies and Local Storage

We use session cookies to keep you signed in. We do not use tracking cookies or third-party advertising cookies. The Service may also use browser local storage for application preferences.

8. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out through our contact page.