1. Who we are
This Privacy Policy applies to the SCAPED iOS game and the SCAPED pages on this website. “SCAPED”, “we” and “us” refer to the game’s operator, who is the controller of the personal data described here. For any privacy question or request, email anthonyvvza@gmail.com.
2. The short version
SCAPED is free to play. There are no ads, no advertising or analytics SDKs, and no in-app purchases. We don’t sell your data or use it to track you across other apps and websites.
- You sign up with an adventurer name and password. We don’t ask for your email, phone number or real name.
- Your game progress is saved to our server so it’s safe when you switch or reset your phone.
- The game uses your location to build the world around you. Places where you play are part of your save.
- With your permission, SCAPED reads your step count to give Agility XP. It never writes to Apple Health.
- Your adventurer name and level-ups can appear in the public GLOBAL feed.
- You can delete your account and all its data at any time inside the app.
3. Your account
When you register we store:
- Adventurer name (your username). It’s shown to other players.
- Password. Our authentication provider stores it only as a secure hash; we can’t read it.
- An internal login identifier derived from your name (a one-way hash). It isn’t a real mailbox and we never email it.
- An account ID, sign-up and sign-in times, and the session tokens that keep you logged in. Tokens are also stored on your device.
Because we don’t collect an email address, we can’t reset a forgotten password or verify who owns an account by email. Keep your password safe.
4. Game progress
Your save file is stored on our server and a copy is kept on your device. It contains your skills and XP, hitpoints, coins, backpack, bank, equipped gear and rare items, character appearance, combat settings, skillcapes, garden patches, resource respawn timers, and timestamps and a revision number used to prevent lost or conflicting saves.
To keep the game fair, the server checks each save against the previous one and rejects impossible progress (for example a huge XP jump in seconds).
5. Location
SCAPED is played on a map of the real world, so it asks for your precise location while the app is in use. The game needs it to place you on the map, generate trees, water, rocks, monsters and markets around you, and check that you’re close enough to interact with them. SCAPED does not ask for or use background location.
- Stored in your save: the map coordinates of in-game places tied to your progress, such as markets and other world spots generated near where you play, your garden patches, and the resource you were gathering when you last closed the app (used for offline progress). Together these can show the general areas where you play.
- Not stored: we don’t keep a continuous log or history of your movements on our server.
- Map tiles: to draw the map, your device downloads map tiles for the area on screen from OpenFreeMap. Like any web request, this shares your IP address and which map area is being viewed.
- Weather: for in-game weather, your device sends coordinates rounded to about 1 km to Open-Meteo. In the Netherlands it also asks Buienradar for rain information at those rounded coordinates.
6. Steps and motion
If you allow it, SCAPED reads your step count from Apple Health and live step counts from your iPhone’s motion sensors to award Agility XP. Health access is optional; the rest of the game works without it.
- We read step counts only. We don’t read any other health data, and SCAPED never writes to Apple Health.
- Your save stores daily step totals already converted into XP, plus the date step tracking started, so the same steps aren’t counted twice.
- Step data is used only to run the game. It’s never used for advertising or marketing, and never sold or shared with data brokers.
7. Public information
Some things are visible to other players:
- Level-up events in the GLOBAL feed: your adventurer name, the skill, the new level and the time.
Please don’t use your real name or other personal information as your adventurer name.
8. Technical data
Our server and hosting providers automatically process technical information needed to run and secure the service. This includes your IP address, request times, the API calls made, and error details. We use it to keep SCAPED working, prevent abuse and investigate problems. We don’t use it to build advertising profiles.
If you email support, we receive your email address, your message and anything you attach.
9. How we use data
- Create and secure your account and keep you signed in.
- Save, restore and sync your progress.
- Build the game world around your location and apply game rules such as interaction range.
- Turn steps into Agility XP.
- Show the GLOBAL level-up feed.
- Prevent cheating, fraud and abuse, and enforce the Terms of Service.
- Answer support requests and meet legal obligations.
Under the GDPR, our legal bases are: performance of our agreement with you (running the game you asked for), your consent (location and Health permissions, which you can withdraw in iOS Settings), our legitimate interests in keeping SCAPED fair and secure, and legal obligations.
10. Service providers
| Provider | What for | Data involved |
|---|---|---|
| Supabase (EU region, Ireland) | Accounts, database and server functions | Account, save file, level-up events, technical logs |
| Apple | App distribution, location services, Health, motion | Handled under Apple’s own privacy policy |
| OpenFreeMap | Map tiles (map data © OpenStreetMap contributors) | IP address, requested map area |
| Open-Meteo | Weather | IP address, coordinates rounded to ~1 km |
| Buienradar (Netherlands only) | Rain information | IP address, coordinates rounded to ~1 km |
| Vercel | Hosting this website | Standard web logs and website analytics |
We share personal data only with these providers, as needed to run SCAPED, or when the law requires it. Some providers may process data outside the European Economic Area. Where they do, they rely on safeguards such as the European Commission’s Standard Contractual Clauses.
11. Retention and deletion
We keep your account, save file and level-up events for as long as your account exists.
When you choose Delete account and all data in the app, your account, save file and public level-up events are deleted from our live database straight away and can’t be recovered. Copies in our provider’s encrypted backups expire on the provider’s normal backup schedule. Server logs are kept for a limited period for security. The copy of your save on your device is removed when you delete the app.
12. Your choices
- Location: change it any time in iOS Settings › SCAPED › Location. The game world needs location to work.
- Health and Motion: turn off step access in the Health app › Sharing › Apps, or in iOS Settings. You’ll simply stop earning Agility XP from steps.
- Delete your data: in the game, open your Backpack › Account settings › Delete account and all data.
13. Your rights
Depending on where you live (including under the GDPR in the EU/EEA and UK), you may have the right to access, correct, delete, restrict or object to processing of your personal data, to receive a copy of it (data portability), and to withdraw consent at any time. To make a request, email anthonyvvza@gmail.com with your adventurer name. Because accounts have no email address, we may ask you to confirm ownership, for example by making a change from inside the logged-in app.
You can also complain to a data-protection authority. In the Netherlands, that’s the Autoriteit Persoonsgegevens.
14. Children
SCAPED isn’t intended for children under 13, and we don’t knowingly collect personal data from them. In some countries, including parts of the EU, the minimum age for using online services without a parent’s consent is higher (up to 16). If you’re below that age, only use SCAPED with a parent or guardian’s permission. If you think a child has created an account, contact us and we’ll delete it.
15. Security
Data travels over encrypted connections (HTTPS). Passwords are stored as hashes, and database rules make sure each player can read only their own save. Saves can be changed only through server functions that validate them. No system is perfectly secure, so please use a unique password for SCAPED.
16. Changes
We may update this policy as SCAPED evolves, for example when we add new features. We’ll change the effective date above and, for significant changes, tell you in the app.
17. Contact
Questions or requests: anthonyvvza@gmail.com. See also the Terms of Service and Support pages.