Privacy Policy
This explains what Kryptex Quest collects, why, who sees it and how to ask for it to be removed. The game is run by GDG on Campus, BITS Pilani Dubai Campus (“the organisers”).
What we collect
- Your Google account: your email address and name, received when you sign in with Google. We never see your Google password.
- Your profile: the character you pick, and your team name and team members.
- Your location: your GPS position while the game is open and you are playing, sent every few seconds, plus the position at moments such as discovering a place, unlocking it or answering a question.
- Your activity: locations discovered and unlocked, answers and wrong attempts, times, and rankings.
- Photos: pictures you take for photo questions, together with the result of the check on them.
- Help requests: if you press Need help, your location and message.
- Technical data: the services we use record normal technical data such as your IP address and browser type in their logs. The game stores your sign-in session and settings (such as sound) in your browser's local storage. We do not use advertising or tracking cookies.
Why we use it
- To run the game: confirm you are at a place, track team progress, score and rank teams.
- To keep you safe: organisers can see where players are, warn you about no-go zones and respond to help requests.
- To keep it fair: check locations and photos and investigate cheating or disputes.
- To announce results, including a recap of your team's run.
Who can see it
- Organisers can see everything above, including live locations, photos and activity logs.
- Your teammates see your name and your position on their map.
- Other players see your name and team in the leaderboard.
- Event screens may show team names and rankings.
- We do not sell your data or use it for advertising.
Services that process your data
- Supabase: database, sign-in and photo storage.
- Google: sign-in.
- Vercel: hosting the website.
- Ollama Cloud: an automated check compares your photo with the organisers' reference photos, so your photo is sent to that service for analysis. Photos it cannot judge are reviewed by an organiser.
- Map and font providers (OpenFreeMap, MapLibre and jsDelivr/unpkg libraries, Google Fonts): they serve the map and code to your phone and can see your IP address when your browser loads them.
These providers may process data outside the UAE.
Your device
The game asks permission to use your location, your camera (only when you take a photo) and your phone's motion and compass sensors (for the compass, on your device only). You can refuse, but the game may not work fully.
How long we keep it
We keep event data only as long as needed to run the event, announce results and settle disputes, and then delete it, including photos and location records.
Your choices
- You can ask to see, correct or delete your data, or to withdraw from the event, by contacting the organisers at the event or through the GDG on Campus BITS Pilani Dubai Campus channels.
- You can stop sharing your location by closing the game, but you will not be able to play.
Security
Access is protected by sign-in and database access rules, and only organisers (and, for location, your own teammates) can see where you are; only organisers can see your photos. No online service is perfectly secure, so please do not upload anything private.
Changes
We may update this policy; the version on this page applies.
This page was drafted for the event and has not been reviewed by a lawyer. The organisers should have it checked by the university or its advisor before relying on it, and should honour the retention promise above.