Privacy Policy
What we collect, why, and the controls you have.
This Privacy Policy explains what data MapNinja (“we”, “us”) processes when you use the Service, why, and the controls you have. We collect as little as possible.
Who is responsible
The MapNinja team is the data controller for personal data processed through the Service. For any privacy matter, contact privacy@mapninja.io.
What we process
- Progress data. Which items you mark as found is stored locally in your browser or the app's private storage. Signed-in progress is linked to your account so it can sync across devices. Pending changes are also saved locally until they can sync.
- Account details. We store your email address, display name and a password hash when you use email sign-in. Google sign-in provides your verified email address, name and Google account identifier. We do not receive your Google password.
- Membership. Stripe processes Pro payments. We store your Stripe customer identifier and subscription status. We do not store your payment card number.
- Preferences. Your theme choice (light/dark) is stored locally on your device.
- Technical logs. Like most sites, our hosting may process limited technical data (such as IP address and user-agent) to serve pages, ensure security and prevent abuse.
- Analytics. PostHog receives page visits, interactions, browser identifiers and technical request data on public pages. We use this to understand website usage. PostHog does not run on sign-in or account pages. See our Cookie Policyfor the browser storage it uses. We do not currently run advertising scripts.
Why we process it (legal bases)
- Legitimate interests - to operate, secure and improve the Service.
- Consent - for non-essential browser storage where required.
- Contract - to provide account features you request, such as cross-device sync.
What we do not do
We do not sell your personal data. Your on-device progress stays on your device unless you choose to sign in to sync it.
Retention
Locally stored data remains until you clear browser site data or app data, or uninstall the app. Server logs are kept only as long as needed for security and operations. Account data is kept while your account is active and deleted on request.Request deletion of your MapNinja account and synced progress.
Android and iOS apps
The native apps use the same account and progress service as the website. Sign-in credentials are kept in the device's protected credential storage. Saved games, theme preferences, cached artwork and pending progress changes are stored locally. Google sign-in uses Google's native SDK; MapNinja receives your verified email address, display name and account identifier. The apps do not request your physical location, contacts, microphone or photo library. They do not include advertising or the website's PostHog analytics.
Cookies & local storage
See our Cookie Policy for what we store in your browser and how to control it.
Sharing
We share data only with service providers that help us run the Service (for example hosting), under appropriate safeguards, or where required by law.
International transfers
Where data is processed outside your region, we rely on appropriate safeguards such as standard contractual clauses.
Children
The Service is not directed at children below the age of digital consent, and we do not knowingly collect their personal data.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or port your data, and to object to certain processing. See our GDPR page for how to exercise them.
Changes
We may update this policy; the “last updated” date above reflects the latest version.
Contact
Privacy questions or requests: privacy@mapninja.io.