The short version

RLC is a location-based game. We use your location to run the game — to check that you’ve reached a clue, to show your position to your own teammates during a hunt, and to find events near you. We don’t sell your data, we don’t keep a history of where you’ve been, and photos you share are scrubbed of hidden location metadata first.

Location data

Location is the most sensitive thing you entrust to us, so here is exactly how it is used:

• Arrival checks. When you tap “I’m Here,” your coordinates are compared against the clue’s location on our servers. We store the outcome, not a movement trail.
• Team play. While a hunt is active, your latest position is shared live with your own teammates only. We keep just the last-known position for the duration of the session (plus a short fraud-review window), then it is gone. There is no location history.
• Discovery. If you allow it, your approximate location is used to sort nearby events. It is not stored.
• Anti-cheat. Location reports are sanity-checked (e.g., impossible travel speeds) to keep leaderboards honest.

You can deny or revoke location permission at any time in your device settings; hunts that require physical presence won’t be completable without it.

Photos

Photos you take for photo challenges are private to your team by default. If you choose to share one to an event gallery, it is re-encoded first and all hidden metadata — including GPS coordinates — is removed. You can un-share your photo at any time, and anyone can report a photo for moderator review.

Account data

We store your email address, display name, and gameplay records (scores, completed hunts). Passwords are hashed with a modern algorithm (argon2id) and are never stored in plain text. Payments are processed by Stripe and in-app purchase providers; we never see your card number.

What we don’t do

• No selling or renting of personal data.
• No advertising trackers in the app.
• No location history or background tracking outside an active hunt.

Contact

Questions or deletion requests: privacy@rlc.local. We will delete your account and associated personal data on request.