Privacy Policy (GDPR Compliance)
Last Updated: October 2026
This Privacy Policy explains how QuestPulse ("we", "our", the "Platform") collects, uses, and safeguards personal data of organizers and event participants in compliance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
The data controller for the QuestPulse platform (questpulse.app) is the QuestPulse engineering team. If you have questions regarding data privacy, contact us at: privacy@questpulse.app.
2. Data We Collect
We only collect data strictly necessary for running interactive quest events:
- Organizer account data: email address and authentication credentials upon signup.
- Team game data: team name and avatar selected by players upon joining a hunt.
- Temporary GPS geolocation: during an active quest, players' browsers may share GPS coordinates solely to verify waypoint geofence proximity or display team pins on the organizer live map. GPS coordinates are not tracked or stored after the game session ends.
- Technical telemetry: anonymized IP addresses and essential system logs to ensure service reliability, performance, and prevent abuse.
3. Purpose of Processing
Data is processed solely to: (a) operate live scavenger hunts and compute real-time leaderboards; (b) manage organizer account access; (c) maintain platform reliability and security.
4. Storage and Data Sharing
Data is hosted on secure European cloud infrastructure via Supabase and Vercel. We do not sell, rent, or monetize personal data with third parties or ad networks.
5. Your Rights
Under the GDPR, you have the right at any time to: access your personal data, request correction or permanent erasure, or revoke consent to email communications by emailing privacy@questpulse.app.