PRIVACY POLICY

Account information: your e-mail address, password (held only by our authentication provider, never in readable form), display name and optional Instagram handle. Used to create and secure your rider account.

Rider #: your permanent public Seven Stamps identity. It appears on your passport, shared moments, certificate and community screens. Your e-mail address is never shown publicly.

Authentication information: session tokens issued by the authentication provider so you stay signed in. Never shared with other riders.

Preferred language: so the app opens in the language you chose.

Location: when you claim a checkpoint, the app reads your device location once for that claim, to confirm you are physically near the checkpoint. Seven Stamps does not track you continuously, does not use background location, and does not follow your route between checkpoints.

Checkpoint verification data: the scanned code, the measured distance to the checkpoint, accuracy and the verification result. Used to keep the game honest and to prevent remote or duplicated claims.

Claim timestamps: when each checkpoint was found. Used for your passport, journey record and achievements.

Your precise coordinates are used for the verification check and are never published to other riders. The exact checkpoint coordinates stay server-side; the map only ever shows approximate discovery zones.

Photos: a photo is required to complete a checkpoint. Location metadata (EXIF, including GPS) is removed from the image before it is stored. Following the normal Seven Stamps flow, your photo and memory are published to Seven Stamps Social after a successful checkpoint completion; this is stated on screen before you take the photo.

Memory text: the note you write at a checkpoint, shown with your shared moment.

Ride distance, ride duration and elevation: only the numbers you type yourself. Seven Stamps does not read any fitness account and does not verify routes.

Clues: short notes you choose to leave for riders who have not found that checkpoint yet. Shown to other riders with your Rider # only.

Social posts and RESPECT interactions: used to show the community feed and to notify the rider whose moment received respect.

Follower / following relationships: used for your profile counts, public profile and follower notifications.

Blocked riders: used to stop interaction between two riders. The blocked rider is never told.

Reports: sent only to the protected Management area, used for safety and moderation. We never tell a reported rider who reported them.

Notifications: records of community and journey events addressed to you. They never contain coordinates, codes, e-mail addresses or phone numbers.

Achievement and progress information: derived from your legitimate checkpoint claims.

Basic technical information needed to operate and protect the service — for example request and error logs from the hosting platform and the authentication provider, and rate-limit records for checkpoint verification attempts. Used to keep the service running and to prevent abuse.

Account, checkpoint, community and notification data is stored in the app's managed database and file storage (Supabase infrastructure, operated on our behalf). Photos are stored in a private bucket and served through short-lived signed links.

The app is hosted and served through Lovable's hosting platform. Sign-in with Google is optional; if you use it, Google processes your sign-in.

Seven Stamps does not sell your data, does not run advertising, and does not use third-party analytics or advertising SDKs.

Your data is kept while your account exists, because it is what your passport, journey and community presence are made of.

You can permanently delete your account at any time from Settings → Danger Zone. Deletion removes your profile, rider stats, checkpoint claims, stamps, journal entries, journey legs, photos, shared moments, respect interactions, follow relationships, clue authorship, reports you filed and your sign-in account itself.

For integrity and safety we keep a minimal administrative record that an account was deleted (the action, the time and the former Rider #). It contains no personal content.

Seven Stamps does not currently define a fixed retention period for platform-level technical logs; those follow the retention of the hosting and authentication providers.

To ask a question about privacy, use the Support page in the app.

Exact checkpoint coordinates, your GPS readings, QR codes and their internal links, internal account identifiers, your e-mail address or phone number, and photo location metadata.