Privacy Policy
This describes what Canton Quests actually collects and how it's used, at a product level. It is an operational reference, not a substitute for legal review before launch.
Account Information
When you create an account, we collect your callsign (a public display name), your email address, and a password (stored securely by our authentication provider, never in plain text). Your callsign is shown publicly on the leaderboard and other player-facing surfaces; your email address is not shown publicly.
Avatar & Uploaded Photos
You may select a preset avatar or upload a custom profile photo. Uploaded photos are stored in a private file store and served only through short-lived, signed links generated when your profile is viewed — they are not published to a public storage URL.
Quest Submissions & Proof
Completing a quest may involve submitting proof: a photo, a video, a check-in, a scanned QR code, or a typed answer, depending on that quest's verification method. GPS location is collected only for quests that specifically use location-based check-in or radius verification — never in the background, and never for quests that don't require it.
Leaderboard & Public Game Data
Your callsign, avatar, total XP, level, starting path, and completed-quest count may appear on public leaderboard and player-summary surfaces. Your email address, password, and raw uploaded-photo file path are never included in these public surfaces.
Prize Drawing Data
Operating the transparent prize drawing requires us to retain your qualifying drawing-entry count and, for winners, enough contact information to deliver a prize. Public drawing pages show entry counts and draw results using a sanitized public label, not your raw account identifiers.
Email Use
Your email address is used for account verification, password recovery, and operational communication about the event you registered for (such as prize-drawing results if you win). We do not sell your email address.
Data Retention
We retain account and gameplay data for as long as your account is active and as needed to operate the current event, resolve disputes, and meet the prize-drawing transparency commitments described in the Official Rules. We do not make blanket promises about specific deletion timelines that our current systems cannot support — if you have a specific data question or request, reach out through the contact channel listed on the homepage.
This policy is subject to legal review before public launch and may be updated.