Legal

Privacy Policy

How we collect, use, and protect your personal data, written plainly so you actually know what's going on.

Last updated: October 3, 2026

Version 2.1.0, effective October 3, 2026.

1. Introduction

Seek & Win SAS ("we", "our", "us") is committed to protecting the privacy of the users of our platform. This privacy policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

2. Data controller

The data controller is:
Seek & Win SAS
Paris, France
Email: privacy@seekandwin.world

3. Data we collect

We collect the following categories of data, all linked to your account:

  • Contact info: first name, last name, email address, phone number
  • Identifiers: account id, username, your device's push notification token (if you allow notifications), notification preferences and your phone's timezone. The token is used to send you the notifications you allowed, including the alert that a treasure or a coupon has appeared near you during a hunt you have joined and, if you turn on the Nearby Hunts alerts, the daily digest of hunts near you and the "starting soon" alert. The timezone is used to send the daily digest at the right time
  • Connection data: IP address, session identifiers, connection logs
  • Location data: GPS position and accuracy, used in three ways. During a hunt you have joined, the app sends your position while the session is live, including in the background and while your phone is locked, but in the background only in or near the venue (see section 3bis). On the screens that need it (Discover, details, directions), your position is used only while that screen is shown, and list queries rely on a rounded position. If you turn on the Nearby Hunts alerts, your latest position is saved only while the app is open, with your phone's timezone (see section 3ter). Your position is never used for advertising profiling. The app asks for your consent on a dedicated screen before any system permission request, and this consent is recorded with its version. You can withdraw it at any time in the app (Settings → Location). Other participants never see your position
  • Profile data: date of birth, gender, country and city of residence. The date of birth, required at registration, is used to check that you are 18 or over, because the game is for adults only. Only your age when you join a hunt is kept with your participation
  • User content: avatar (optional), gameplay activity (session participations, treasures and coupons found, wins and redemption codes, coupons used, notifications received during a hunt) and messages sent to support from the app, with device information (model, iOS version, app version, language) if you leave the option on
  • Usage data: usage events and screens viewed, linked to your account, for our statistics (PostHog, EU region). Only if you agree in the app (see section 4). Your screen is never recorded
  • Diagnostics: app crash and error reports, with no personal data (no account id, email, IP address or position), sent to our own server hosted in Europe (GlitchTip). They are on by default, on the basis of our legitimate interest, and you can turn them off in the app (Settings → Diagnostics). Error events (API, network, augmented reality) and performance measures such as AR model load time (PostHog, EU region) are sent only if you accept usage statistics (see section 4). The website, the venue and brand dashboards, the admin tool and our API also send their crash and error reports to the same server, with no personal data (no account, email or web address parameters). On the website these reports are anonymous: they set no cookie and store nothing on your device, they go through our own server (so GlitchTip never receives your IP address), and they do not depend on your statistics choice
  • Anti-cheat signals: indicators derived from your positions (speed, position jumps, GPS accuracy) used to detect location spoofing, visible to our administrators only, with no automated decision taken against you

The app offers nothing to buy, so we collect no payment data from players.

3bis. Location during a hunt you have joined

This section applies when you join a live hunt. It lets you play without keeping the app open.

  • What we record: your positions (coordinates, accuracy, time) during the session, linked to your participation
  • Why: to send you a notification when a treasure or a coupon appears near you, to check that you are inside the venue when you find it, and to measure the time spent in the venue during the session, for aggregated statistics given to the venue and the brand. A position outside the venue never triggers an alert
  • When it is sent: only during a live session you have joined. In the background and while your phone is locked, it is sent only while you are inside the venue or within a distance of its edge set by our team (500 m by default). Further away, background sending is paused, and it resumes when you open the app again near the venue. Sending stops when the session ends, when you leave the hunt, when you sign out, or when you withdraw your consent
  • How long: like all gameplay positions, they are kept with no fixed period, for the hunt history and for handling disputes, and deleted manually by our team. After account deletion, they stay linked to the anonymized identity (see section 8)
  • No profiling: these positions are never used for advertising, for profiling your habits, or for any automated decision taken against you. Other players never see them
  • Legal basis: your consent to the use of your location (version 3), given on a dedicated screen in the app and recorded with its version. Without this consent, you cannot join a hunt
  • How to stop: leave the hunt, withdraw your consent in the app (Settings → Location), or withdraw location access in your device settings. Notifications are turned off in your device settings

3ter. Hunts near you

This section applies only if you turn on the Nearby Hunts alerts in the app (Settings then Notifications). They are off by default.

  • What we keep: Your latest position only, stored as a single entry that each new position overwrites, with your phone's timezone. We keep no history of your movements.
  • Why: Only for two alerts: a daily digest of the hunts near you that day, sent at most once a day, at a time set by our team and applied in your timezone, and a "starting soon" alert when a session near you is about to begin. It is used for nothing else, and never for advertising profiling.
  • When it is sent: Only while the app is open on your screen: when you open it, on the Discover screen and while you use it. Nothing is sent when the app is closed or in the background.
  • How long: A position older than the period set by our team (72 hours by default) is no longer used for alerts. It is deleted as soon as you turn the alerts off or delete your account.
  • How to stop: Turn off the daily digest of hunts near you in the app, under Settings then Notifications. The alerts stop and the stored position is deleted right away. You can also withdraw location access in your device settings.
  • Legal basis: Your consent, given when you turn the alerts on. You can withdraw it at any time without affecting the rest of the service.

4. Legal bases for processing

We process your data on the following legal bases:

  • Performance of the contract: to provide our services, hand over the prizes and coupons you win, and send transactional emails
  • Consent: for geolocation during the hunts you have joined, in the background too (asked on a dedicated screen in the app and withdrawable at any time in Settings → Location, see sections 3 and 3bis), for the Nearby Hunts alerts (section 3ter), for usage statistics (usage data in section 3, and the error events and performance measures sent to PostHog), for push notifications and for marketing communications
  • Usage statistics: the app asks for your consent on a dedicated screen, before sign-in and before anything is sent. Until you answer, or if you choose "Later", nothing is sent. Your consent is recorded with its version, and you can withdraw it at any time in the app (Settings › Privacy › Usage statistics). Sending stops at once
  • Legitimate interest: to prevent fraud (anti-cheat) and to detect and fix crashes and errors of the app, the website and our tools (crash reports with no personal data, see section 3). Crash reports are on by default, and you can object at any time in the app (Settings → Diagnostics). The setting applies the next time the app starts. The website's reports are anonymous; you can also object by writing to us (section 12)
  • Legal obligation: to comply with our tax and accounting obligations

5. Purposes of processing

Your data is used to:

  • Provide and improve our treasure hunt services
  • Manage your user account
  • Hand over the prizes and coupons you win
  • Alert you when a treasure or a coupon appears near you during a hunt you have joined (with your consent)
  • Send you, if you turn on the Nearby Hunts alerts, a daily digest of the hunts near you and an alert when a session nearby is about to start (with your consent)
  • Measure the time spent in the venue during a session, for aggregated statistics given to the venue and the brand (with your consent)
  • Send service-related communications
  • Send marketing communications (with your consent)
  • Analyze platform usage and improve the user experience (with your consent)
  • Prevent fraud and ensure the security of the platform
  • Answer the requests you send to support
  • Detect and fix app crashes and errors (you can opt out in Settings → Diagnostics), and app slowdowns (with your consent), as well as those of the website and our tools
  • Check that you are 18 or over, from your date of birth

6. Data sharing

We may share your data with:

  • Our partner venues and brands: aggregated, anonymized statistics on participation and time spent in the venue, and redemption-code verification when a prize or coupon is handed over. At the venue counter, staff see the code, the prize or coupon, your username, your first name and the initial of your last name, to check that the win is yours, never your email
  • The venue's shops: a coupon can be issued by the brand, by the venue or by one of its shops. When you use a coupon in the shop that issued it, the shop sees only the coupon code
  • Our service providers (sovereign hosting in Europe, email delivery, push notification delivery by Apple, PostHog analytics EU region)
  • The competent authorities where legally required

We never sell your personal data to third parties.

7. International transfers

Your data is hosted within the European Union. In the event of a transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).

8. Retention periods

  • Account data: for the duration of your registration + 3 years
  • Our partners' billing data: 10 years (legal obligations)
  • Gameplay positions (positions recorded during a hunt you have joined, in the background too): kept with no fixed period, for the hunt history and for handling disputes, and deleted manually by our team. After account deletion, they stay linked to the anonymized identity. The latest position used for the Nearby Hunts alerts follows the rules of section 3ter
  • Messages sent to support: 3 years after the last exchange. If you delete your account, they are no longer linked to it. The name and email in the message are kept for follow-up and marked as coming from a deleted account
  • Usage data, error events and performance measures (PostHog): 1 year maximum
  • Crash and error reports (GlitchTip) of the app, the website and our tools: 90 days, then deleted automatically
  • Cookies: 13 months maximum

9. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your inaccurate data
  • Right to erasure: request the deletion of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to restriction: restrict the processing of your data
  • Right to withdraw your consent: at any time

You can exercise these rights directly from the app: account deletion (Settings → Account) and data export (one request per day). On deletion, your data is disabled and anonymized, with limited legal retention. The positions recorded during your hunts are kept, linked to that anonymized identity and no longer to you, for the hunt history and for handling disputes. For any other request, contact us at privacy@seekandwin.world. You may also lodge a complaint with the CNIL (the French data protection authority).

10. Security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, secure authentication, restricted data access, and system monitoring.

11. Changes

We may amend this policy. Significant changes will be notified by email or through the platform.

12. Contact

For any questions regarding this policy:
Email: privacy@seekandwin.world
Data Protection Officer: dpo@seekandwin.world