Terravo Privacy Policy
Version of 8 October 2026 (beta)
1. Controller
The controller of your personal data is ULTD P. Pelka, the publisher of the Terravo game. Contact on data protection matters: contact form or info@playterravo.com.
2. What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and password (the password is stored only as a hash) | Account, sign-in, password reset | GDPR Art. 6(1)(b) |
| Player name, avatar (symbol or photo), country, language | Shown to other players (map, rankings, chat); national ranking; language of messages | GDPR Art. 6(1)(b) |
| GPS location while you record a route (also in the background), time, accuracy and speed of points | Core of the game: drawing routes and capturing territory; detecting travel by vehicle and GPS errors | GDPR Art. 6(1)(b) GDPR Art. 6(1)(f) |
| Captured territory (areas on the map), route history and statistics | Gameplay, history, weekly summaries, rankings | GDPR Art. 6(1)(b) |
| Normalised form of the email address from sign-up (all lowercase; for Gmail addresses also without dots and without the +suffix), who referred whom, when the referred player closed their first loop (activation) and which reward tiers were claimed | Referral programme: granting rewards and detecting abuse, e.g. referring yourself (the normalised address is used only for this detection). We do not collect IP addresses or device data for this | GDPR Art. 6(1)(b) GDPR Art. 6(1)(f) |
| Player name on the public Founders Wall on the game website | Shown publicly only with your explicit consent (turning on the switch in the app) and after 10 active referrals; you can withdraw consent at any time. Children's (dependent) accounts cannot take part | GDPR Art. 6(1)(a) |
| Peaks reached, progress on selected routes and completed challenges (with the date, without the time) | Trail badges, visible only to you - other players cannot see them. We do not store your position or route for this purpose: the server detects peaks and progress from the current location sent while you play. Peak and route data come from OpenStreetMap (ODbL) | GDPR Art. 6(1)(b) |
| Private and group messages, reactions, blocks and reports | Communication between players; abuse moderation | GDPR Art. 6(1)(b) GDPR Art. 6(1)(f) |
| Push notification token | Notifications (e.g. territory lost, new message, weekly summary); you can turn them off in Settings | GDPR Art. 6(1)(b) |
| Email address from the tester / contact form and the IP address of the request | Adding you to the tests, replying; protection against form flooding (IP kept up to 12 months) | GDPR Art. 6(1)(a) GDPR Art. 6(1)(f) |
| Copy on your phone: recent messages, conversation list and the queue of unsent messages | Reading messages without network coverage and sending them once the connection returns. The copy stays on your device and is deleted when you sign out | – |
| Discovery fog on your phone: list of visited areas | Showing on the map what has already been discovered. The list is kept only on your phone and is never sent to the server; you can delete it in Settings, and it disappears when you uninstall the app | – |
3. What we do not do
What we do not do: other players never see your route or current position - only your captured territory, player name and avatar. We do not sell data, show ads or profile you for marketing. “Share a place”: you send the place chosen on the map as a link through an app of your choice - Terravo stores nothing and sends nothing to the server.
4. Automatic moderation
Messages are checked by an automatic word filter. Group and border-chat messages are also assessed by a language model that runs on our own computer - the text is not sent to any external service. Private messages are assessed (by the model or the administrator) only after the recipient reports them or in children's accounts.
5. Who processes data for us
We use the following processors: Supabase Inc. (database and sign-in; servers in the EU, under a data processing agreement and standard contractual clauses), Google Ireland Ltd. (Firebase Cloud Messaging - delivery of push notifications), SeoHost.pl (application server in Poland, also outgoing email), OpenFreeMap (map tiles - receives your device's IP address when the map is downloaded) and Amazon Web Services (AWS Terrain Tiles - public elevation tiles: with terrain shading turned on, your device downloads them directly from AWS, so the provider receives your device's IP address; the elevation profile of a route is computed by our server, which downloads these public elevation tiles without passing on the player's identity). We do not pass your data to anyone else.
6. How long we keep data
Account and territory data - until you delete the account. Referral programme data (including the normalised email address) and Trail badge data - until you delete the account. Raw GPS points of a route are kept for 14 days and then replaced by a simplified route line (accuracy of about 2 m), kept until you delete the route or the account; deleting a route in the app also deletes this line. Messages - until the sender's or recipient's account is deleted. Moderation records - up to 12 months. Contact form submissions - up to 12 months. After an account is deleted its data is erased within 30 days (backups within a further 30 days).
7. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, transfer it, object to processing and withdraw consent. You can lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, uodo.gov.pl). Delete your account: in the app, Settings → Delete account (immediate), or use the account deletion form.
8. Children
You must be at least 16 to create your own account. Younger children play in a Family Crew on a profile created by a parent or guardian, without their own account or email address; the guardian approves who the child can message.
9. App permissions
Location (also in the background, so routes are recorded with the phone in your pocket), notifications, camera and photos (only when you choose a profile picture), exemption from battery optimisation (optional, so the system does not interrupt recording).
10. Changes and contact
We will describe changes to this policy here and update the version date; important changes will also be announced in the app. Questions: contact form or info@playterravo.com.