Last Updated: 15 September 2026
This Privacy Policy explains how Wroclaw Dwarf Hunt (“we,” “our,” or “us”) collects, uses, shares, retains, and deletes information when you use the Wroclaw Dwarf Hunt mobile application (the “App”).
When you sign in with Google or Apple, we receive a provider-specific account identifier and basic profile information needed to create your account, such as a suggested display name and profile photo where provided. We send the provider token to our server to validate the sign-in. We do not store your Google or Apple password.
We create an internal user ID and store your chosen display name, game progress, collected dwarfs, hints, available capture slots, and leaderboard score. Your display name and score may be visible to other users on the public leaderboard.
The App requests approximate and precise foreground location while you use location-based features. We use it to show your position, find nearby dwarfs, calculate walking routes, confirm that you are close enough to collect a dwarf, prevent unfair play, and diagnose inaccurate map locations. We do not request background location permission or build a continuous location history.
The App requests camera access so you can photograph dwarfs. Photos you submit are uploaded to and stored in Amazon Web Services. The App does not request broad access to your photo library. Submitted photos are used to confirm collections and may be used to train, test, and improve our dwarf-recognition system.
Google Play or the Apple App Store processes payments. We and RevenueCat receive purchase and entitlement information such as product, transaction identifier, store, purchase time, and refund or entitlement status. We do not receive or store your complete payment-card details.
We use Firebase Analytics to collect app-interaction, device, and other identifier data to understand feature usage and improve the App. Advertising identifiers, ad storage, ad-user-data use, and ad personalization are disabled. We use Sentry for crash reports, diagnostics, and performance monitoring. Diagnostic information may include device and operating-system details, app state, interaction information, and technical identifiers. Sentry is configured not to send default personally identifiable information, screenshots, or session replays.
We use information to:
We do not sell personal information or share it with advertisers. We disclose information only as needed to providers that process it for us or to comply with law:
These providers process information under their own terms and privacy commitments. Information may be processed in countries other than the country where you live.
Account, progress, purchase, and submitted-photo data is retained while your account is active and as needed to provide the App. We use encrypted network connections when transmitting data. Firebase Analytics user-level and event-level data is configured for a 2-month retention period. Sentry diagnostic records are retained for the shortest period available under our Sentry plan and then deleted. Clearing or deleting an account removes the Analytics user ID from the device; account deletion also resets locally stored Analytics identity data. Provider-side records are deleted or age out under these settings and applicable provider deletion processes.
After account deletion, we may retain limited records where reasonably necessary for fraud prevention, security, accounting, dispute resolution, or legal compliance. Retained records are restricted to those purposes and are deleted or anonymized when no longer required.
You can change your display name in the App and control camera and location permissions in your device settings.
You can permanently delete your account from Settings → Account → Advanced → Delete Account. You can also follow the external instructions on our Account and Data Deletion page. Account deletion removes your profile, provider link, game progress, leaderboard records, purchase ledger stored by us, RevenueCat customer record, and submitted photos from our active systems, subject to the limited retention described above.
The App is not directed specifically to children. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and delete it where required.
We may update this policy when the App or our legal obligations change. We will post the revised date on this page.
For privacy questions or requests, contact dwarfshunt@gmail.com.