Legal

Privacy Policy

Last updated: August 13, 2026

1. Who We Are

PicChase ("we", "us", or "our") is a multiplayer photo scavenger hunt game available as a mobile app for iOS, iPadOS, and Android. Our website at picchase.app provides product information and support; gameplay takes place in the mobile app. This Privacy Policy explains how we collect, use, and protect information when you use our website or mobile app.

If you have questions about this policy, contact us at [email protected].

2. Information We Collect

Website (picchase.app)

When you visit our website, we use Google Analytics to collect anonymised usage data, including:

If you decline cookies, we use Google Analytics in cookieless mode: no cookies are set, your IP address is anonymised, and no persistent identifier is stored on your device. If you accept cookies, Google Analytics may set cookies to enable more accurate session tracking across visits. In the EU, EEA, UK and Switzerland, cookies default to declined until you opt in; everywhere else they default to accepted, since consent isn't legally required there — but you can still opt out at any time via "Cookie settings" in the footer.

Mobile App

The PicChase mobile app collects the following data:

App Usage Analytics (Google Analytics for Firebase)

This data is used solely to understand which features are being used and to improve the app experience. It is collected in aggregate and is not linked to any personally identifiable information.

Crash Reports (Google Firebase Crashlytics)

Crash reports help us identify and fix bugs quickly. They do not include your name, game photos, or any game content.

Game Data (Google Firebase)

When you play PicChase, the following data is temporarily stored in Google Firebase to run the game in real time:

Data retention: By default, game data for free-tier games is automatically and permanently deleted 24 hours after the game ends. For Premium games, data is retained for 14 days to allow players to revisit results, then permanently deleted. The host of a completed game can request earlier deletion from the game's overview before this default retention period ends.

After the host requests early deletion, the game can no longer be opened and any web gallery for it is disabled immediately. Permanent deletion of the game data and all submitted photos is usually processed within a few minutes, but can take a few hours. The request cannot be undone and affects the game for all players.

Cancelled games are deleted automatically after a few hours. People who know the game code and join a game can view the photos submitted to that game. A player can delete an individual photo they submitted while the game is active.

We do not create user accounts and do not persistently link any game data to a real-world identity.

Optional Web Gallery (Premium)

A Premium game host can enable an optional web gallery for a finished game at picchase.app/gallery/. When enabled, the photos and player display names of that game can be viewed in a web browser by anyone who has both the six-character game code and a separate five-character gallery password that is generated when the host enables the gallery. Galleries are not listed or indexed anywhere; without both values the gallery cannot be opened, and repeated failed attempts are rate-limited.

The host can disable the gallery at any time, which revokes web access; re-enabling it generates a new password. The web gallery also becomes unavailable immediately if the host requests early deletion of the game, or when the game's retention period ends (see data retention above) — enabling it does not extend how long photos are stored. The host is responsible for choosing who to share the game code and gallery password with.

Photos shown in the web gallery are delivered over an encrypted connection and relayed directly from Firebase — the website does not keep its own copy of your photos. To protect galleries against password guessing, our web server temporarily records the IP address, game code, and time of gallery sign-in attempts and blocks repeated failures; these records are deleted automatically within 48 hours. A successful sign-in sets one strictly necessary session cookie (pc_gallery) that keeps you signed in to that gallery for up to 24 hours; it contains no personal data and is not used for tracking.

3. How We Use Your Information

We do not sell your data to third parties. We do not use your data for targeted advertising.

4. Cookies and Tracking Technologies

Whether our website sets cookies by default depends on your location: visitors in the EU, EEA, UK and Switzerland default to no cookies (Google Analytics runs in cookieless mode) until they opt in via our cookie banner; visitors elsewhere default to cookies accepted, but can decline at any time via "Cookie settings" in the footer.

If cookies are accepted, Google Analytics may set the following first-party cookies:

In addition, the optional web gallery sets one strictly necessary cookie (pc_gallery) only after a successful gallery sign-in. It exists solely to keep you signed in to that gallery, expires within 24 hours, and does not require consent because it is essential to the service you requested.

You can withdraw your consent at any time by clearing your browser's local storage or cookies, or by contacting us. You may also use your browser's built-in tools to block or delete cookies.

The mobile app does not use browser cookies. Firebase and Crashlytics use their own SDKs with device-level identifiers managed by Google.

5. Third-Party Services

We use the following third-party services, each with its own privacy practices:

All Google services are subject to Google's Data Processing Terms. Data may be processed on servers outside your country of residence.

6. Data Transfers

We use Google Firebase, which stores data on Google's global infrastructure. Data may be stored and processed in the United States or other countries where Google operates data centres. By using PicChase, you acknowledge this transfer.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

The host of a completed game can request permanent deletion of the entire game for all players from the game's overview. Individual players can delete photos they submitted while the game is active. Because PicChase does not require accounts and does not store persistent user profiles, most game data is inherently anonymous (tied only to a session-based display name). If you believe we hold identifiable data about you and wish to exercise any of the above rights, contact us at [email protected].

8. Children's Privacy

PicChase is designed for general audiences and may be used by children under parental or guardian supervision. We do not knowingly collect personal information from children under the age of 13 (or under 16 in the European Economic Area). Because no accounts are required to play, no personal information is solicited at sign-up.

If you believe a child has submitted identifiable information through the app (for example, a display name), please contact us and we will ensure it is removed from our systems.

9. Data Security

Game data is stored in Google Firebase, which employs industry-standard security measures including encryption in transit (TLS) and at rest. Access to Firebase data is controlled by security rules. No system can be guaranteed 100% secure; however, we take reasonable precautions to protect the data we hold.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of PicChase after changes are posted constitutes acceptance of the revised policy.

11. Contact

For any questions, requests, or concerns regarding this Privacy Policy, please contact us at:

[email protected]