Privacy Policy

What we keep, and why

Last updated: 2026-07-30

Realm Walkers is a private-beta walking game. This page explains, plainly, what data the app touches, where it goes, and what you can do about it. No legal boilerplate — just the actual story.

What we collect

  • Email. Used only for magic-link sign-in via our auth provider.
  • Your GPS location. Read only while the app is open, and only at these moments: when you first allow location, when the map opens, when you return to the map after leaving it, when you tap to recentre the map, when you tap to try again after a location error, and when you tap to check that you have arrived at a landmark. Each one is a single reading. The app never follows you in the background, and it records no continuous trail of where you go. You’ll see the browser’s own location-permission prompt the first time the app asks.
  • Location saved with your account. Some of it is kept, so it is worth being exact. When you start a walk, the coordinates you started from are saved with that walk, at the full precision your phone reports. Nothing removes them after a set period of time. Checking your arrival does not save a second position; it records only that you arrived and when. Separately, the map keeps the last coordinates it used to choose landmarks for you, one set per party, so it can tell when you have moved to another city. Both of these are deleted when you delete your account.
  • What your partymates can see. The app never shows your position to another player. On the map, if a partymate is walking to a place within 500 metres of one of your own places, you see their name and the place they chose to walk to — the destination they picked, never where they are. Partymates also see each other’s daily picks: when a landmark is on your list for today and it is one of theirs too, or close to one of theirs, it appears on their map with your name on it. Your party also shares one chronicle, and every member can read all of it: who walked to which place, what happened in their encounters, and when someone gained a level. That is how a party works, not a leak — but it does mean a partymate sees the places you walk to and the places you pick.
  • Character and party data. Your character’s name, class, level, XP, items, creatures, and which party you’re in.
  • Player actions. The text you type during encounters. This is sent to the LLM so the DM can react to what you do.
  • Encounter history and journal entries. Saved so you can revisit your adventures.
  • Optional avatar image. If you upload one.

How we use it

Only to run the game. Encounters need the LLM to see your character, inventory, and landmark. The journal reads back your encounter history. That’s it. No marketing emails, no third-party analytics, no advertising networks.

Third-party processors

  • Supabase — database and auth (EU region).
  • Anthropic — Claude generates encounter narration. Your player-action text and game context are sent to the Claude API.
  • Mistral AI — fallback DM when Anthropic is unavailable. Same data shape as Anthropic.
  • fal.ai — generates pixel-art sprites for items and creatures. Only item / creature names and descriptions are sent.
  • Vercel — hosts the app and runs the serverless functions.

Retention and deletion

Your data stays while your account is active. When you delete your account from Profile, every row tied to your account is deleted — characters, items, encounters, journal entries, avatar — in a single cascading operation.

Your rights (GDPR)

  • Access. You can see your data in the app — character, items, journal, encounters.
  • Deletion. One-tap from the Profile screen (Delete Account).
  • Portability. Email vladpopirda@gmail.com during the beta and I’ll export your data manually.

Legal basis

GDPR Article 6(1)(a) — explicit consent for GPS location. GDPR Article 6(1)(b) — contractual necessity for your account and in-game data (the game can’t run without them).

Not for under-13s

Realm Walkers is not intended for users under 13. If you believe a child has signed up, email us and we’ll remove the account.

Contact

vladpopirda@gmail.com