PRIVACY POLICY (GDPR)
Last updated: 2026-07-01 | Data Controller: TerraDrop / GuideVault · contact@guidevault.online
1. Data We Collect
- Account data: username, email address, hashed password — collected at registration.
- Game data: scores, round results, average distance, timestamps — stored to power leaderboards and your personal stats.
- Payment data: your Paddle subscription ID — we never store card numbers or bank details. Payment processing is handled entirely by Paddle.com Market Limited.
- Technical data: your IP address and session cookie, retained for security and fraud prevention.
- Optional: country (flag display in profile) — voluntary, not used for profiling.
2. Legal Basis for Processing (GDPR Art. 6)
- Contract performance (Art. 6.1.b) — account management, subscription fulfillment.
- Legitimate interest (Art. 6.1.f) — leaderboard integrity, security.
- Consent (Art. 6.1.a) — marketing communications (if opted in).
3. Data Retention
Account data is retained until account deletion. Deleted accounts enter a 30-day grace period before permanent removal. Leaderboard entries may be anonymised rather than deleted to preserve ranking history.
4. Third-Party Services
- Paddle.com Market Limited — Merchant of Record, payment processing. Paddle Privacy Policy
- Google Maps / Street View — panorama imagery. Google Privacy Policy
- Mapillary — additional street-level imagery. Mapillary Privacy Policy
- OpenStreetMap — map tiles. OSM Privacy Policy
5. Your Rights (GDPR)
You have the right to: access your data, rectify inaccuracies, erase your account ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, contact contact@guidevault.online. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD): aepd.es.
6. International Transfers
Paddle.com Market Limited may process data outside the EEA under Standard Contractual Clauses. No other international transfers take place.
7. Contact / DPO
TerraDrop / GuideVault
contact@guidevault.online