Ludocity Privacy Policy
Last updated: 22 October 2026 · Version 0.1
The Italian version is the original; this is a courtesy translation. If they differ, the Italian text prevails.
This policy explains which personal data Ludocity (the website ludocity.app and the app, also at
play.ludocity.app) processes, why, for how long, and how you can exercise your rights. It is written under
articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Who processes your data
The data controller is:
Federico Gualdi, Via Covignano, Rimini 47923.
For any question about your data write to privacy@ludocity.app.
2. Which data we process and why
| Data | What it is for | Legal basis | For how long |
|---|---|---|---|
| Email and password (the password is stored encrypted, we cannot see it) | creating your account, signing you in, sending confirmation and password-reset emails | contract (art. 6.1.b) | as long as you have the account |
| Sign-in with Google: the email, name and profile picture Google gives us | signing you in without a password; if the email matches an existing account, your Google sign-in is linked to that account | contract (art. 6.1.b) | as long as you have the account |
| Username (you choose it) | identifying you in the game: it appears in the leaderboard and to the organizers of the worlds you play | contract (art. 6.1.b) | as long as you have the account |
| Game progress: worlds you take part in, stops discovered and completed (with date and points), stamps, prizes | running the game, the passport and the leaderboard | contract (art. 6.1.b) | as long as you have the account; after deletion it stays anonymised for statistics and historical leaderboards |
| Photos you take for the stops that ask for them | checking the stop | contract (art. 6.1.b) | as long as you have the account; we delete them straight away if you delete your account |
| Location of the device | showing you on the map and checking that you are near a stop | contract (art. 6.1.b) and the permission you grant in your system | we do not keep it (see below) |
| Technical data: IP address, device and browser type, request times | security, abuse prevention, running the service (request limits, logs) | legitimate interest (art. 6.1.f) | for as long as the providers keep their logs (usually a few days, 30 at most) |
| Technical metrics and traces of the service | knowing whether the service works and fixing errors | legitimate interest (art. 6.1.f) | about 14 days |
| Messages you send us | answering you | contract / legitimate interest | 24 months after the last reply |
We use no analytics or session-recording tools and no advertising, and we do not send you promotional messages. We make no automated decisions that have legal effects on you: the leaderboard orders players by points, nothing more.
Location
Your phone or browser asks for permission to use your location, and you can refuse or withdraw it at any time in your device settings (without it, some features, such as completing stops on the spot, are not available). Your location stays on your device to show you on the map. When you complete a stop or upload a photo, we send the server the position of that moment only to check the distance from the place, and we do not store it: our database has no field for players' coordinates. For the list of nearby worlds, the distance is computed on your device.
Photos
Photos taken for stops are resized and re-encoded before being stored: the metadata the camera writes in the file (location, device, date) is removed. They are kept in a private space, are never public and are not visible to other players. Today nobody else can see them. In future the organizer of the world will be able to see them only to check the stop, and we will tell you. Do not photograph people without their consent and do not include minors: if a photo shows someone, think about it before taking it.
3. Who we share data with
- Other players see only your username and points in the leaderboard.
- The organizers of the worlds you take part in (whoever created that world) see your username and your progress in that world, not your email. For the data they see they are independent controllers, and under our Terms they undertake to use it only to run the world.
- Providers that process data on our behalf (processors, art. 28), with whom we have, or are concluding, the required agreements:
| Provider | What it does | Where |
|---|---|---|
| Supabase | sign-in (accounts), database, space for photos | Europe |
| Render | hosts the server | United States (west coast) |
| Cloudflare | hosts the website, DNS, forwarding of support mail | global network |
| Resend | sends account emails | Europe |
| MapTiler | provides map tiles (sees the IP address and the area shown) and address search for organizers | Switzerland/EU |
| Grafana Labs | technical monitoring | United Kingdom (London) |
- Google, if you choose to sign in with Google: it processes your data as an independent controller, under its own policy. We receive your email, name and profile picture.
- Authorities, when the law requires it.
We do not sell your data and we do not use it for advertising.
4. Transfers outside the European Union
If a provider processes data outside the European Economic Area (for example in the United States), it does so with the safeguards required by the GDPR: an adequacy decision (such as the Data Privacy Framework for certified providers) or standard contractual clauses. On request we tell you which safeguards apply.
5. Your rights
At any time you can ask for access to your data, its rectification, erasure, restriction of processing, portability (the data you gave us, in a machine-readable format), and you can object to processing based on our legitimate interest. If processing is based on consent, you can withdraw it at any time, without effect on the past.
- Deleting your account: from the app, under "Account". We delete email, password, username and photos; points and completions stay in anonymous form, with no link to you.
- Anything else: write to privacy@ludocity.app. We answer within one month (two months in complex cases, and we tell you). We may ask you to prove you own the account.
If you think your data is not processed properly you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), or with the authority of your country.
6. Minimum age
Ludocity is for people who are at least 14 years old, and at sign-up we ask you to confirm it. If we learn that an account belongs to someone younger, we delete it.
7. Cookies and storage on your device
The website ludocity.app uses no cookies and no analytics or advertising tools. The app uses the browser's
or the phone's storage to keep you signed in and remember your choices (for example the current world): they are
technical tools necessary for the service and do not require your consent. If we ever use different tools, we
will tell you and ask for consent before turning them on.
8. Security
Communications are encrypted (HTTPS). Passwords are stored encrypted by the sign-in service. Photos are private. Access to data is limited to those who need it. No system is one hundred percent secure: in case of a personal data breach affecting you we notify you and the authority as required by articles 33 and 34 of the GDPR.
9. Changes
If we change this policy, we update the date and version above and, if the change is significant, we tell you in the app or by email.
10. Contacts
privacy@ludocity.app · Via Covignano, Rimini 47923