Back to Chatynkowo

Wersja polska

Privacy Policy

Last updated: 8 October 2026

In short

This policy covers the www.chatynkowo.pl site and the Chatynkowo mobile app for Android and iOS (together: the “Service”).

  • Without an account we process no personal data. Your progress in finding the Cottages stays on your device.
  • An account is optional. When you sign in with Google or Apple we store your email address, nickname, finds and, if you choose so, your account photo. The nickname, photo and progress appear on the public leaderboard.
  • Your location never leaves your phone. The app uses it only to show you on the map and point to the nearest Cottages.
  • An ad is shown only when you ask for one (support in the app) and is served by Google AdMob. Purchases are handled by Google Play and the App Store.
  • The site uses no cookies; visits are counted by GoatCounter without them.
  • You can delete your account at any time in the app or on the site (section 10).

1. Controller and contact

The controller of personal data processed in the Service is BlockchainWares Software, entered in the Polish National Court Register (KRS) under number 0000137120.

Contact for all matters, including personal data: chatynkowo@gmail.com.

2. Data kept only on your device

Without an account the Service stores data only on your device. It is not sent anywhere until you sign in to an account (section 4).

  • The site (the browser's localStorage): the Cottages you found with the date and time of each find, the badges you earned, and a queue of visit-counter events waiting to be sent (section 7). When you are signed in, the browser also keeps your session token there.
  • The app: the Cottages you found with the date of each find, the rewards you have viewed, a copy of the downloaded stories and pictures (for use offline), your language, the maps app you chose for navigation, how many times you supported us (section 6), and whether you let the app show your position.

You remove this data by clearing the site's data in your browser or the app's data in your phone's settings (or by uninstalling the app).

3. Location and camera (app)

Location. With your permission the app reads your phone's position to show you on the expedition map and point to the nearest Cottages. It reads it only while the map is on screen, never in the background. The position is used only on your phone: we do not send it to any server, store it or share it with anyone. You can withdraw the permission at any time in your system settings; the app keeps working, just without your position on the map.

Camera. With your permission the app uses the camera only to read the QR code on a Cottage's plaque. The image is analysed on your phone, is not recorded or sent, and the code is checked on the device.

4. Account (optional)

An account keeps your finds when you switch phones or browsers and lets you take part in the leaderboard. You create it by signing in with Google or Apple; we never ask for a password. We then process:

  • the email address and account identifier passed on by Google or Apple (Apple may pass a relay address if you hide your email);
  • your nickname: at first the first name from your Google or Apple account, which you can change at any time;
  • your Google or Apple account photo (the address of the picture), only if you turn it on in the account settings;
  • your finds: which Cottages you found and when, and the date you found them all;
  • technical account data: an internal and a public identifier, the dates of sign-up and sign-ins, and the sign-in log kept by the sign-in provider (including IP address and time).

We do this to run your account, sync your finds between devices and run the leaderboard (Art. 6(1)(b) GDPR: the service you ask for by creating an account). The sign-in log serves account security (Art. 6(1)(f) GDPR). We never show your email address publicly and send it no newsletters or ads.

5. Public leaderboard

Once signed in, you take part in the seekers' leaderboard, which anyone can see: in the app and at www.chatynkowo.pl/ranking.html. It shows your nickname, your account photo (if you turn it on, initials otherwise), the number of Cottages found, whether you found them all, the dates of your first and last find and how long it took. You can change the nickname, turn the photo off or delete the account at any time.

6. Support: ads and purchases (app)

Supporting Chatynkowo is voluntary and unlocks nothing; apart from it the app shows no ads.

Rewarded ad. The ad is served by Google AdMob, only when you ask for it; until then the ad library is not started. Before the first ad (in the European Economic Area) Google asks for your consent. Personalised ads are shown only with your consent (Art. 6(1)(a) GDPR), non-personalised ones otherwise; when consent is required and you do not give it, no ad is shown. To serve the ad, Google processes, among other things, the advertising ID, the IP address (which reveals an approximate location), device and app information, interactions with the ad and diagnostic data, also for measurement and fraud prevention. Google describes the details in how Google uses information from sites or apps that use its services. You can change your consent by writing to us or by clearing the app's data (the consent form then appears again), and you can reset or delete the advertising ID in your phone's settings.

“A coffee for the elf”. The purchase is handled by Google Play or the App Store under their privacy policies. We receive no card or payer details; the app only gets a confirmation of the purchase and does not send it to our server.

7. Who processes data for us and which services we use

  • Supabase (Supabase Pte. Ltd.): the database of accounts, finds and the leaderboard, and sign-in. It processes data on our behalf.
  • Google: sign-in with Google, AdMob ads (section 6), Google Play. Apple: sign-in with Apple, the App Store. When you sign in, you use these companies' services under their privacy policies.
  • OpenStreetMap (OpenStreetMap Foundation): the map on the site and in the app is drawn from OpenStreetMap tiles. The tile server sees your IP address and the part of the map you are looking at, but not your GPS position. See the OSMF privacy policy.
  • GitHub Pages (GitHub Inc.): hosting of the site and of the stories, pictures and recordings the app downloads. Like any server, it sees the IP address and technical details of each request.
  • GoatCounter (the site only): a visit counter without cookies. It collects aggregated, anonymous statistics: page views, the approximate number of unique visits, the referring page, the browser type and the country. The IP address is used only briefly to compute an anonymous hash that changes every day and is never stored. When you find a Cottage on the site, the counter receives an anonymous event: which Cottage was found and how many have been found so far in that browser. See GoatCounter and the GDPR. The app does not use GoatCounter.
  • Navigation and social media: the navigation button opens Google Maps, Apple Maps or another maps app, and the footer links lead to Instagram and Facebook. From then on those services' privacy policies apply; until you open them, we pass them nothing.

We do not sell data and do not use Google Analytics, the Meta Pixel or any retargeting tools.

8. Transfers outside the EEA

Some of the providers above (including Supabase, Google, Apple and GitHub) may process data outside the European Economic Area. This is done under a European Commission adequacy decision (the EU-US Data Privacy Framework) or the standard contractual clauses approved by the Commission.

9. How long we keep data

  • account data, finds and the leaderboard entry: until you delete the account;
  • the providers' sign-in logs and backups: for the period their rules set, after which they are deleted automatically;
  • data on your device (section 2): until you remove it.

10. Deleting your account

You can delete your account yourself at any time:

We then delete your finds, your profile (nickname, photo, leaderboard entry) and the account itself (email address and sign-in identifiers). Progress kept on your device stays there; clear the app's or the site's data to remove it.

11. Your rights

You have the right to access your data, to have it rectified, erased, restricted and ported, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting the lawfulness of earlier processing. Write to chatynkowo@gmail.com to exercise them. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), or with the authority of your country.

12. Cookies

The site and the app use no cookies. The data from section 2 is kept in the browser's or the app's storage, is not attached to requests and is not used for tracking. When you sign in you go to Google's or Apple's pages, which may use their own cookies.

13. Children

The Service can be used without an account and without giving any data. If you are a parent or guardian and believe your child created an account without your knowledge, write to us and we will delete it.

14. Changes to this Policy

This Policy may change as the Service evolves. The current version is always at this address; the date of the last change is shown at the top.