Quarterhold Privacy Policy

• We collect your email address, your display name, the banners you fly, the flags you plant, which friends joined with your invite links and the ranks you earn.
• The app sends an identifier for your phone. We keep only a keyed hash of it, to check that the friends you invite play on their own phones.
• While the map is open, your phone sends your location to our server so we can show you the places nearby. We don't store that location.
• Each time you plant a flag, we store the exact GPS point of that plant for 30 days, to catch cheating. Other players never see your coordinates.
• We don't sell your information, we don't show ads, and we don't use analytics or advertising trackers.
• You can delete your account in the app at any time.

Quarterhold, formerly MapCheck ("Quarterhold," "we," "us"), is run by Imperium Consulting Solutions LLC, a New Mexico limited liability company. This policy covers the Quarterhold app, our website and related services (together, the "Service"). You must be 18 or older to use Quarterhold.

2.1 What you give us

• Email address. We use it to create your account, sign you in and send account emails, such as sign-up confirmations and password resets. If it's an email address from a supported school, we use its domain to place you in that school's campus kingdom.
• Password. Supabase, our login provider, handles your password. We never store it in our own database or write it to our logs.
• Display name. Other players can see it, for example when you call a rally.
• Birth month and year. We ask for these when you sign up, to confirm you're 18 or older. We keep only the fact that you passed the age check and when, never the month or year.
• Your agreement to our terms. We record when you accepted our Terms of Service and this policy, and which versions you accepted.
• Banners. The banners you join. For banners you raise, we also store the name, short name, colors and description you choose.
• Invite code. If you sign up with a friend's invite code, we keep it with your account until your first sign-in uses it to join that banner.
• Messages to us. What you send when you email support or report a player or banner.

2.2 Your game activity

• Plants and holds: the place, the time, the banner, the points, the exact GPS point of each plant, and how far you were from the place. Section 3 explains this in detail.
• Rallies you call or answer.
• Invites: the personal invite link we make for you for each banner you fly, and which link brought each player in: who shared it, who used it, and when they signed up. The first friend's link a player uses is the one that counts. To decide whether an invited player counts as a recruit, we also record when they confirmed their email, when they first planted and whether they planted again on another day, which phone (as a keyed hash) their first counted plant came from, and whether we held them for review.
• Ranks and rewards: the recruit and mentor ranks you reach, the mentor marks you earn and your War Horns.
• War Horns you blow: the place, the banner you blew it for and when it sounded, and which plants it doubled.
• Your stats: points, XP, how many flags you've planted and when you last played.

2.3 Device and technical information

• Push token. If you turn on war alerts, your phone gets a token from Expo so we can send you alerts. We store it with your account.
• Phone identifier. With each request, the app sends an identifier for your phone: on iPhone, the identifier Apple gives our apps on that phone (the identifier for vendor), and on Android, its Android ID. Our server turns it into a keyed hash (a one-way code made with a secret key) straight away and stores only that hash with your account, never the identifier itself. We use it for one thing: checking that a friend you invite plays on a different phone from yours, so invites are fair. We don't use it for advertising or to follow you across other apps.
• Crash reports and performance data. When the app or our server has a problem, it sends a report to Sentry. Reports include your device model, operating system, app version and technical details about what went wrong. The app also sends Sentry performance data for some sessions, such as how long screens and requests take. We set up crash reporting and performance data to leave out your email address, your password and your coordinates.
• App update checks. When the app opens, it asks Expo whether a newer version of the app's code is available. This check sends technical details, such as your phone's platform and app version.
• IP address and app version. Our hosting and service providers see your IP address whenever your device connects to them. Our server uses it for a short time to limit abusive traffic. Our own server logs record the kind of request, how long it took, your app or browser version and, for some errors or rejected plants, your account ID. They don't record your IP address or your location.
• On your device. The app keeps you signed in by storing your session on your phone. An invite or rally link you open before signing in waits on your phone (an invite for up to 30 days, a rally for up to 3 hours) until your first sign-in, and holds only its code. If you sign in on our website to call a rally, your browser keeps that sign-in until you close the tab.

2.4 What we don't collect

We don't collect your contacts, photos, camera or microphone. We don't track your location in the background. Quarterhold has no profile photos, no chat or messages, no social sign-in, no in-app purchases, no advertising, and no analytics or advertising trackers in the app or on our website. Because we don't track you across apps or websites, our website works the same way whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.

Location is how the game works, so here is exactly when we use it.

3.1 Permission

Quarterhold asks for your location only while you're using the app. It never asks for background location and never tracks you when the app is closed. Planting needs your precise location. If you share only your approximate location, you can see the map but you can't plant.

3.2 While the map is open

• Your phone sends your current location to our server when the map opens, when it refreshes, and after you move a short distance. We use it to find the places around you.
• If we don't already know enough places near you, our server asks Foursquare for places near that point. Foursquare receives the point and a search radius. It does not receive your name, email address or account.
• We don't store the location from these map searches, and our server logs leave it out.
• The Kingdom tab shows a live view from our website. To draw it, the app passes our website the spot your map last searched from and which of your banners to highlight. We don't store that spot.
• The map itself comes from Apple Maps on iPhone and Google Maps on Android. Your phone loads the map directly from Apple or Google, under their own privacy policies.

3.3 When you plant or hold a flag

• When you plant, your phone sends your exact GPS point, how accurate it is, when it was taken, and whether your phone reports a fake location.
• We check that you're inside the place's radius, that the reading is fresh and precise, that your phone isn't reporting a fake location, and that you didn't travel impossibly fast since your last plant.
• We store the exact GPS point of each plant, together with the place, the time, your banner and your distance from the place. We keep the point to catch cheating: each new plant is checked against your previous one. After 30 days we clear the point and the distance; the plant stays on the board without them.
• When you hold a flag, we check again that you're at the place, with a fresh and precise reading and no fake location, but we don't store the location.
• When you blow a War Horn, we check your location the same way as for a plant, including how far you've traveled since your last plant, but we don't store it. We record only the place, the banner and the time.

3.4 On our website

If you let our website use your location (for example, with "Use my location"), your browser sends it to our server so we can show the places near you, and our server may ask Foursquare for places near that point. We don't store it.

3.5 Who can see where you play

• Other players never see your coordinates.
• Other players see activity by banner, not by person: how many players planted at a place in the last hour and which banners they fly, each banner's points at a place over the past 7 days, and which banner holds each place.
• If you call a rally, your display name, the place and the time window are shown to the members of that banner, and to signed-in players who open the rally link. On an open banner with 25 or more members, everyone else sees "A squadmate" instead of your name.
• Our public web pages for rallies and banner invites show banners, places and counts of players, never player names, except the one below. People who aren't signed in see only counts and which banner holds each place.
• If you share your personal invite link, anyone who opens it sees your display name as the player who invited them, in the app and, for World banners, on our website.
• When you blow a War Horn, players see which banner blew it at that place and for how long, on the map and on the place's page, and players of the banners that fight there may get an alert naming the banner and the place. None of this names you.
• Your recruit and mentor ranks show next to your name where it appears, such as on a rally you call, a banner's member list and your invite. A banner's row in the standings shows the highest rank among its members, without a name.
• The player whose link brought you in sees your display name, whether you are still on your way or already count as their recruit, your rank and how many recruits you brought in. They never see where or when you play. If either of you blocks the other, you show to them as "A player".
• A banner with fewer than 5 members keeps its member count and its numbers at each place from players who don't fly it. Anyone can still see which banner holds a place, so when a very small banner holds one, others may be able to guess who planted there.
• The player who raised a banner can see who flies it (display names and the date each member joined) and can remove members.
• The people who run Quarterhold can see plant records when they need to: to run the game, investigate cheating or reports, or answer legal requests (section 6).

3.6 How long we keep location data

• Map and website searches: not stored.
• Holds and War Horns: checked, not stored.
• Plants: we keep the exact GPS point for 30 days, then clear it. If you delete your account sooner, we clear it right away (section 8). Copies in backups are deleted as those backups roll off (section 7).

3.7 Turning location off

You can turn off location for Quarterhold in your phone's settings at any time. Without it, you can't see the places near you or plant flags.

We use your information to:

• run the game: show places, verify plants, score points and decide which banner holds each place;
• catch cheating, such as faked locations;
• keep invites fair, by recording which link brought each player in and checking that an invited friend plays on a different phone;
• award ranks, mentor marks and War Horns;
• show standings and rallies;
• send the alerts you turned on, such as when a flag you hold falls, your squad calls a rally or a rival banner blows a War Horn where your banner fights;
• send account emails, such as sign-up confirmations and password resets;
• answer support requests and reports, enforce our Terms of Service and keep players safe;
• find and fix bugs; and
• follow the law.

We don't use your information for advertising.

5.1 Other players

Other players see what section 3.5 describes, plus the banners you raise, including their names and descriptions. We don't show other players who raised a banner, and we never show them your email address.

5.2 Outside services we use

These companies help us run Quarterhold. Here is what each one does and what it receives.

5.3 If Quarterhold changes hands

If Quarterhold is sold, merged or reorganized, your information may be transferred to the new owner, and this policy will keep applying to it.

5.4 We don't sell your information

We don't sell your personal information, and we don't share it for targeted advertising.

We share your information with police, courts or others only when the law requires it or to protect people from harm.

• What we hold. Your account details and your plant records: the place, the time, the banner and, for plants in the last 30 days, the exact GPS point of each plant. We don't record where you are while you just have the map open, and we have no background location history, so we can't provide either.
• What we require. We disclose plant locations and other account information only in response to valid legal process. We share location data with law enforcement only when we receive a search warrant, and basic account details only with a subpoena, court order or search warrant, unless we believe someone faces an immediate risk of death or serious harm. We review each request and may push back on requests that are too broad.
• Telling you. Unless the law or a court order forbids it, or there is an emergency, we'll try to tell you before we share your information, so you have a chance to object.
• Emergencies. If we believe in good faith that someone faces an immediate risk of death or serious physical harm, we may share the information needed to help without waiting for legal process.
• Protecting Quarterhold and players. We may also use or share information to enforce our Terms of Service, investigate cheating or abuse, or protect the rights and safety of players, businesses, Quarterhold and others.
• After you delete your account, your past plants are no longer linked to you. Older copies remain only in backups, until those roll off.

You can delete your account at any time:

• in the app: House > Delete account;
• on the web: /delete-account; or
• by emailing support@lvici.app from the email address on your account.

Deletion is immediate. It removes:

• your login and email address;
• your display name;
• your banner memberships;
• the rallies you called;
• your invite links, the record of friends who joined with them, and your phone identifier hashes;
• your ranks, mentor marks and War Horns;
• the record of whose invite brought you in, unless you already counted as their recruit: then it stays with them, no longer linked to you and without your phone's hash; and
• your push token.

What stays, without your name:

• Your past plants stay on the board, but we clear their exact GPS points and remove the link to you.
• Points you already won stay with your banners.
• War Horns you blew stay on record for their banner, no longer linked to you.
• Banners you raised stay up for their other members, no longer linked to you. A banner stays up even if its last member deletes their account. If a banner's name could identify you, email us and we'll rename or remove it.

Copies in our database provider's backups are deleted as those backups roll off, on Supabase's schedule, within 7 days. Until then, we use backups only to restore the Service after a failure. Emails you sent to support are kept as described in section 7.

Wherever you live, you can:

• get a copy of the personal information we hold about you;
• correct information that's wrong, such as your display name;
• delete your account and your information (section 8); and
• turn off location or alerts at any time in your phone's settings. Signing out also stops alerts on that phone.

To ask for a copy or a correction, email privacy@lvici.app from the email address on your account, so we know the request is from you. We'll answer within 30 days. If we can't do what you ask, we'll tell you why. We won't treat you differently for using these rights.

We only send account emails, such as sign-up confirmations and password resets. We don't send marketing email.

Quarterhold is only for people 18 and older. When you sign up, we ask for your birth month and year and block anyone under 18. We don't knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we'll delete it. If you think someone under 18 is using Quarterhold, email support@lvici.app.

• Connections between the app, our website and our server are encrypted (HTTPS).
• The app reaches game data only through our server. The public key built into the app can't read player email addresses or plant locations.
• Within Quarterhold, only the people who run the Service can see player data, and only when they need to.
• No system is perfectly secure, so we can't promise that your information will never be accessed without permission. If a breach affects your information, we'll tell you as the law requires.

We and our service providers store and process your information in the United States: our database runs with Supabase in Amazon's us-east-1 region in Virginia, and our servers run on Vercel in the United States. If you use Quarterhold from somewhere else, your information is transferred there.

When we change this policy, we'll post the new version here with a new version number and date. If a change is significant, we'll tell you in the app or by email before it takes effect.

• Email: support@lvici.app. Use it for questions, account deletion and reports of abuse.
• Privacy requests: privacy@lvici.app
• Legal notices: legal@lvici.app
• Mail: Imperium Consulting Solutions LLC, c/o Republic Registered Agent Services Inc., 8206 Louisiana Blvd NE, Ste A, Albuquerque, NM 87113