Privacy Policy
What the app knows about you, why it needs it, and how long we keep it.
Short version: the app processes only what the game cannot work without — who you are, which wristband you wear, how many points you have and which photos you uploaded. It contains no analytics, no advertising and no third-party SDKs. Nothing is sold and nothing is sent anywhere. Everything runs on the organiser's own server in the European Union and is deleted after the event.
Who the controller is
Imerze, z.s., company number 24469131, registered office Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic, file L 31867 at the Regional Court in Brno. Data protection contact: jsme@neuzitecni.cz.
We have no Data Protection Officer; we are not required to appoint one.
What we process
| Data | Why | Legal basis |
|---|---|---|
| The name or nickname other guests see on the leaderboard; optionally an e-mail address; role and in-game corporation; details from event registration (ticket tier, t-shirt size, meal choice) | To know who you are and attribute points to you | Performance of a contract (attending the event) |
| The code printed on your ticket | Logging in, and so the info point can read it back to you if you lose the ticket | Performance of a contract |
| The serial number (UID) of your NFC wristband | Logging in by tapping the wristband | Performance of a contract |
| Logged-in devices — device and browser type, last-seen time, session token (stored only as a hash) | So you do not retype the code every time, and so a device can be signed out | Performance of a contract |
| Game records — what you scanned, when, and for how many points | The party index and the leaderboard, and so a score can be explained afterwards | Performance of a contract |
| Photos you upload to the contest, their captions and votes | The photo contest | Consent — uploading is voluntary and can be withdrawn |
| Failed login attempts — a hash of the attempted code, the IP address and the time | So an eight-character code cannot be guessed by repeated attempts | Legitimate interest (security) |
What we do not process
- No location. The app never asks for GPS. Uploaded photos are re-encoded and their EXIF metadata — including the coordinates a phone writes into them — is stripped, so an uploaded photo does not reveal where it was taken.
- No analytics and no tracking. There is no Google Analytics, no Firebase, no advertising SDK and nothing comparable.
- No contacts, calendar, microphone or files beyond the single photo you choose to upload.
- Nothing from the wristband itself. We read only the serial number the factory burned into the chip; nothing is written to it and it holds nothing else.
Who we share it with
Nobody. The app has no third parties: no ad network, no analytics provider, no other company's cloud backend. The data sits on a server operated by the organiser, in the European Union.
Two things worth naming anyway: Apple and Google know you downloaded the app, because their stores distribute it — that is between you and them and we have no access to it. If you e-mail us, the message passes through our mail provider.
Where data becomes visible to others
- Your name and score on the leaderboard are visible to other guests in the app and may appear on screens at the venue and in the event's live stream.
- Contest photos are visible to other guests and may appear on screens and in the stream. An organiser approves them before they are shown.
If you would rather not appear on the leaderboard, write to us or say so at the info point.
How long we keep it
- Within three months of the event we delete attendees' personal data from the app — names, e-mail addresses, ticket codes, wristbands, logged-in devices and login attempt records.
- Results (who won, final standings) are kept as part of the event's history.
- Photos are deleted with everything else unless you give separate consent for further use.
- Database backups are deleted on the same schedule.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest. Consent for photos can be withdrawn at any time.
Write to jsme@neuzitecni.cz; we reply within 30 days. Deletion has its own page: Delete my data.
If you believe we handle your data badly, you can complain to the Czech Office for Personal Data Protection.
Children
The event is 18+ and the app is not directed at children.
Changes
If something changes we update this page and the date at the bottom. Substantial changes are also announced in the app.