BeRaccool
Notify Me
Legal

Privacy Policy

Last updated: September 17, 2026

BeRaccool ("we", "us") is a GPS-based real-world treasure hunt and adventure game. Creating an adventure (BUILD) and playing one (PLAY) happen inside the same mobile app, but they handle your data very differently — BUILD requires a signed-in account, PLAY is fully accountless. This page explains what each side collects, where it's stored, who else sees it, and how you can delete it.

1. Building a Job (account required)

To create or edit a Job you sign in with an account managed by Amazon Cognito (AWS's identity service). Signing up only asks for an email address and a password — we never see or store your password ourselves. Cognito sends its own account emails (verification codes, password resets) via Amazon SES.

Once signed in, the content you create as a Client is stored on our backend:

  • Your Job's title, description, the display name you give as its creator, Spots, Missions, Challenges, Hints, and Loot text.
  • Any cover image or Loot image you upload, in a private cloud storage bucket — the app never uploads media anywhere else, and the bucket isn't publicly browsable.
  • Basic bookkeeping: an internal account identifier (not your email) marking you as the Job's creator, and created/updated timestamps.

This data is used only to run the app: showing you your own Jobs, letting a Crew play a Job you've published, and enforcing that only you can edit or delete your own Jobs.

2. Playing a Job (no account)

PLAY doesn't ask you to sign in or give us your email. The first time you play, the app generates a random identifier on your device to keep track of your own progress — it isn't tied to your identity and we can't turn it back into your email or name. While you play, we may temporarily store, tied to that random identifier:

  • The codename you choose for that playthrough.
  • Your progress through a Job's Plan — which Mission/Challenge you're on, your score, and time elapsed — so you can resume where you left off.
  • Photos you submit for Photo Challenges, uploaded to the same private storage bucket described above, under a path scoped to that Job and your random identifier.

Reinstalling the app, clearing its data, or playing from a different device generates a new random identifier — there's no way to link the old and new one back together, on our end or yours.

3. Location and camera access

BeRaccool asks for two device permissions, both used only while you're actively using the relevant feature and never sent anywhere except as described above:

  • Location — to show nearby Spots on the map and to detect, on-device, whether you've physically reached one. Your location isn't logged, tracked over time, or sent to our backend as a location history.
  • Camera and photo library — to take or pick a Job's cover image, and to capture answers for Photo Challenges. Photos are only uploaded when you submit them as part of BUILD or PLAY, as described above.

4. What stays only on your device

The app also keeps some data locally, never sent to our backend:

  • Your Cognito sign-in tokens, held in the device's secure/encrypted storage.
  • App settings such as your chosen language and theme.
  • A local cache of downloaded Jobs and in-progress PLAY sessions, so a Job stays playable offline and briefly survives the app being backgrounded or closed.

5. Who else processes this data

BeRaccool's backend runs entirely on Amazon Web Services (Lambda, DynamoDB, S3, Cognito, SES) in the EU, and traffic to it passes through Cloudflare as a reverse proxy/CDN in front of both this website and the app's API. We don't use any third-party analytics, advertising, or tracking SDKs in the app or on this site.

The email signup form on this coming-soon page is separate from the app: it only stores the address you enter in your own browser (not on our servers) until we launch a real notification list.

6. Deleting your data

If you have a BUILD account, open Settings → Delete account inside the app. This permanently and immediately deletes every Job you've created, that Job's cover/Loot images, every player's progress recorded against it, and finally your Cognito account itself — this cannot be undone.

If you've only played Jobs (PLAY, no account), there's nothing to delete on our end tied to your identity, since we never collected one — clearing the app's data or uninstalling it removes your local progress and abandons the random identifier described in Section 2.

For anything this page doesn't cover — including a request about data tied to a specific random PLAY identifier — contact us at [email protected].

7. Changes to this policy

BeRaccool is still pre-launch and actively being built, so this policy will change as features ship. We'll update the "Last updated" date above whenever it does.