Who is responsible for your data
The data controller is wro.app. For anything about privacy, write to [email protected].
What we collect and why
Account
When you create an account we store your email address and password (the password is stored and checked by Amazon Cognito; we never see it). Your game progress is linked to the account: dwarfs found, cards, XP, badges, routes started, and whether you have the Explorer Pass. We also note when you open the Explorer Pass offer or "buy" it, to learn whether the offer interests anyone (today it costs nothing). The part of your email before the @ is shown as the name on your profile.
Legal basis: contract, i.e. providing the service you ask for (Art. 6(1)(b) GDPR).
Location
The map uses your phone's GPS only if you allow it in your browser. When you check in at a dwarf, your position is sent to our server, which checks that you are within 15 metres. We don't store the position: we only record which dwarf was found and when.
Server logs
Our servers keep technical logs (e.g. account ID, address visited, errors) to detect failures and abuse. We keep them for up to 150 days.
Legal basis: our legitimate interest in keeping the service secure and working (Art. 6(1)(f) GDPR).
Analytics (PostHog)
On your first visit we ask whether you agree to analytics cookies. Until you answer, we collect no analytics at all.
- If you accept: PostHog stores an identifier in your browser (a cookie and local storage). We collect pages visited, clicks and scrolling (heatmaps), loading speed, browser errors, device and browser type, approximate location from your IP address (city, country), where you came from (e.g. a campaign link), and recordings of some visits. Form fields are always hidden in recordings, so we never see what you type (such as passwords). If you are signed in, this data is linked to your account ID. PostHog may also show you a short survey.
- If you decline: nothing is stored in your browser. We only count page views; PostHog recognises visits from the same day by a one-way hash of your IP address and browser, with a key that changes daily. No recordings, no surveys, no link to your account.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law); without consent, our legitimate interest in counting visits (Art. 6(1)(f) GDPR). You can withdraw consent at any time via Cookie settings in the page footer; this doesn't affect what was collected before.
Cookies and browser storage
| Name | Purpose | Lifetime |
|---|---|---|
access_token | sign-in (necessary) | 1 hour |
refresh_token, uid | keeping you signed in (necessary) | 30 days |
wro_in | tells the page you are signed in (necessary) | 30 days |
wro_consent (local storage) | remembers your cookie choice (necessary) | until cleared |
__ph_opt_in_out_… (local storage) | PostHog's record of your choice (necessary) | until cleared |
ph_…_posthog (cookie and local storage) | PostHog analytics, only with consent | 1 year |
Necessary storage needs no consent: without it, signing in and remembering your choice wouldn't work.
Who processes data for us
- Amazon Web Services: servers, database, sign-in and sending emails with codes (US region, us-east-1).
- Cloudflare: DNS, page acceleration (CDN) and images.
- PostHog: analytics (servers in the US).
- jsDelivr and cdnjs: deliver JavaScript libraries; they see your IP address, like any server a page loads files from.
Some of these companies process data in the US. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We don't sell your data or use it for advertising.
How long we keep data
- Account and game progress: until you delete your account.
- Server logs: up to 150 days.
- PostHog analytics: according to our PostHog plan, currently at least one year (older data may be archived or deleted); visit recordings: 30 days. On request we delete analytics data linked to your account.
Your rights
You have the right to access, correct and delete your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. To delete your account or use any other right, write to [email protected]. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
Children
wro.app is a game for families. If a child under 16 plays, a parent or guardian should create and manage the account.
Changes
When we change this policy we update the date at the top of the page. We announce important changes on the site.