Privacy Policy – Draußenbande

Last updated: April 2026

1. Controller

Andreas Kahres
Grünberger Straße 180
35394 Giessen
Germany
Email: info@draussenbande.de

2. General Information

We take the protection of your personal data seriously. Personal data is processed in accordance with the General Data Protection Regulation (GDPR).

3. Data We Collect

3.1 Account Data

When registering, we collect:

• Email address
• Username
• Password (securely encrypted)

Some features may be used without an account.

3.2 Location Data

We use your device's location (GPS) to:

• provide location-based quests

This data:

• is used only when necessary
• is not permanently stored unless required for functionality

3.3 Local Content (Quest Proofs)

During quests, you may create:

• Photos
• Audio recordings

These “proofs” are:

• stored only locally on your device
• not transmitted to our servers
• fully under your control

3.4 Shared Content (Custom Hunts)

If you create and share your own hunts, we store:

• text and quest data
• images you upload (e.g. clue images)

These are:

• stored on our servers
• accessible only to users you share them with

3.5 Usage Data

We process:

• progress data (XP, levels, badges)
• created and completed quests

This is used solely for app functionality.

4. Purpose of Processing

• Providing app functionality
• Enabling quests
• Saving progress
• Delivering shared hunts

5. Legal Basis

Processing is based on:

• Consent (e.g. location)
• Contract performance
• Legitimate interest (technical operation)

6. Data Sharing

We do not sell your data.

Data is only shared:

• if required by law
• for technical hosting purposes

7. External Services and Map Data

The app uses external services and data sources to provide map and location functionality.

Map Data

Maps are rendered using the open-source technology MapLibre. Map styles and basemap tiles are provided through our backend, which sources them from providers such as MapTiler.

Additional geographic data used in the app (for example locations for adventures) comes from the OpenStreetMap database and is retrieved via public Overpass API instances. OpenStreetMap content is available under the Open Database License (ODbL); the map surfaces show the applicable attribution and provider terms.

---

Location Services

On Android devices, the app uses Google Play Services to determine device location. Technical data may be processed by Google for this purpose.

---

Google Sign-In (optional)

If Google Sign-In is enabled and used, Google processes personal data as part of the authentication process.

8. Hosting

The app is hosted by:

IONOS

9. Data Retention

• Account data: until deletion
• Shared content: while actively available
• Local content: stored only on your device
• Usage data: as required

10. Your Rights

You have the right to:

• access your data
• correct data
• delete data
• restrict processing
• data portability

Contact: info@draussenbande.de

11. Account Deletion

You can delete your account at any time. All server-side data will be removed unless legal obligations apply.

12. Minors

Use by minors requires parental consent.

13. Changes

We may update this policy at any time. The latest version is always available in the app and on the website.