Privacy Policy

Information you provide:

• Account details: your first and last name, email address, username, password, and account type. Your first and last name are shown publicly on your profile and anywhere your activity appears — the leaderboard, the finisher list, the live feed, and as a winner. If you would rather not have your real name published, do not create an account.
• Profile information you choose to add, such as a bio and profile photo.
• If you claim a win: a photo of yourself with the money. This photo is published publicly — see Section 4.
• If you contribute to the pot: your payment is handled by Stripe. We receive a record that a contribution was made, not your card details.
• Messages you send us through the Help Center, contact forms, or sponsorship enquiries.

Information we collect automatically:

• Location data, when you use the radar — see Section 3 for exactly what happens to it.
• Basic usage and device information, and your activity in a hunt: how many clues you have unlocked, whether you reached the hiding place, how many times you used the radar, and when you were last active in the hunt.

• To run the game: unlock clues based on how close you are, tell you your distance band, and record finishers and winners.
• To create and secure your account.
• To operate a live view of a running hunt for the hunt organiser and anyone they have authorised to help run it — see Section 3.
• To send you service messages and notifications (for example, when the money has been found).
• To process pot contributions through our payment processor.
• To prevent cheating, fraud, and abuse, and to enforce our Terms.
• To comply with legal and tax obligations.

GeoStash needs your location to work, because the whole game is based on how close you are to the hiding place. We want to be specific about what we do with it.

• When you tap the radar, your device’s GPS position is sent to our server, compared with the hiding place, and used to decide which clues you have earned. We deliberately return only an approximate distance band, never an exact distance or a direction.
• We keep your most recent position only, and it is overwritten every time you use the radar. We do not build a trail or a history of where you have been.
• During a live hunt, the organiser — and a small number of people they have authorised to help run it — can see that position on a map, alongside your name and username, so they can see how the hunt is going and spot when someone has reached the money. Nobody else can, and the people who can cannot change anything about the hunt. When the hunt is settled, stored positions are deleted.
• We do keep the derived facts the game runs on after positions are deleted: your closest approach in feet, how many clues you unlocked, and whether you reached the hiding place.
• Your location is only read while you are actively using the app. We do not track you in the background, and we do not sell location data.
• You can turn location access off in your device or browser settings. The radar will not work, and you will not be able to unlock clues beyond the first one or be recorded as a finisher.

If you claim a win, the photo you upload is stored in public storage and displayed in the app, including to people who are not signed in. It may also be used to promote GeoStash and Free Money Friday, including on social media, as described in our Terms. Only upload a photo you are happy to make public. If a claim is rejected, the photo is deleted. You can ask us to remove a published photo at any time, though we cannot recall copies others have already saved or reshared.

We do not sell your personal information. We share it only as needed to run GeoStash:

• Service providers that power the app: Supabase (accounts, database, and storage), Mapbox (maps), Stripe (pot contributions), Resend (email), and Vercel (hosting). These providers process data on our behalf under their own terms.
• Other users: your first and last name, username, profile photo, bio, any comments you post, and public activity — such as appearing on the leaderboard, the finisher list, the live feed, or as a winner with your photo — are visible to others. Your email address and your location are not shown to other users.
• The hunt organiser can see your name, username and current radar position while a hunt is running, as described in Section 3.
• Sponsors do not receive your personal information. If you send a sponsorship enquiry, we receive the details you submit.
• Legal reasons: when required by law, or to protect the rights, safety, and security of GeoStash and its users.

GeoStash does not hold funds for you and does not pay prizes through the app. If you contribute to the pot, the payment is processed by Stripe under its own privacy policy, and GeoStash does not receive or store your full card number or bank credentials.

We keep your information for as long as your account is active and as needed to provide the service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. Stored radar positions are deleted when a hunt is settled. We may retain certain records after account closure where required by law.

We take reasonable measures to protect your information, and we rely on trusted providers such as Supabase and Stripe. No system is completely secure, however, and we cannot guarantee absolute security. Keep your password confidential.

• You can edit your profile information at any time in the app.
• You can turn off location access in your device or browser settings (this disables the radar).
• You can ask us to remove a winner’s photo you submitted.
• You can request access to, correction of, or deletion of your personal information by contacting us through the Help Center. We will respond as required by applicable law.

GeoStash is not intended for children. You must be at least 18 years old to create an account, and the app is not directed to anyone under 13. We do not knowingly collect personal information from children under 13; if you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. When we do, we will update the “Last updated” date above. Continued use of GeoStash means you accept the updated Policy.

Questions about your privacy or this Policy, or want your data deleted? Send us a message through the Help Center — it reaches us directly and we’ll reply to the email address you give us.