Steel Hunt (“the App”) is a scavenger hunt and trivia experience.
We are committed to protecting your privacy and ensuring your information is handled responsibly.
Information We Collect
Account Information: We collect your email address and authentication credentials through AWS Cognito. You may sign in using:
Email and password (passwords are securely managed by AWS Cognito and never stored by us)
Google Sign-In (we receive your email address and basic profile information from Google)
Apple Sign-In (we receive your email address or Apple's private relay email from Apple)
Gameplay Data: Progress information such as current clue, challenge status, completion timestamps, and general usage data.
Authentication Tokens: Secure authentication tokens are stored locally on your device to maintain your login session.
How We Use Your Information
We use the information collected to operate, maintain, and enhance the App.
Specifically, we use it to:
Authenticate your login and manage your game session
Track progress and display relevant clues or challenges
Verify answers and update challenge results
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.
Third-Party Services
The App uses the following third-party services for authentication:
AWS Cognito: Manages user authentication and identity. See AWS Privacy Notice.
Google Sign-In: If you choose to sign in with Google, your authentication is handled by Google. See Google Privacy Policy.
Apple Sign-In: If you choose to sign in with Apple, your authentication is handled by Apple. See Apple Privacy Policy.
These services may collect and process data according to their own privacy policies. We only receive the minimum information necessary to create and authenticate your account (email address and user identifier).
Data Storage and Security
All data is stored securely using industry-standard security practices:
Authentication: User authentication is managed by AWS Cognito, a secure and compliant identity service. Passwords are never stored by us and are handled entirely by AWS Cognito's secure infrastructure.
Database: Gameplay data is stored in a PostgreSQL database with appropriate security measures.
Encryption: All communication between the App and our servers is encrypted using HTTPS/TLS.
Token Storage: Authentication tokens are stored securely on your device using platform-specific secure storage (Keychain on iOS).
We follow industry-standard practices to safeguard your information from unauthorized access or disclosure.
Data Retention and Deletion
Your data is retained only as long as necessary to support your use of the App.
You may delete your account and all associated data at any time directly from the App's Settings screen.
Account deletion will permanently remove your gameplay data from our servers and your authentication credentials from AWS Cognito.
You may also contact us at steelhunt.app@gmail.com for assistance with data deletion.
Children’s Privacy
Steel Hunt is suitable for general audiences and does not contain any objectionable content.
We do not knowingly collect personal information from children under 13 without parental consent.
If we become aware of unauthorized data collection from a child, we will promptly delete it.
Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at
steelhunt.app@gmail.com.