The whole game is a claim that you physically went somewhere. There is no way to check that without reading your location, so rather than bury it: this is everything recorded, why it exists, and how long it survives.

What is recorded

Location fixes

The GPS log behind a claim — coordinates, accuracy and timing over a 20-second window. A single point cannot be told apart from a spoofed one; the shape of a real log can.

Claims and attempts

What you claimed, where, when, and why an attempt was refused. The refusals matter as much as the successes — they are how repeated spoofing is detected.

A device fingerprint

A server-signed token derived from coarse browser characteristics — screen size, timezone offset, renderer. It identifies a device across claims without identifying you.

A hashed network address

Your IP is hashed, never stored raw. It is used to notice one address farming many wallets, and it is a soft signal precisely because cafés, offices and mobile carriers share addresses.

Your wallet address

The public address only. In demo mode the key is generated in your browser and never leaves it.

What is not

No name, no email, no phone number, no account. No advertising identifiers and no third-party analytics or tracking scripts. Location is read only while the app is open and you are hunting — the game has no reason to know where you are the rest of the time, and does not ask.

How long

Raw location fixes are purged after 24 hours — long enough to investigate a suspicious claim, not long enough to be a movement history. Anonymised summaries are kept for 90 days. Both run on a schedule, not on request.

Deleting it

Erasure requires proof that you control the wallet — a signature, not just typing an address. Without that, anyone could erase anyone’s collection by guessing, and an abusive wallet could destroy its own audit trail. Signing happens in your browser; the key never leaves it.

One thing does not disappear. A confirmed claim records that inventory left the vault, so the row stays — stripped of its device, network and location, but still carrying the wallet address. Deleting it outright would leave the vault’s accounting unable to balance against what it paid out. Everything that describes you goes; the fact that a payment happened does not.

This is a demo deployment. The wallet is generated in your browser and holds nothing of value, and every asset figure on this site is simulated. The data described above is still recorded and still deletable — the mechanism is real even though the assets are not.