Effective 2026-10-07
Privacy Policy
The short version. We collect only what we need to run a fair game. We do not sell your personal information, do not share it for targeted advertising, and do not use facial recognition. We never store your exact location or show anyone where you are. You can delete your account and data at any time.
1. Who we are
The Quest Drop is operated by Quantum Edge Solutions LLC, New Jersey, USA ("we", "us"). We are the "controller" (or "business") responsible for your personal information. Contact us at thequestdrop.help@gmail.com.
This policy applies to our website, apps and related services (the "Service").
2. What we collect, why, and how long we keep it
| Category | What | Why | How long |
|---|---|---|---|
| Identifiers | Email address, handle, account ID | Create and secure your account, sign you in, contact you about the Service | Until you delete your account |
| Age information | Date of birth, the time you confirmed it was accurate | Confirm you are 18+ (never shown publicly) | Until you delete your account. Under-18 sign-ups are deleted immediately |
| Precise geolocation (sensitive) | Your device's GPS position and accuracy, only when you open quests or submit proof, with your consent | Find your city and timezone, open the right quests, verify proof, prevent cheating | The exact position is not stored. We keep your city and a point rounded to about 100 m |
| Approximate location | City, region and country; the country of your network connection | City leaderboards, local quests, fraud prevention | Until you delete your account (network country is not stored) |
| Photos and content | Proof photos you take in the app, captions | Verify quests, show your passport | Until you delete them or your account |
| Photo fingerprint | A short code calculated from each proof photo | Detect reused or duplicate photos. It cannot recreate the photo and is not facial or biometric data | Until the photo is deleted |
| Game activity | Quests completed, XP, badges, streaks, rankings, review decisions | Run the game, leaderboards and Rewards | Until you delete your account |
| Quest Leader information | Business name, website, verification details, quests you submit | Verify leaders and publish quests | While you are a leader, then up to 3 years for legal and safety records |
| Technical data | Session cookies, basic server logs (IP address, browser, time) | Keep you signed in, security, debugging, rate limiting | Session cookies until sign-out; logs up to 30 days |
| Payment data | Plan, billing status (card details are handled by the payment processor) | Process paid plans, when offered | As required for tax and accounting (generally 7 years) |
Sources. We collect this information directly from you and your device. We do not buy personal information from data brokers.
What we do not collect. We do not collect government ID numbers, contacts, browsing history on other sites, microphone audio, or biometric identifiers. Photo metadata (including EXIF GPS tags) is removed before photos are stored.
3. Location and camera
- At sign-up you give your explicit consent for us to use your device's precise location when you open quests or submit proof. Your browser or phone will also ask your permission.
- We only request location when you are actively using those features, never in the background.
- Your exact position is used in the moment to find your city and verify proof, then discarded. We store only your city and a check-in point rounded to roughly 100 meters, used solely to detect cheating.
- The camera is only used when you open it to take proof.
- You can withdraw consent at any time by turning off location or camera access in your device settings or by emailing us. You can still browse, but you will not be able to submit proof.
4. How we use information
- Provide the Service: accounts, quests, verification, XP, badges, streaks and leaderboards.
- Keep it fair and safe: detect cheating, fraud, abuse and rule-breaking; enforce our Terms.
- Communicate with you: sign-in links, service notices, responses to your requests.
- Improve and secure the Service: debugging, analytics on aggregated or de-identified data, preventing attacks.
- Comply with the law and respond to lawful requests.
We will ask for your consent before using personal information for a new purpose that is not compatible with these.
5. Automated decisions
Proof is checked automatically (timing, location, photo comparison). The result decides whether a submission is accepted, held for review, or rejected, which affects XP and rankings. These decisions do not have legal or similarly significant effects on you. You can ask for a human to review any decision by emailing thequestdrop.help@gmail.com.
6. What other people can see
- Public: your handle, home city, title, XP, streak, badges, leaderboard positions, and the titles, months and captions of quests you completed.
- Only you: your email, date of birth, which city each quest was completed in, your photos, and your review history.
- Never shared: your exact location.
7. Who we share information with
We do not sell personal information and do not share it for cross-context behavioral or targeted advertising. We disclose it only to:
- Service providers (processors) that act on our instructions under contract: Supabase (database, authentication, file storage), Cloudflare (hosting, security), OpenStreetMap Nominatim (converting coordinates into a city name, receives coordinates only), our email delivery provider, and, when paid plans launch, our payment processor.
- Legal and safety: when required by law, subpoena or court order, or when we believe in good faith it is necessary to protect someone's safety, investigate fraud, or enforce our Terms. Where allowed, we will notify you first.
- Business transfers: if we are involved in a merger, acquisition or sale of assets, under this policy's protections, with notice to you.
- With your direction: for example, when you choose to share your passport.
8. Cookies and similar technologies
We use only strictly necessary cookies to keep you signed in and secure. We do not use advertising cookies, cross-site tracking, or third-party analytics cookies, so there is nothing to opt out of. We honor Global Privacy Control signals as an opt-out of any sale, sharing or targeted advertising, even though we do not engage in those activities.
9. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information;
- Get a portable copy of your information;
- Opt out of the sale of personal information, targeted advertising, and profiling that produces legal or similarly significant effects (we do none of these);
- Withdraw consent, including for precise geolocation;
- Limit the use of sensitive personal information (we only use it to provide the Service);
- Appeal our decision on your request;
- Not be discriminated against for exercising your rights.
How to make a request
- Delete your account instantly from the Account page.
- For any other request, email thequestdrop.help@gmail.com from your account email with the subject "Privacy Request".
- We verify requests by confirming control of your account email. An authorized agent may submit a request with your signed permission, and we may ask you to confirm it directly.
- We respond within 45 days (we may extend once by 45 days if necessary and will tell you why), or within one month where GDPR applies. Requests are free, up to twice a year.
Appeals
If we decline your request, you can appeal by replying to our decision or emailing thequestdrop.help@gmail.com with the subject "Privacy Appeal" within 60 days. We will respond within 45 days and explain our reasons. If you are not satisfied, you can contact your state attorney general or consumer protection agency. In New Jersey, that is the Division of Consumer Affairs in the Office of the Attorney General.
10. Notice for U.S. state residents
This section applies to residents of states with consumer privacy laws, including New Jersey, California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware and others. In the past 12 months we have collected the categories in section 2 for the purposes in section 4, and disclosed them to the service providers in section 7 for business purposes. We have not sold or shared personal information for targeted advertising, and we have no actual knowledge of selling or sharing personal information of anyone under 18. Precise geolocation is sensitive personal information under these laws. We process it only with your consent and only to provide the Service.
11. Users outside the United States (EEA, UK, Switzerland)
Our legal bases for processing are:
- Contract: to provide the Service you signed up for (account, quests, Rewards).
- Consent: precise geolocation and camera access, which you can withdraw at any time.
- Legitimate interests: fraud prevention, security, fair play and improving the Service, balanced against your rights.
- Legal obligation: where the law requires us to keep or disclose information.
Your information is processed in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may also object to processing based on legitimate interests and lodge a complaint with your local data protection authority.
12. Children
The Service is only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If someone enters a date of birth under 18, the sign-up is deleted immediately and we keep nothing. If you believe a minor has an account, contact thequestdrop.help@gmail.com and we will delete it.
13. Security
We use encryption in transit, access controls that limit who and what can read each type of data, a private storage bucket for photos, and database rules that prevent players from reading other players' private information. No system is perfectly secure. If a data breach affects your personal information, we will notify you and the authorities as required by law.
14. Deletion
When you delete your account, we delete your profile, photos, submissions, XP, badges and check-in data. Copies in backups are overwritten within 30 days. We may keep limited records where required by law, to resolve disputes, or to prevent fraud and repeat abuse (for example, a record that an account was banned).
15. Third-party sites
Quests may mention businesses, and the Service may link to other websites. Their privacy practices are their own. Please review their policies.
16. Changes to this policy
We will post updates here and change the effective date. If changes are material, we will notify you by email or in the Service before they take effect, and ask for your consent where required.
17. Contact
Quantum Edge Solutions LLC · New Jersey, USA · thequestdrop.help@gmail.com