Privacy policy

Generic starter text — review it with legal advice before launch.

1. Controller

CityMyst (citymyst.com). Contact: info@citymyst.com.

2. Data we process

On registration: name, email, phone and date of birth. During play: your location (essential for GPS challenges), your answers and attempts, and any photos you choose to send. Phone and date of birth are stored encrypted; the password with an irreversible hash.

3. Purpose

To provide the game service, manage purchases and sign-ups, moderate games and, only if you agreed, send you occasional promotions — you can withdraw that consent at any time.

4. Location

Your position is used to validate arrival at game points and is shared with the organiser only during the game, for gameplay and anti-fraud purposes.

5. Photos

Challenge photos are only sent with your explicit consent on each submission and are kept for a maximum of 12 months.

6. Third parties

Payments: Stripe/Redsys (we never see your card). Maps: OpenStreetMap. We do not sell or share your data with third parties for advertising.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection and portability by writing to info@citymyst.com.