Fugitive Player Privacy Policy

1. Service Covered

Fugitive Player is a standalone player client that connects to the existing Fugitive backend at https://fugitive.joeyvt.org and wss://fugitive.joeyvt.org/ws. The client is used to join a live team game, receive game state, scan QR codes, report location during gameplay, complete tasks, sync offline actions, view team progress, and control or view recap features when available.

---

2. Information Collected

Fugitive Player collects only information needed to operate the live game and keep player state in sync.

Player and Team Information

• Player name entered in the app.
• Join codes, team assignment, team name, team color, and team roster state.
• A player session token used to authenticate REST requests and WebSocket connections.
• Task answers, check-ins, message acknowledgements, route progress, and recap controls you submit.

Location Information

• Precise GPS latitude and longitude.
• Location accuracy and client/server timestamps.
• Location-derived arrival status, such as whether a player is within range of the current game stop.

Location is used for game mechanics such as map display, arrival verification, route progress, and live game coordination. Location is requested only when the player client is in use and the device/browser grants permission. Some game modes may require location to complete stops.

Camera and QR Scanning

The camera is used to scan team join codes and location check-in codes. The QR scanner reads frames on the device and sends only the decoded code value or resulting gameplay action to the server. Fugitive Player does not intentionally upload, store, or share camera photos or video.

Support Chat

If you choose to use the Fugitive Player Support chat, the messages you enter are processed to generate a response from the locally hosted support assistant. Support chat messages are not stored as a chat transcript by the application. Do not enter join codes, exact location, contact details, or other sensitive information.

Device, Network, and Diagnostic Information

• IP address, timestamps, request paths, and rate-limiting data generated by normal server traffic.
• Browser or device user agent.
• Client error details such as error message, page path, stack trace, component trace, and user agent when an app error occurs.

Local Device Storage

Fugitive Player uses browser or webview storage for the player token, cached game state, offline action queue, launch markers, and recap-related local state. This allows the app to reconnect, work during spotty network coverage, and sync progress once the connection returns.

Game Media

Task images and videos may load from the Fugitive server under /game-media/... or from connected media infrastructure used by the game. Loading that media creates normal network requests.

---

3. How Information Is Used

• Authenticate the current player session.
• Join teams and deliver live game state over REST and WebSocket connections.
• Verify QR check-ins and location-based arrivals.
• Display route maps, player progress, team status, task state, and recap screens.
• Save actions locally while offline and sync them when the connection returns.
• Prevent abuse, rate-limit requests, debug errors, and keep the service reliable and secure.

---

4. Sharing and Visibility

Fugitive Player does not sell or rent personal information.

• Gameplay information can be visible to teammates and game staff as needed to run the live game.
• Player names, team state, task completion, messages, and progress may be broadcast to connected game clients.
• Location information may be available to game staff or server-side game systems for arrival checks, maps, and coordination.
• Infrastructure providers may process data as needed for hosting, WebSocket delivery, media delivery, logging, security, or error monitoring.
• Information may be disclosed if required by law or to protect the service, players, or others.

---

5. Data Retention and Deletion

Player and team data is kept for as long as needed to operate the active game, review game progress, secure the service, and maintain the backend. The server's player leave action deletes the current player record from the Fugitive backend. Game administrators can also remove players or purge game/team data as part of game operations.

Leaving a team removes the active player token from the client. Cached game state and queued offline actions may remain in browser or app storage until the user clears the site's data, clears the app/webview data, or the app is reinstalled. To request deletion of associated server data, contact the email address below.

---

6. Your Choices

• You can deny camera permission; QR-based join or check-in features may not work without it.
• You can deny or revoke location permission in device or browser settings; location-based game features may not work without it.
• You can leave a team from the app to remove the active player session from the server.
• You can clear browser, webview, or app data to remove locally stored tokens, cached state, and offline queue data.
• For game-specific access, correction, or deletion requests, contact the game organizer who runs your game.

---

7. Children

Fugitive Player is not directed to children under 13. If the game is used in a youth, classroom, church, or group setting, the organizer is responsible for obtaining any required parent or guardian consent and for supervising participation.

---

8. Security

Fugitive Player uses HTTPS/WSS connections for the configured production backend. Access to player routes uses a player token, and player-reachable text is length-limited and sanitized in the application. No system is 100% secure, but reasonable technical and operational measures are used to protect the service.

---

9. Changes

This policy may be updated from time to time. The effective date above will be changed when material updates are published.

---

10. Contact

For help with joining a game, QR scanning, camera or location permissions, or basic privacy questions, use the Fugitive Player Support chat. For a formal privacy request, contact Joey VT LLC at [email protected].