Privacy
Policy.

Overview

This Privacy Policy explains how TagOut ("TagOut", "we", "us") handles information when you use the TagOut iOS app and this website. TagOut is a location-based multiplayer game. We do not sell personal data, show third-party advertising or use your data to track you across apps and websites.

Data we process

Account and profile data

We create an anonymous Firebase account identifier automatically. We store this identifier, your generated or chosen display name, account creation time and last-seen time. We do not require your real name, email address or phone number to play.

Gameplay data

We process game codes and identifiers, team membership, player status, game settings, tag events, scores, votes, timestamps, results and related gameplay records so that multiplayer games work and results can be displayed.

Location and motion data

During an active game, the app processes precise location, heading, pitch, accuracy, movement and alive/online status. This data is sent to our backend to show relevant live positions, determine whether a player is in range and support game rules. Background location is used only while an active game requires it and only after you grant iOS permission.

Camera images and player recognition

The camera is used to register your in-game identity and attempt tags. Your registration photos are analyzed on your device and are not uploaded. The app creates a 512-value mathematical feature vector (an "embedding") from those photos. That vector is stored with your account and, while you play, with the relevant game so the app can match tag attempts. It is not used for advertising or general facial recognition.

For uncertain tag attempts, a reduced review image may be uploaded temporarily for community review. A higher-resolution image may be uploaded if a formal dispute is opened. Confirmed tags do not upload a review photo. Development diagnostics may contain technical measurements, player snapshots, location context and a compressed image of a tag attempt so we can investigate accuracy and reliability problems.

Device and network data

Firebase and its hosting infrastructure may process IP address, device or app instance information, authentication tokens, request timestamps, crash/error details and basic network metadata as necessary to authenticate requests, deliver the service, prevent abuse and maintain security. This website does not set advertising cookies and does not run web analytics.

How we use data

• Provide anonymous sign-in and maintain your player profile.
• Create and run multiplayer games, lobbies, teams, maps and results.
• Broadcast relevant live player positions during active games.
• Evaluate tag attempts and resolve community reviews or disputes.
• Detect errors, prevent abuse and improve game reliability and tag accuracy.
• Comply with legal obligations and enforce our rights.

Where applicable under European data protection law, processing is based on performance of the service you request, your consent for camera/location permissions, our legitimate interest in service security and improvement, and compliance with legal obligations. You can withdraw an iOS permission at any time in Settings.

Service providers and sharing

We use Google Firebase services, including Authentication, Cloud Firestore, Realtime Database, Cloud Storage, Cloud Functions and Hosting, to operate TagOut. Google processes data on our behalf under its applicable data-protection terms. Other players in the same game can see the player name, team, game status, relevant live position and gameplay events needed for the shared experience.

Apple processes information independently when you download the app or follow a link to the App Store. We may disclose information if required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. Any provider receiving user data must provide protection equal to that described in this policy and required by applicable law. We do not sell data or share it with advertising networks or data brokers.

Retention and deletion

• Registration photos: processed on-device and not uploaded; discarded from the registration flow after processing.
• Live position data: used during active play; your live position node is removed when you leave the game. Stale backend copies may remain briefly in backups or logs.
• Community review images: scheduled for deletion after approximately 120 seconds or sooner when the review is resolved.
• Formal dispute images: scheduled for deletion after no more than 24 hours or sooner when the dispute is resolved.
• Profile, identity vector, gameplay records and diagnostics: retained while your anonymous account and the service remain active, unless deletion is requested sooner. Residual backup copies may remain for a limited period until overwritten.

To request deletion of your account and associated data, email privacy@tagout.eu from any address and include your TagOut display name plus any game code or other information that helps us locate your anonymous account. We may ask for additional proof that reasonably links you to the account. We will delete or anonymize data unless retention is required by law or necessary for security, fraud prevention or legal claims.

Your choices and rights

You control camera, location and motion access through iOS Settings. Revoking a permission stops the related collection, although features that require it may no longer work. You can also stop location processing by leaving an active game.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of your data, and withdraw consent. You may also complain to your local data-protection authority. To exercise a right, contact us using the address below.

Children, security and international processing

TagOut is not directed to children under the minimum age required to consent to data processing in their country without parental authorization. If you believe a child provided data without appropriate permission, contact us so we can delete it.

We use reasonable technical and organizational safeguards, including encrypted network connections and access controls. No method of storage or transmission is completely secure. Firebase may process data in countries other than your own; where required, appropriate legal safeguards are used for international transfers.

Changes to this policy

We may update this policy when the app, our providers or legal requirements change. We will publish the revised policy here and update the date above. Material changes will be communicated in the app or by another appropriate method when required.

Contact

TagOut is responsible for the processing described in this policy. For privacy questions, requests or complaints, contact: