Privacy notice

Who we are

Roteia operates a travel passport service that lets you collect verified stamps by checking in at participating spots. We are the controller for the personal data described below. Contact details are in the Contact section.

Data we collect

• Account data: email address, password (stored only as a hash), display name, friend code, and authentication tokens.
• Precise location: when you confirm a check-in we read your device GPS coordinates and accuracy to verify that you are at the spot. This is the most sensitive data we handle.
• Social graph: friendships and leaderboard standings you choose to build through friend codes.
• Activity data: challenges, check-ins, passport progress, and optional preferences such as age range and interests.
• Billing references: for partners, subscription and customer identifiers held by our payment processor. We do not store card numbers.
• Technical data: your IP address is processed transiently in memory for security and rate limiting and is not stored as a profile (see the security section).

Why we use your data and our lawful bases

• Creating your account, signing you in, and managing your passport — performance of our contract with you.
• Verifying check-ins with your precise location — performance of the service you request; we explain the use just before we read your location.
• Preventing fraudulent or abusive scans and protecting the service (including rate limiting) — our legitimate interest in security.
• Providing partner dashboards and aggregate analytics — our contract with partners and our legitimate interest in measuring demand.
• Handling billing and subscriptions — performance of a contract and compliance with legal obligations.

Who we share data with

We rely on a small set of service providers (subprocessors). Each receives only the data needed for its purpose:

• Stripe — payment and subscription processing for partners.
• Google — optional sign-in with your Google account (OAuth).
• OpenStreetMap / MapLibre — map tiles used to display spots and your passport map.

A maintained list with each provider's purpose and contractual status is kept in our subprocessor register and reviewed before launch.

Cookies and third-party content

We use a strictly necessary session cookie to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies.

Some pages load content from third parties — map tiles from OpenStreetMap. When your browser requests this content, those providers may receive your IP address and basic request information. Their own privacy terms apply to that processing. The QR-decoding library (jsQR) is served from our own servers, so scanning a code does not expose you to a third party.

How long we keep data

We keep account data while your account is active. Precise check-in coordinates are retained only for the dispute and fraud window and are then reduced or deleted while keeping your passport progress. Detailed retention periods are defined in our internal retention schedule and are subject to legal review.

Security

We apply organisational and technical measures to protect your data. Your IP address is processed ephemerally in memory to enforce rate limits and detect abuse; it is not used to build a profile and is not retained for that purpose.

Your rights

Subject to applicable law, you can request access to your data, correction, erasure, a portable copy, restriction or objection to certain processing, and you can withdraw consent where processing relies on it. You can also lodge a complaint with your data protection authority. To exercise any right, use the contact details below.

Contact

For privacy questions or to exercise your rights, contact us at privacy@roteia.app. We will respond within the period required by law.