Privacy Policy
Wrotrail is a game that turns Australia into a map you explore in real life. It is operated by Sprint Digital ("Wrotrail", "we", "us"). This policy explains what personal information we collect through the Wrotrail apps and website (the Service), why, who we share it with and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
The short version. We use your location only when you check in or report a place, to prove you were really there. Your explorer name, level, badges, stats and the photos you add are visible to other players. You can hide yourself from leaderboards, and you can delete your account and data at any time in the app. We may use and commercialise statistics that combine many players' activity and cannot identify you; we do not sell your personal information.
1. Information we collect
Information you give us
- Account: your email address and the explorer name you choose.
- Trips: trip names, how you travel (for example van or bicycle) and who you travel with (for example solo or family).
- Content: photos you upload, places you report as possible Secret Quests (with the name and note you give them) and reports you make about other players' photos.
- Reward claims: your full name and Australian postal address, used only to send you a physical reward.
- Choices: your acceptance of these documents, your optional consent to anonymous travel statistics, and your leaderboard visibility setting.
- Messages: anything you send us by email.
Information collected when you play
- Precise location, only when you act. When you check in at a quest or report a new place, the app sends your GPS position, its accuracy and whether the device reports it as simulated. We store this with the check-in or report. The app also shows your position on the map; that position stays on your device. We do not track your location in the background.
- Gameplay: the quests you complete and when, XP, level, badges, discoveries, the distance between your check-ins, and checks we run to detect cheating (for example, travel speeds that are not physically possible).
- Notifications: if you turn on alerts, a push notification token for your device.
- Technical: IP address, device and app type, and server logs, used to run, secure and fix the Service. On the web, your sign-in token is stored in your browser's local storage. We do not use advertising cookies or third-party ad trackers.
Before upload, the app re-encodes photos on your device into a resized JPEG. This is designed to strip embedded metadata such as camera GPS tags. Anything visible in the photo itself stays in it.
2. How we use it
- To create your account, sign you in and run the game: verifying check-ins, awarding XP, badges and levels, building your passport, trips and leaderboards.
- To turn player reports into Secret Quests and credit the Original Discoverer, and to tell players in a state when a new Secret Quest appears there.
- To keep the game fair and safe: detecting cheating, moderating photos and reports, and enforcing our Terms.
- To check eligibility for and deliver physical rewards.
- To send service emails (such as sign-in codes) and the notifications you turned on.
- To understand how the Service is used, improve it and develop new features.
- To create aggregated and de-identified information (see section 4).
- To meet legal obligations, resolve disputes and protect the rights and safety of players, the public and Wrotrail.
We do not currently send marketing emails. If we start, we will ask for your consent or give you an easy way to opt out of every message.
3. What other players and the public can see
Wrotrail is a social game. Your explorer name, level, title, XP, badges, places explored, state progress, active trip summary and the photos you add to quests can be seen by other players, and by anyone who opens your shared passport link. If you are the Original Discoverer of a Secret Quest, your explorer name is shown on that quest. Your email address, postal address and exact check-in coordinates are never shown to other players.
Turn off Show me on leaderboards in your Passport to remove yourself from leaderboards and disable your public passport page. Pick an explorer name that does not identify you if you prefer to stay anonymous.
4. Aggregated and de-identified information
We combine information from many players to produce statistics and insights, for example how popular a destination is, seasonal trends, emerging places, ways of travelling and visitor distribution across Australia. This information is aggregated or de-identified so that it does not identify you and cannot reasonably be used to identify you. Once in that form it is not personal information. We may use, publish, share, license and sell it, including to tourism bodies, businesses and researchers, and we own it.
If you turn on the optional Share anonymous travel stats setting, we may also include your de-identified travel records in such datasets. These are records with your name, email and account identifiers removed, and with locations and times generalised, for example to an area or a week. You can turn this off at any time in your Passport; it applies to datasets created after you change it. We will never give partners information that identifies you without your express consent.
5. Who we share it with
We do not sell your personal information. We share it only with:
- Service providers that run parts of the Service for us under confidentiality and security obligations: cloud hosting and servers, Amazon Web Services (photo storage, Sydney region), Postmark (sign-in emails), Expo (delivery of push notifications), Apple and Google (push notification services) and map providers (map tiles, including OpenStreetMap on the web).
- Couriers and postal services, which receive your name and address to deliver a reward.
- Other players and the public, as described in section 3.
- Professional advisers, insurers and auditors, when needed.
- Authorities, when required or authorised by law, or to protect someone's safety.
- A buyer or successor, if all or part of Wrotrail's business is sold, merged or restructured. Your information would remain protected by this policy or one at least as protective.
6. Storage overseas
Photos are stored in Australia. Some providers, such as Postmark, Expo, Apple and Google, process information in the United States and other countries. We take reasonable steps to make sure they protect it in line with the Australian Privacy Principles.
7. Security and retention
We protect information with encryption in transit (HTTPS), access controls and limits on who can access it. No system is perfectly secure; if a data breach is likely to cause you serious harm, we will notify you and the OAIC as the law requires.
We keep your information while your account exists. When you delete your account (Passport → Delete account), we permanently delete your profile, check-ins, trips, badges, photos, reports, reward claims and notification tokens. Copies in backups and logs are overwritten in the normal course, usually within 90 days. Secret Quests you helped discover stay on the map without your name. Aggregated and de-identified information is kept. We may keep information we must hold by law or need to resolve a dispute.
8. Your choices and rights
- Access and correction: your passport shows the information we hold about your play. You can change your name and settings in the app, or email us for a copy of your personal information or to correct it.
- Location: you can deny or revoke location access in your device settings; you won't be able to check in or report places without it.
- Notifications: turn them off in your device settings at any time.
- Deletion: delete your account in the app at any time.
- Anonymity: you can use any explorer name and hide yourself from leaderboards. We need an email address to provide an account.
We will respond to requests within 30 days. If you have a complaint, email us first and we will try to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
9. Children
Wrotrail is for people aged 16 and over. Players under 18 must have permission from a parent or guardian. We do not knowingly collect information from children under 16. If you believe a child under 16 has an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the Service changes. We will post the new version here with a new date. If a change materially affects how we use personal information you have already given us, we will tell you in the app or by email before it applies, and ask for your consent where the law requires it.
Contact us
Sprint Digital
Email: hello@wrotrail.com