Privacy
policy.

Information you give us

Account details: your email address, a password (which we store only in hashed form), your handle, an optional display name and an optional profile photo.

Early access: if you reserve a handle or join before launch, your email address, the handle you asked for and whether you want launch news.

What you contribute: photos, Discoveries, Stories, Quick Captures, notes and anything else you add to the Atlas.

Messages: what you send us when you contact us or report something.

Orders (when the Official Shop opens): your name, delivery address and order details. Payments are handled by payment provider; we do not see or store your full card number.

Location, and only when you ask

When you tap Check in, your browser asks for permission to share your device's location once. We receive your coordinates and their accuracy, use them to confirm you are within 150 m of the place, and save the check-in to your account. That is the only time we collect your location. We never collect it in the background, and you can refuse or withdraw permission in your device settings at any time; you can still browse RNB without it.

A Discovery is pinned to the place where it was added, so the place appears on the Atlas. Its location is public, so other people can find the place. Your account settings include an option to keep precise coordinates private.

Photos

We store the photo files you upload and make resized copies to display them. Photo files can contain hidden information (metadata) such as when and where the photo was taken and the device used. We remove this metadata from images before they are shown publicly.

Information created as you use RNB

Activity: your check-ins, stamps, saved places, cards, your Case, and who invited you if you joined through an invitation link.

Preferences: such as Nearby awareness, which is off unless you turn it on.

Technical data: the session cookie that keeps you signed in, and standard server logs (such as IP address, browser type and time of request) that we use to keep RNB secure and working.

Usage statistics: we use Vercel Web Analytics to count page views in aggregate. It does not use cookies and does not identify you across other websites.

Data protection law requires a legal basis for each use of personal data. Ours are:

We do not use your data for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Editorial choices, such as which places are printed in an edition, are made by people.

RNB is a community atlas, so some things are public by design:

Public: your handle, display name, profile photo, the Discoveries and Stories you publish (including their photos and places), your Original Finder credit, and the stamps, Trail and cards shown on your profile.

Private: your email address, password, preferences, order details, and the device coordinates saved with your check-ins confirm none are shown publicly. The place a Discovery is pinned to is public, as described above.

Please think before you publish. Avoid sharing other people\'s personal information, and don\'t post photos of people without their permission.

We never sell your personal data. We share it only with:

• Service providers who run parts of RNB for us under contract and only on our instructions: Vercel (website hosting, file storage and analytics), database provider (database hosting), email provider (sending emails) and payment provider (payments, when the Shop opens).
• Professional advisers, such as lawyers and accountants, where needed.
• Authorities, where the law requires it or to protect someone\'s safety.
• A successor, if RNB is ever sold or reorganised. Your data would stay protected by this policy, and we would tell you first.

Some of our providers are based in, or process data in, the United States and other countries. When your data is transferred outside the UK or the European Economic Area, we rely on recognised safeguards, such as adequacy decisions (including the EU–US Data Privacy Framework and the UK extension to it) or Standard Contractual Clauses.

Your account and contributions: for as long as your account is open.

When you delete your account: we delete your personal data within 30 days, and remove or anonymise the content you published. Copies in backups are deleted within 90 days.

Early access list: until launch and for up to 12 months after, or until you unsubscribe, whichever is sooner.

Server logs: up to 30 days.

Order records: for as long as tax and consumer law requires, typically six years.

Depending on where you live, you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete;
• have your data deleted;
• restrict or object to how we use it, including where we rely on legitimate interests;
• receive your data in a portable format;
• withdraw your consent at any time, for example by unsubscribing from launch news.

To use any of these rights, email privacy@reallynotbored.com. We will respond within one month. We may need to confirm your identity first.

If you are unhappy with how we handle your data, please tell us so we can put it right. You can also complain to a data protection authority: in the UK, the Information Commissioner\'s Office (ico.org.uk); in the EU or EEA, the authority in the country where you live.

We use only the cookies needed to run RNB, such as the one that keeps you signed in. We do not use advertising or cross-site tracking cookies, and our analytics do not use cookies. Because these cookies are strictly necessary, we do not ask for cookie consent. If we add any optional cookies in future, we will ask first.

RNB is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

We protect your data with encryption in transit (HTTPS), hashed passwords, private file storage and access controls limited to the people who need them. No online service can be completely secure, so please use a strong password that you don\'t use anywhere else.

We will update this policy as RNB grows. If we make significant changes, we will let you know by email or on the site before they take effect. The date at the top shows when it was last updated.

Legal entity name
registered address
privacy@reallynotbored.com