Privacy policy
Last updated: 17 October 2026
Spider Run is a game that uses your location, so we take your data seriously. Here's what we keep, what for, who else sees it and how to delete it. In short: you can only be seen while you run, your runs are yours alone, there are no ads and we don't sell data.
Who is responsible
[DATA CONTROLLER: to do]. Contact for anything about privacy: [CONTACT EMAIL: to do].
What data we keep and why
| Data | What for | Who sees it |
|---|---|---|
| Your email | Signing in with a one-time code. We don't send you advertising. | Only us. |
| Player name and color | Identifying you in the game. | All players. |
| Your phone's time zone and language | Counting your streak days and writing notifications in your language. | Only us. |
| Your runs: GPS points (position, time, accuracy, altitude), distance and times | Playing (the server decides conquests, steals and cuts) and showing you your stats. | Only you. |
| Your live position, only during a run | Letting others see your square on the map. It isn't stored. | Whoever is looking at that part of the map at the time, except inside your private zones. |
| Your territory and the trail of your current run | They're the game board. | All players. The part of your trail inside your private zones isn't shown. |
| Results: steals, cuts, leaderboards, streaks, achievements and podiums | Leaderboards, seasons and medals. | All players (your name and your numbers, never where you ran). |
| Your private zones | Hiding your position and trail around home or work. | Only you. |
| Your phone's notification identifier | Sending you the notifications you've turned on. | Only us and the service that delivers them. |
| Players you block and reports you send | Hiding those players from you and moderating the game. | Blocks, only you. Reports, only moderators. |
We don't use analytics or advertising tools, and we don't sell or share your data with anyone for commercial purposes.
Why we can process it
- To provide the service (the contract you accept when you sign up): your account, your runs and everything the game needs to work.
- With your consent: you turn on the location permission and notifications on your phone, and you can turn them off whenever you like.
- Legitimate interest: preventing cheating and abuse (for example, detecting speeds no runner could reach) and handling reports.
Who we work with
These providers process data on our behalf, only for what's stated:
- Supabase: database, sign-in and game server.
- Our email provider: sending your sign-in code.
- Expo (Expo Push Service), Apple and Google: delivering notifications to your phone. Notifications contain player names and square meters, never locations.
- OpenFreeMap: serves the map images. Like any map server, it receives your IP address and which part of the map you're looking at, but not your account.
If any of them is outside the European Economic Area, the transfer is made with the safeguards the GDPR requires (such as the European Commission's standard contractual clauses).
How long we keep it
- Your account and your runs, until you delete your account.
- Your live position isn't stored: it's only broadcast during the run.
- The notification identifier is deleted when you sign out, delete your account, or when the phone tells us the app is no longer installed.
- Reports, as long as needed to review them.
Your rights
You can ask us for access to your data, to correct it, for a copy in a reusable format, to restrict its use or to object to it, by writing to [CONTACT EMAIL: to do]. You can delete your account yourself in the app (here's how). If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.
Minimum age
Spider Run is for people aged 16 and over.
Security
Connections are encrypted, each player can only read what belongs to them (enforced by the database, not the app), and the server never accepts conquests calculated by the phone: it decides them from your GPS points.
Map data
Map © OpenStreetMap contributors (ODbL), served by OpenFreeMap. City boundaries via geoBoundaries: Spain © IGN (CC BY 4.0) and INE; Portugal © DG Território (ODbL) and Eurostat (CC BY 4.0); France © IGN (Licence Ouverte Etalab) and ARCEP (ODC-By); United Kingdom © ONS (OGL v3).
Changes
If we change this policy, we'll update the date at the top and, if the change is significant, let you know in the app.