Castellan ("we", "our", "us") is an AR, location-based territory-control game. This Privacy Policy describes what data we collect when you use the Castellan app, why we collect it, how we use it, and your rights over it. By creating an account or playing, you agree to this policy. You must be 16 or older to use Castellan.
What we collect: We collect your device's GPS coordinates (latitude and longitude) while the app is in the foreground and you are actively using it. We do not collect location data in the background or while the app is closed.
Why we collect it: Precise location is the core mechanic of Castellan. We use it to:
How location is processed: Your GPS coordinates are sent over HTTPS to Supabase (our backend infrastructure provider). The server re-validates your position for each scoring event. Location coordinates from individual scan events are stored in our database as part of the scan record.
No public sharing: Your precise location is never disclosed to other players, third-party advertisers, or any party other than Supabase acting as our data processor. We do not sell your location data. We do not use your location data for advertising purposes.
Castellan is not directed at children under 16. We do not knowingly collect personal information from anyone under 16 years of age.
How the gate works: During account registration and onboarding, you are required to confirm that you are 16 or older before any location data is collected or any gameplay is accessible. This confirmation is recorded server-side. If we learn that a user is under 16, we will delete that account and all associated data promptly.
If you are a parent or guardian and believe your child has created an account, please contact us immediately at the address in Section 6.
Scan events: Each AR scan you perform creates a scan event record in our database. This record includes coordinates, scan timestamp, your team/class, points awarded, and anti-cheat signals (see Section 5). Scan events are retained for gameplay tallying, anti-cheat enforcement, and dispute resolution. We retain this data for the duration of your account.
Account data: Your account (email, display name, team/class selection) is retained until you request deletion.
Deletion: You can request account deletion at any time from the Profile screen within the app. Deleting your account triggers a cascade deletion of all associated scan events, game data, and account information from our systems. Deletion is processed within 30 days of your request.
We use two third-party services in operating Castellan:
Castellan's backend database, authentication, and server functions run on Supabase. All data you generate while playing (account data, scan events, location coordinates) is stored on Supabase-managed infrastructure. Supabase acts as a data processor on our behalf; it does not use your data for its own purposes. Supabase's privacy policy is available at supabase.com/privacy.
On Android devices, we use the Google Play Integrity API to verify that the app is running on a genuine Android device that has not been tampered with. When you perform an AR scan, the app requests an encrypted integrity token from Google Play Services. This token is transmitted to our server (over HTTPS), where it is decoded to obtain a device integrity verdict (e.g., whether the device passes basic integrity checks). The decoded verdict result is stored alongside your scan record for anti-cheat purposes.
Google's processing of the integrity token request is governed by Google's Privacy Policy. We do not receive any personally identifying information directly from the Play Integrity API — only an integrity verdict result.
Each scan event may also store the following anti-cheat signals, all of which are derived server-side and never computed or trusted from the client:
These signals are used solely for gameplay integrity. They are not sold, profiled for advertising, or shared with third parties beyond Supabase (our processor).
Castellan does not sell, rent, or trade your precise location data or any other personal information to third parties for advertising, marketing, or any commercial purpose. Your data is used only to operate the game as described in this policy.
For privacy questions, data deletion requests, or concerns about a minor's account, contact us at:
Email: robert@robdotec.com
App: Castellan (app.cysmos.castellan)
We will respond to privacy requests within 30 days.