Privacy policy

Last updated 3 October 2026

Territory is a mobile game: you walk or run, and the map hexagons you pass through become your territory. This page explains what the app collects to make that work, who can see it, and who handles it.

What we collect

• Account: your email address and password. Your password is stored only as a salted hash by our authentication provider.
• Profile: your username, display name and, if you set one, an avatar.
• Location while you record: GPS readings (position, time, accuracy, speed and altitude) during a walk or run. The app also uses your location on the map to show where you are.
• Activity results: distance, duration, the map hexagons the activity touched, and the influence it earned.
• Technical details: whether you use iOS or Android and the app version, sent when you start an activity. Our hosting providers also see ordinary request data such as your IP address.

Territory asks for location only while you use it. Recording keeps working with the screen locked (Android shows a notification, iOS shows the location indicator) and stops when you finish. The app does not ask for background location access on Android.

What other players can see

• Visible to other signed-in players: your username, display name and avatar, which hexagons you own and when you captured them, how much influence you hold in each, and your leaderboard totals.
• Private to you: your GPS routes, your activity history, and everywhere else you have walked.

Owning hexagons does show roughly which areas you play in. If that matters to you, keep it in mind when you choose where to walk or run.

How we use it

We use your data to run the game: to check that an activity looks like a genuine walk or run, to work out which hexagons it earned, and to show the map and rankings. We do not sell your data. The app does not include advertising or analytics software.

Who handles your data

• Supabase hosts the database, sign-in and server code, in Ireland (AWS eu-west-1). Your account, profile, routes and results are stored there.
• OpenFreeMap supplies the map tiles. When the map loads, it receives the area being viewed and your IP address. It does not receive your account or your routes.
• Vercel hosts this website and sees the usual web request data when you visit it.

Keeping and deleting your data

We keep your data while your account exists. You can remove an activity that was rejected or never finished from inside the app. Activities that counted, and the territory they earned, are kept. Deleting your account from inside the app is not available yet; to have your account and data deleted, contact us using the developer contact details on the Territory store listing.

You can turn off location access for Territory at any time in your phone's settings. Recording a walk or run needs it.

Changes

If this policy changes, we will update the date at the top of this page.