Prospectour Privacy Policy

Effective date: 14 July 2026 Last updated: 5 October 2026

This policy explains what personal data Prospectour collects, why, the legal basis for using it, who we share it with, how long we keep it, and the rights you have. It reflects how the app actually works.

1. Who we are

Prospectour ("Prospectour", "we", "us", "our") is a location-based idle-mining mobile game for iOS and Android. The data controller responsible for your personal data is Prospectour LTD, a private limited company registered in England and Wales (company number 17369914), registered office 3 Tilling Close, Maidstone, England, ME15 6RW.

For any privacy question, or to exercise your rights, contact our Data Protection Officer, Mark Deakin, at delete@prospectour.co.uk.

We process personal data in line with the UK GDPR and the Data Protection Act 2018 (and, for users in the EEA, the EU GDPR).

2. Age requirement

Prospectour is rated 18+ and is intended only for adults. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it. See also Section 12.

3. What we collect and why

We do not intentionally collect any special-category (sensitive) data. Because precise location can infer sensitive information (for example, proximity to a place of worship), we treat it as high-risk and minimise it as described above.

What other players can see. Only your display name and your game progress. Never your email address, your location or your balances. Your display name is the username you chose; if you have not set one, we show a name derived from the first part of your email address (so sarah.kline@example.com appears as "Sarah Kline") and never the address itself. This name appears on leaderboards, and to the person whose invite code you used and the people who used yours. You can set or change your username at any time in the app.

We do not sell your personal data.

If you are not a player

• Closed-testing sign-ups (the testing form): your name, email address, which phone you have and whether you have tested with us before, used to run the closed test. If we approve you, your email is added to our Google Play tester group (Google Cloud Identity, Section 5) and we email you the opt-in link. Legal basis: Art. 6(1)(a) consent, which you can withdraw at any time by contacting us (Section 14).
• Business partners (the partners form): your business name, trading address, website or social link, description, email address and optional logo. Once approved, the business name, description, link and logo are shown publicly on the partners page of this website; your email and address are not. We email you one-time sign-in codes (via Resend) for the partner page, where you can edit or delete your listing at any time. Legal basis: Art. 6(1)(a) consent.

Cookies and similar storage on prospectour.co.uk

The website uses no advertising or analytics cookies. It stores only what a feature you use needs, or a preference you set:

4. Advertising

Prospectour shows optional rewarded video ads (you choose to watch one for in-game nuggets or a temporary mining boost). Each ad is served by one of our advertising partners; the app takes turns between them rather than letting a single partner serve every ad. These partners are integrated directly: Google AdMob, AppLovin, Liftoff Monetize (whose software is also known as Vungle), Pangle, BIGO Ads, Chartboost and InMobi. The others are reached through Unity LevelPlay, an ad mediation service provided by Unity Technologies (ironSource), which runs an auction between the networks that bid through it: Unity Ads, ironSource Ads and Meta Audience Network. A partner only serves ads once we have enabled it, so not all of them are active at any given time. To serve and pay for ads, the partner that serves an ad may collect and process device information and advertising identifiers, and it confirms to our server that you finished the ad so we can credit your account.

• Consent (EEA / UK / Switzerland). Before any personalised ads load, you will see a Google-managed consent prompt (via Google's User Messaging Platform). If you do not consent, you can still play, and you may see non-personalised ads instead.
• Apple App Tracking Transparency (iOS). On iOS you will also see Apple's App Tracking Transparency prompt. If you do not allow tracking, we and our ad partner will not use the device's advertising identifier to track you across apps.
• How Google uses this data is described in Google's Privacy Policy and in How Google uses information from sites or apps that use our services. A list of the ad technology providers Google may work with is available through the consent prompt.
• Changing your choice. On iOS you can change tracking permission at any time in Settings → Privacy & Security → Tracking; on Android you can reset or delete your advertising ID in your device's Google settings. You can also manage ad personalisation at Google Ad Settings, or contact us (Section 14) to have your consent choice reset.

5. Who we share data with

We use a small number of processors and partners. We do not sell your data.

6. International transfers

Your account data stays in the UK: hosting, database and backups are pinned to the London, UK (lhr) region. Crash and error diagnostics are held in the EEA — Sentry ingests them in Germany — and never include your account ID, email or precise location.

Some processors we use are established outside the UK/EEA, or may route data to group companies that are. Stripe (card payments), Resend (transactional email), Cloudflare (DNS and inbound email routing) and Discord (optional account linking) each operate under a Data Processing Agreement with us, with transfers covered by the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

Some third-party partners you interact with — our advertising partners (Google AdMob, AppLovin, Liftoff Monetize, Pangle, BIGO Ads, Chartboost, InMobi, and Unity LevelPlay with the networks that bid through it, listed in section 4), Giftbit and Twilio (cash-out only), Apple, and the app stores — operate global infrastructure and may process data outside the UK/EEA under their own safeguards (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision). Their handling of your data is governed by their own privacy policies, linked above.

7. How long we keep data

8. How we protect your data

Your email and live location are encrypted at rest with AES-256-GCM; passwords are hashed with Argon2id; all traffic is over HTTPS/TLS; access to production data is role-restricted, requires multi-factor authentication, and is audited. Encryption keys are managed so that destroying a key renders the related data unrecoverable ("crypto-shredding").

9. Your rights (UK / EU GDPR)

Under the UK GDPR (and EU GDPR, if you are in the EEA) you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing based on our legitimate interests. Where we rely on your consent (for example, personalised ads), you can withdraw it at any time without affecting processing that already happened.

To delete your account and personal data, you can either:

• delete it in-app: open Profile → Delete Account and confirm; or
• request deletion via our web page: https://prospectour.co.uk/delete-account.

To exercise any other right, contact our DPO (Section 1). We respond within one month.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, your local data protection authority.

10. California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, and the purposes for collecting it;
• Delete the personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information; and
• Not be discriminated against for exercising these rights.

We do not sell your personal information for money. Under California law, allowing our advertising partner to use identifiers for personalised (cross-context behavioural) advertising may be considered "sharing." You can opt out of this at any time by declining the ad-consent prompt, turning off App Tracking Transparency on iOS, or resetting your advertising ID on Android — this is our "Do Not Sell or Share My Personal Information" mechanism. We do not knowingly sell or share the personal information of anyone under 16 (and the app is 18+).

The categories of personal information we collect, our purposes, and the parties we disclose it to are described in Sections 3 to 5. To make a request, contact us (Section 14); we will verify your request through your account and respond within the timeframes California law requires.

11. Automated decisions

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

12. Children

Prospectour is not directed at children and is rated 18+. We do not knowingly collect data from anyone under 18. See Section 2.

13. Changes to this policy

We may update this policy. We will post the new version here and update the "Last updated" date. We will notify you in-app of material changes.

14. Contact

Controller: Prospectour LTD (company number 17369914), 3 Tilling Close, Maidstone, England, ME15 6RW
Data Protection Officer: Mark Deakin — delete@prospectour.co.uk
Account deletion: https://prospectour.co.uk/delete-account
Supervisory authority: Information Commissioner's Office (ICO), ico.org.uk