Legal

Privacy Policy

How we collect, use, and protect your personal data, written plainly so you actually know what's going on.

Last updated: July 11, 2026

1. Introduction

Seek & Win SAS ("we", "our", "us") is committed to protecting the privacy of the users of our platform. This privacy policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

2. Data controller

The data controller is:
Seek & Win SAS
Paris, France
Email: privacy@seekandwin.world

3. Data we collect

We collect the following categories of data:

  • Identification data: username, first name, last name, email address, date of birth, avatar (optional), referral code
  • Connection data: IP address, session identifiers, connection logs
  • Location data: GPS position and accuracy, only during your active hunt sessions (access is granted through your device settings). While you hold the treasure, your position is broadcast in real time to the other participants of the session, without your identity
  • Usage data: session participations, wins and redemption codes, coupons, perks used, referrals
  • Anti-cheat signals: indicators derived from your positions (speed, position jumps, GPS accuracy) used to detect location spoofing; visible to our administrators only, with no automated decision taken against you
  • Device data: push notification token (if you enable them) and notification preferences
  • Analytics data: usage events and anonymized session replays with sensitive-field masking (PostHog, EU region)
  • Credit balance: an internal in-app credit ledger. We do not collect any payment-card data

4. Legal bases for processing

We process your data on the following legal bases:

  • Performance of the contract: to provide our services, including geolocation during game sessions (essential to the hunt mechanics) and transactional emails
  • Consent: for push notifications and marketing communications
  • Legitimate interest: to improve our services (analytics) and prevent fraud (anti-cheat)
  • Legal obligation: to comply with our tax and accounting obligations

5. Purposes of processing

Your data is used to:

  • Provide and improve our treasure hunt services
  • Manage your user account
  • Process payments and rewards
  • Send service-related communications
  • Send marketing communications (with your consent)
  • Analyze platform usage and improve the user experience
  • Prevent fraud and ensure the security of the platform

6. Data sharing

We may share your data with:

  • Our partner venues and brands: aggregated, anonymized participation statistics, and redemption-code verification when a prize or coupon is handed over
  • Our service providers (sovereign hosting in Europe, email delivery, PostHog analytics EU region)
  • The competent authorities where legally required

We never sell your personal data to third parties.

7. International transfers

Your data is hosted within the European Union. In the event of a transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).

8. Retention periods

  • Account data: for the duration of your registration + 3 years
  • Transaction data: 10 years (legal obligations)
  • Location data: 1 year maximum
  • Cookies: 13 months maximum

9. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right to rectification: correct your inaccurate data
  • Right to erasure: request the deletion of your data
  • Right to portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to restriction: restrict the processing of your data
  • Right to withdraw your consent: at any time

You can exercise these rights directly from the app: account deletion (Settings → Account; your data is disabled and anonymized, with limited legal retention) and data export (one request per day). For any other request, contact us at privacy@seekandwin.world. You may also lodge a complaint with the CNIL (the French data protection authority).

10. Security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, secure authentication, restricted data access, and system monitoring.

11. Changes

We may amend this policy. Significant changes will be notified by email or through the platform.

12. Contact

For any questions regarding this policy:
Email: privacy@seekandwin.world
Data Protection Officer: dpo@seekandwin.world