Privacy Policy
Last updated: 22 June 2026
This Policy describes how Piracity processes users' personal data pursuant to Regulation (EU) 2016/679 (the “GDPR”) and applicable legislation. Piracity is a digital urban treasure hunt played outdoors: to operate it uses, among other things, the location of your device.
Informational document in preliminary version. The final version, complete with the data controller's identifying details, will be validated by a lawyer before the commercial launch.
1. Data controller
The data controller is Piracity (the full identifying details — company name, registered office and contacts — will be indicated in the final version). For any request you can write to the email address indicated in the Contact section of the website.
2. Data we collect
Account data: email address, nickname and any profile picture.
Geolocation data: the device's location, necessary to guide you between the stops during the game.
Game data: progress, maps purchased and completed, scores and activity within the service.
Purchase data: orders are handled through the payment provider Stripe. We do not store your full card details; we process the information necessary to manage the order (e.g. amount, status, email).
Content you publish: reviews, ratings and uploaded photographs, intended for the public page of the map.
Technical and usage data: information about the device and logs essential to operation and security, as well as analytics data in anonymised form.
3. Purposes and legal bases
Provision of the service and management of the account and purchases: performance of the contract.
Geolocation during the game: performance of the contract and/or consent, given through the device's permissions.
Tax and accounting obligations relating to payments: legal obligations.
Marketing communications and newsletters: consent, revocable at any time.
Security, abuse prevention and improvement of the service: legitimate interest.
4. Geolocation
Your location is used exclusively while playing the game, to show you the map and guide you towards the stops. You can revoke the location permission at any time from your device's settings; in that case some features of the game may not be available.
5. Recipients of the data
We process the data with the support of providers that operate on our behalf as data processors, including: Stripe (payment processing), hosting and infrastructure providers, email service providers.
Only the minimum data necessary to enjoy the offer may be communicated to local partners that issue vouchers. The data may be communicated to competent authorities where required by law.
We do not sell your personal data to third parties.
6. Transfers outside the EU
Should some providers process data outside the European Economic Area, this takes place in the presence of adequate safeguards provided for by the GDPR, such as the Standard Contractual Clauses.
7. Retention
We retain the data for the time necessary for the purposes described and to comply with legal obligations (for example tax obligations for purchase data), after which it is deleted or anonymised.
8. Minors
The service is not intended for autonomous use by minors. Minors' data is processed only in the context of participation under the responsibility of a parent or guardian and on an appropriate legal basis.
9. Your rights
You have the right to access your data and to request its rectification, erasure, restriction or portability, as well as to object to processing and to withdraw the consents given, without prejudice to processing already carried out.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
10. Security
We adopt appropriate technical and organisational measures to protect the data from unauthorised access, loss or improper use.
11. Cookies
The website uses only technical cookies necessary for operation and analytics tools in anonymised mode, without personal identifiers and without profiling. Further details are available in the Cookie Policy.
12. Changes to the policy
We may update this Policy over time. The version in force is always published on this page, with an indication of the date of last update.
13. Contact
To exercise your rights or for any question about the processing of data you can write to us at the address indicated on the Contact page of the website.