Can Crusade privacy policy

Last updated: 29 October 2026

Can Crusade is a free location game. You find energy drinks in real shops, scan the can to claim it as a "potion", earn XP, hold shops and join a house with other players. This policy explains what personal data the app uses, why, who else sees it, how long we keep it and what rights you have.

Can Crusade is available worldwide, except in Canada and Kazakhstan. Sections 1 to 14 apply to every player, wherever you live. They are written to the UK GDPR, which closely matches the EU GDPR. Section 15 adds extra information and rights for players in the EU and EEA, the United States and Australia.

We have tried to keep it short and plain. If anything is unclear, email us at privacy@playcancrusade.com.

1. Who we are

Can Crusade is run by William Bux, trading as Reharnessed ("we", "us"), a sole trader based in England. Business address: [BUSINESS ADDRESS]. Website: playcancrusade.com.

We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and under the EU GDPR for players in the EU and EEA. Other countries' laws use different words for the same role (for example, "business" in California or "organisation" in Australia).

ICO registration number: [ICO REG NUMBER]

Contact for anything about your data: privacy@playcancrusade.com

2. The short version

We collect only what the game needs: your email address, a username, your game progress, and some location information.
Your phone uses your live location while the app is open. It is sent to our servers only to look up what is near you and to check you are at a shop, and is not saved there. What we do save: the shops you claim at, a starting point for your map, pins you drop, and the 100-metre squares of the map you have uncovered.
The camera is used only to read barcodes. No photos or video are taken or kept.
Other players can see your username, level and XP, and the shops you hold. You can hide yourself from public leaderboards and shop holder titles in Profile.
No ads, no analytics, no tracking across other apps, no payments. We never sell your data.
You can delete your account and its data from inside the app at any time: Profile → Delete my account.

3. What we collect and why

3.1 Your account

Data	Where it comes from	Why we need it
Email address	You type it when you sign in, or Google sends it if you use Google sign-in	To send you a 6-digit sign-in code and to identify your account. We do not send marketing emails.
Account ID	Created automatically	A random code that links your game data to your account.
Username	You choose it	Shown in the game and on leaderboards. Must be 3 to 20 letters, numbers or underscores. Please do not use your real name.
Date you confirmed you are 18 or older	You tick a box when you create your profile	To record that you confirmed you meet the minimum age. We do not ask for or store your date of birth.
Sign-in records	Created by our hosting provider when you sign in	Time of sign-in, IP address and basic device or browser details, used to keep accounts secure and stop abuse (for example, too many code requests).

Google sign-in (Android and the web only). If you choose "Sign in with Google", Google sends us your email address, your Google account ID and, depending on your Google settings, your name and profile picture. Our sign-in provider stores these with your sign-in record. We do not show your name or picture in the game or use them for anything else. Google's own privacy policy applies to your Google account.

3.2 Your game progress

So your progress is saved and works across devices, we store:

Claims: which drink you claimed, at which shop (its name, street and map position), when, the XP it earned and why (for example "new flavour" or "first visit").
Patrols: the shops you checked in at without a drink, and on which day.
XP history: every change to your XP, including any XP taken back (see the Terms of Use), so totals can always be explained.
Totals and streaks: your total XP, monthly season XP, daily streak, daily stamps and the date of your last claim.
Shops you have visited, your wishlist of drinks, the shops you hold, attacks you made or defended, your skills, your knight's look and any badges you earned.
Friends: who you are friends with or have asked, who invited you, and the "salutes" you give and receive.
Your house: the house you belong to or have asked to join. If you lead a house, its name and crest.
Alerts: messages the game sends you, such as "your shop has been taken" or a friend request.

3.3 Location

Location is central to the game, so we want to be clear about exactly what happens.

What	Stored where	Detail
Your live position	Your phone, in memory only	While the app is open and you have allowed location, your phone tells the app where you are, how accurate that reading is and whether the phone reports it as simulated. The app uses it to draw the map and to check you are within range of a shop when you claim, patrol or attack (about 150 metres for a known shop, 75 metres for a player pin). It is not saved on your phone when you close the app.
Nearby look-ups	Sent to our servers, not stored	To show shops, pins, recent finds and shop holders near you, the app sends your current position (or the centre of the map) to our servers. To check an attack, it sends your position and its accuracy. These are used to answer the request and are not saved with your account.
Your map origin	Our servers and your phone	The first time the app gets a GPS fix, it saves that point as the starting centre of your map. This is a precise point (latitude and longitude) and, for most players, will be at or near home. It is stored with your account so the map opens in the same place on a new phone. It is deleted when you delete your account. To clear it sooner, email us.
Your map trail	Our servers and your phone	As you walk with the app open, the map uncovers the 100-metre squares you pass through. We save which squares you have uncovered, and when each was first added, so your map looks the same on every device. We only add a square when your phone has a good GPS reading. Only you can see your trail. It is deleted when you delete your account. To clear it sooner, email us.
Shops you claimed at, patrolled or hold	Our servers and your phone	Each claim and patrol records the shop and its position, not your own position. Because shops are real places, this shows where you have been and when.
Pins you drop	Our servers and your phone	A pin is saved at the spot where you were standing when you dropped it.
Drinks you suggest	Our servers	A suggestion is sent from the shop you are in, and records that shop and its position.

We collect precise location only while the app is open ("while using the app" permission). We do not use background location.

You can turn location off at any time in your phone's settings. The map, claiming and attacking will not work properly without it.

On Android, your phone may use Google's location services to work out your position. On iPhone, Apple's location services do this. Those services are run by Google and Apple under their own privacy terms, not by us.

To find shops, our servers ask public OpenStreetMap search services (Overpass) for the shops in the map squares (each about 1 to 2 km across) around the position the app sent. They see only the area being searched, not who you are or your IP address.

3.4 Camera

When you scan a can, the camera image is processed on your phone only to read the barcode number. No photo or video is saved, and no image is sent to us. If you suggest a new drink, we store the barcode number with it.

3.5 Things you add, suggest or report

Pins: the name you give a place that sells drinks (such as a vending machine or gym fridge) and where you dropped it.
Drink suggestions: when you scan a barcode we do not know, you can suggest it as a new drink (brand, flavour, sugar or zero, can size) or say which known drink it is. We store your suggestion with the barcode, the shop it came from, your username at the time and whether we approved it. We check every suggestion before it reaches the Codex.
Reports: if you report a username, a shop pin's name or a house name, we store what you reported, when, and that the report came from you, so we can review it. If someone reports your username or your house's name, we store that report with a link to your account.
House names and crests, if you lead a house.

3.6 Notifications

If you allow notifications, we store a code for your phone (a "push token") so we can send alerts, such as when someone takes a shop you hold, attacks it, or sends you a friend or house request. Alerts are delivered through Google's Firebase Cloud Messaging and, on iPhone, Apple's push service. You can turn notifications off at any time in your phone's settings.

3.7 Data stored on your phone

To work offline and keep you signed in, the app saves some data on your device:

a copy of your game progress (the same data as sections 3.2 and 3.3, including your map origin and trail), kept separately for each account that signs in on that device;
a copy of the drinks catalogue;
a sign-in token, so you stay signed in;
a few small settings, such as your light or dark theme, an invite code you opened before signing in, whether we have asked about notifications, and whether you said no to Android's location accuracy prompt.

This is strictly necessary for the app to work, so we do not ask for separate consent for it. Deleting your account removes your game copy from the device you delete it on. Uninstalling the app removes all of it. Signing out does not clear the game copy, so it is ready if you sign in again.

Our website, playcancrusade.com, uses no cookies, no local storage and no analytics.

3.8 Map tiles, directions and sharing

The map is drawn using free map tiles from OpenFreeMap, based on OpenStreetMap data. To load the tiles, your phone contacts OpenFreeMap's servers directly. Like any website, they receive your IP address and which map tiles you asked for, which shows roughly which area you are looking at. We do not send them your account details or GPS readings. See OpenFreeMap's privacy information.

If you tap for directions to a shop, the shop's position opens in Google Maps under Google's own terms. If you share a find, it goes wherever you choose to send it.

3.9 What we do not collect

No date of birth, real name (unless Google shares it when you use Google sign-in), phone number or postal address.
No contacts, photos, microphone, health data or payment details.
No advertising IDs. We do not use analytics or crash-reporting tools. If we add any, we will update this policy first and ask for your consent where the law requires it.

4. What other players can see

Can Crusade has a social side. Other signed-in players can see:

your username, level, your knight's look and any badges, and your XP on leaderboards (friends, local, worldwide, all-time and this month's season). Local leaderboards list players who claimed within about 10 km of the viewer in the last 30 days;
the shops you hold, with your username and your house's name and crest, when someone looks at the map or a shop. Your name also appears in the alert sent to a player whose shop you attack;
recent finds near them: which drink was found at which shop and when, from the last 90 days, so the map can show what is in stock. These are linked to your username (or "A knight" if you hide yourself);
your house's name, crest, number of members and number of shops held. Your housemates also see your username, level and how many shops you hold. If you ask to join a house, its leader sees your username and level;
pins you drop: their name and place, shown as added by "another knight", not by your username;
your friends see your username, level and XP, and your finds from the last 14 days (the drink, the shop and the day, but not the time). Anyone who knows your username, or has your invite link, can send you a friend request. You choose whether to accept.

Please bear in mind that holding a shop, appearing on a local leaderboard, or sharing recent finds tells other players you spend time near those places. You are shown by default. You can turn on Hide me in Profile at any time: you then leave the local and worldwide leaderboards, and you appear as "A knight" at shops you hold, in recent finds and in alerts. Your friends and housemates still see you.

Other players cannot see your email address, your map origin, your live location, your trail or your full claim history.

5. Our lawful bases

Under the UK GDPR and the EU GDPR we must have a lawful basis for each use of your data. Players elsewhere: section 15 explains how this works where you live.

Use	Lawful basis
Creating and running your account, sending sign-in codes	Contract – needed to provide the game you signed up for (Article 6(1)(b))
Saving your progress, claims, patrols, XP, wishlist, holdings, house, friends, pins, map origin and trail	Contract
Using your location to show what is nearby and check you are at a shop	Contract. We also only access location after you grant permission on your phone, and you can withdraw it at any time.
Showing your username, level, XP, finds and shops you hold to other players	Contract – leaderboards and holding shops are part of the game
Sending alerts to your phone	Contract, and only after you allow notifications on your phone
Recording that you confirmed you are 18 or older	Legitimate interests – making sure the game is used only by people old enough (Article 6(1)(f))
Fair-play checks, reviewing drink suggestions and reports, taking back XP, keeping sign-in records and stopping abuse	Legitimate interests – keeping the game fair and safe for everyone. Where the UK Online Safety Act requires us to deal with illegal content, legal obligation (Article 6(1)(c))
Keeping records if there is a dispute or a legal claim	Legitimate interests, or legal obligation where the law requires it

Where we rely on legitimate interests, we have weighed our interests against yours and think the use is expected and low-risk. You can object (see section 10). We have also written a data protection impact assessment of how the game uses location.

6. Automated checks

The app and our servers make some automatic decisions during play. For example:

a claim, patrol or attack is refused if you are too far from the shop or your GPS reading is too vague, and an attack is refused if your phone reports a simulated location;
if a claim or patrol would have needed travel faster than about 250 km/h from your last one, it still counts for you but is left out of the shared world (holders, recent finds and leaderboards);
XP stops after four claims in a day, and the result of an attack is decided by a dice roll on our server.

These checks only affect the game. They do not have legal or similarly significant effects on you. If you think a check got something wrong, contact us.

7. Who we share data with

We do not sell or rent your data, and we do not share it with advertisers.

We use these service providers ("processors"). They act only on our instructions and under contracts that protect your data:

Provider	What they do	Where
Supabase	Hosts our database and sign-in system	Data stored in London, UK (AWS eu-west-2). Supabase Inc. is based in the United States.
Resend	Sends the email with your sign-in code	Emails sent from Ireland (eu-west-1), the nearest Resend region to the UK. Resend is based in the United States.
Google (Firebase Cloud Messaging)	Delivers alerts to your phone, if you allow notifications	United States and elsewhere
Cloudflare	Hosts our website, playcancrusade.com	Worldwide network. Cloudflare is based in the United States.

Other parties who may receive data:

Google, if you choose Google sign-in (see section 3.1).
OpenFreeMap, which serves map tiles directly to your phone (see section 3.8).
Apple and Google, who run the app stores, your phone's operating system and its push services, under their own privacy policies.
Authorities, if the law requires it, or to protect someone's safety. For example, we must report some kinds of illegal content.
A new owner, if Can Crusade is ever transferred to someone else. They would have to honour this policy, and we would tell you first.

8. International transfers

Can Crusade has players around the world but one set of servers. That means your data will usually be stored and handled in a different country from the one you live in.

Where your data is:

Game data and sign-in records are stored by Supabase in London, UK.
Sign-in emails are sent by Resend from Ireland (EU).
Supabase, Resend, Google and Cloudflare are all based in the United States, and their staff or sub-processors may access data from the US or other countries, for example to provide support or keep the service secure.
We run Can Crusade from the UK.

How we protect it when it moves:

Data leaving	Protection we rely on
The UK	A UK adequacy decision for the destination country where there is one. For US providers certified under it, the UK Extension to the EU–US Data Privacy Framework (the "UK–US Data Bridge"). Otherwise, the ICO's International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, which our providers include in their data processing terms.
The EU or EEA	A European Commission adequacy decision where there is one (the UK has one). For US providers certified under it, the EU–US Data Privacy Framework. Otherwise, the EU Standard Contractual Clauses (2021), which our providers include in their data processing terms.
Australia	We take reasonable steps to make sure overseas recipients handle your data in line with the Australian Privacy Principles (APP 8). See section 15.3.

Where we use transfer contracts, we also check whether the law in the destination country could undermine them (a "transfer risk assessment"). Data held in another country may be accessed by that country's courts, police or security services under its laws.

9. How long we keep data

Data	How long
Account, game progress, holdings, house, friends, pins, map origin and trail	Until you delete your account. If you have not used the app for 12 months, we may delete your account; we will email you at least 30 days before we do, so you can keep it by signing in.
Live location and nearby look-ups	Not kept – used in the moment and discarded
Camera images	Not kept – processed on your phone only
Alerts and push tokens	Until you delete your account. A push token is replaced when your phone issues a new one.
Drink suggestions	Until you delete your account. Drinks we approved stay in the Codex (see the last row).
Reports you make	Until you delete your account
Reports about your name	As long as we need them to deal with the report and keep a record of what we did. After you delete your account, the report keeps only the name that was reported.
Sign-in records held by Supabase	Up to 90 days
Sign-in emails held by Resend	Up to 30 days
Backups	Deleted data may remain in encrypted backups for up to 30 days before it is overwritten
Data on your phone	Until you delete your account on that device, or uninstall the app
Drinks you suggested that we approved for the Codex	The drink details (brand, flavour, size, barcode) stay in the worldwide Codex after you leave, but are no longer linked to you.
Which drinks were seen at which shop	Kept for the shared map, with nothing linking it to you

10. Your rights

We give these rights to every player, wherever you live. Under UK and EU data protection law you have the right to:

access the personal data we hold about you and get a copy;
correct data that is wrong;
delete your data – you can do this yourself at any time in Profile → Delete my account, which deletes your sign-in and every game record linked to it straight away (see section 9 for the few things that stay);
restrict how we use your data in some cases;
object to uses based on legitimate interests;
data portability – get the data you gave us in a common, machine-readable format;
withdraw consent where we rely on it (for example, by turning off location, camera or notification permission in your phone settings).

To use any of these rights, email privacy@playcancrusade.com from the address linked to your account. We will reply within one month (or sooner, if the law where you live sets a shorter time limit). We may need to confirm it is you before we act. There is normally no charge.

Section 15 lists extra rights, time limits and complaint routes for the EU and EEA, the US and Australia.

11. Security

All data travels between the app and our servers over encrypted connections (HTTPS). Our database uses row-level security: each player can read and change only their own private records, and the shared parts of the game are only available through set functions that return game details such as usernames and XP, never email addresses. Sign-in uses one-time codes, so there is no password to steal. No system is perfectly secure, but if a breach puts your data at risk we will tell you and the relevant regulators where the law requires it.

12. Age limit

Can Crusade is for adults aged 18 and over, everywhere. Several countries ban selling energy drinks to under-18s, and health bodies advise against them for children. We do not knowingly collect data from anyone below the minimum age. If we find out that a player is too young, we will delete their account. If you think a child is using Can Crusade, please tell us at privacy@playcancrusade.com.

Can Crusade is not aimed at children of any age. We do not knowingly collect personal information from children under 13 (see section 15.2 on the US Children's Online Privacy Protection Act).

We ask every player to confirm they are 18 or older when they create a profile, and the app is rated for adults in the app stores. We collect as little as we can and do not profile players for advertising.

13. Complaints

If you are unhappy with how we have handled your data, please contact us first at privacy@playcancrusade.com and we will try to put it right.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

If you live outside the UK, you can complain to the regulator where you live instead. Section 15 names them for the EU and EEA, the US and Australia.

14. Changes to this policy

We will update this policy when the app changes, for example if we add analytics or new social features. We will change the "Last updated" date at the top and, for important changes, tell you in the app before they take effect.

15. Extra information for your region

Everything in sections 1 to 14 applies to you wherever you live. This section adds what the law requires in particular places. If the law where you live gives you more protection than this policy, that law applies.

15.1 European Union and European Economic Area

The EU GDPR applies to you because we offer the game to people in the EU and EEA. It works in almost the same way as the UK GDPR, so sections 3 to 11 apply as written, with the same lawful bases (section 5) and the same rights (section 10).

Transfers. Data from the EU goes to the UK, which the EU recognises as giving adequate protection, and to US providers. Section 8 explains the protection we rely on.
Age. EU countries set their own "age of digital consent" (13 to 16) for services that rely on consent. We do not rely on consent to run your account (we rely on contract), and our minimum age of 18 is above every EU country's age of digital consent.
Complaints. You can complain to the data protection authority in the EU or EEA country where you live, work, or where you think the problem happened. A list is on the European Data Protection Board website.

15.2 United States

State privacy laws. California (the CCPA, as amended by the CPRA) and a growing number of other states (including Colorado, Connecticut, Virginia, Texas, Oregon and others) have consumer privacy laws. Most apply only to businesses above a certain size, for example by revenue or by the number of state residents whose data they handle. Based on our size, these laws may not apply to us yet. We give every US player the rights below anyway.

What we collect, in the words these laws use. In the last 12 months we have collected:

Category (CCPA terms)	Examples in Can Crusade	Source	Purpose	Disclosed to
Identifiers	Email address, account ID, username, push token, IP address in sign-in logs	You; your device	Running your account; alerts; security	Service providers (Supabase, Resend, Google Firebase). Username shown to other players
Geolocation data	Map origin, map trail, shops you claimed at, patrolled or hold, pins you drop	Your device	Playing the game	Service providers (Supabase). Shops you hold and recent finds shown to other players
Internet or other electronic network activity	Claims, XP history, visits, wishlist, attacks, sign-in times	You; your device	Playing the game; fair play; security	Service providers (Supabase). Level and XP shown to other players
Characteristics of protected classifications (age)	Confirmation that you are 18 or older (not your date of birth)	You	Age check	Service providers (Supabase)
User content	Pins, drink suggestions, house names, reports	You	Building the shared map and Codex; safety	Service providers. Pins and house names shown to other players

How long we keep each category is set out in section 9.

Sensitive personal information. Your map origin, your trail, and the shops and pins linked to your account, can count as precise geolocation, which these laws treat as sensitive. We use it only to provide the game you asked for, as described in section 3.3. We do not use it to infer things about you, and we do not use it for advertising. Before your phone asks for permission to use your location, the app explains how it is used, and you can turn location off at any time.

We do not sell or share your personal information. We have not sold your personal information, and have not "shared" it for cross-context behavioural advertising, in the last 12 months, and we will not do so. We have no actual knowledge of selling or sharing the personal information of anyone under 18. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" link to click, but we honour Global Privacy Control (GPC) signals sent from browsers. We do not use targeted advertising or profiling that produces legal or similarly significant effects.

Your rights. Depending on your state, you have the right to:

know what personal information we have collected about you, where it came from, why we use it and who we disclose it to;
get a copy of it in a portable format;
correct it;
delete it (you can also do this in the app);
opt out of sale, sharing, targeted advertising and certain profiling (we do none of these);
limit our use of sensitive personal information (we already use it only to provide the game);
not be discriminated against for using any of these rights.

You, or an agent you authorise, can make a request by emailing privacy@playcancrusade.com. We will need to confirm your identity, normally by checking that you control the email address on your account. We will respond within 45 days, and may extend this by a further 45 days if we tell you why.

Appeals. If we refuse your request, you can appeal by replying to our decision or emailing privacy@playcancrusade.com with "Appeal" in the subject line. We will reply within the time your state's law allows (usually 45 or 60 days). If you are still unhappy, you can contact your state attorney general or, in California, the California Privacy Protection Agency.

California "Shine the Light". We do not disclose personal information to third parties for their own direct marketing.

Children (COPPA). Can Crusade is for adults aged 18 and over and is not directed at children. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. Parents can contact us at privacy@playcancrusade.com.

15.3 Australia

The Privacy Act 1988 and the Australian Privacy Principles (APPs) set the rules in Australia. Small businesses with annual turnover of A$3 million or less are generally exempt, and we fall under that exemption. We follow the APPs voluntarily anyway.

Anonymity and pseudonymity (APP 2). You play under a username, not your real name. We need an email address only to sign you in.
Collection (APP 3 and 5). We collect only what is needed for the game, as set out in section 3, and we collect it from you directly.
Overseas disclosure (APP 8). We disclose your personal information to service providers in the UK, Ireland (EU) and the United States, and to the operator in the UK. See section 8.
Access and correction (APP 12 and 13). You can ask to see or correct your information by emailing privacy@playcancrusade.com. We will reply within 30 days.
Complaints. Contact us first. If you are not satisfied with our reply within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au, phone 1300 363 992.

15.4 Canada

Can Crusade is not currently offered in Canada. If that changes, we will add a section here covering PIPEDA and Quebec's privacy law before launching there.

Appendix: app store disclosure summary

This table summarises the data above in the categories used by the Google Play Data safety form and Apple's App Privacy labels. It is included for transparency and to keep our store answers consistent with this policy.

For every row: data is sent over an encrypted connection, players can delete it in the app, it is not sold, not used for advertising, and not used to track players across other companies' apps or websites.

Data in Can Crusade	Google Play category	Apple category	Collected / shared?	Purpose	Required?
Email address	Personal info → Email address	Contact Info → Email Address (linked to you)	Collected. Not shared (processors do not count as sharing)	App functionality, account management	Required
Account ID and Google account ID	Personal info → User IDs	Identifiers → User ID (linked)	Collected	App functionality, account management	Required (Google ID only with Google sign-in)
Name and profile picture link from Google	Personal info → Name	Contact Info → Name (linked)	Collected only with Google sign-in, not used	Account management	Optional
Username	Personal info → User IDs	Identifiers → User ID (linked)	Collected. Visible to other players	App functionality	Required
Age-confirmation date (18+)	Personal info → Other info	Other Data → Other Data Types (linked)	Collected	App functionality, fraud prevention / compliance	Required
Map origin (lat/lng) and map trail (100 m squares)	Location → Precise location	Location → Precise Location (linked)	Collected. Not visible to others	App functionality	Required for the map
Live GPS position	Location → Precise location	Location → Precise Location	Used for nearby look-ups and range checks, not stored	App functionality	Optional (needed to claim)
Claim shop, patrols, shops held, pin locations	Location → Precise location and App activity → App interactions	Location → Precise Location (linked) and User Content → Gameplay Content	Collected. Shops held and recent finds visible to others	App functionality	Required to play
Claims, XP history, totals, streaks, wishlist, attacks, friends, house	App activity → App interactions; App activity → Other actions	User Content → Gameplay Content (linked)	Collected. Level and XP visible to others	App functionality	Required
Pins, drink suggestions, house names, reports	App activity → Other user-generated content	User Content → Other User Content (linked)	Collected. Pins and house names visible to others	App functionality, safety	Optional
Push token	Device or other IDs	Identifiers → Device ID (linked)	Collected if notifications are allowed	App functionality	Optional
Camera images	Photos and videos → Photos	Not collected (on-device only)	Not collected – no images leave the phone	–	–
IP address and device details in sign-in logs	Not declared (collected by our host only for security and abuse prevention)	Not declared (used only for security)	Collected by hosting provider for security	Security, fraud prevention	Required
Ads, analytics, crash logs, payments, contacts, health	–	–	Not collected	–	–

The Google Play form also asks for a link to this policy and whether users can request deletion. Answer: yes, in the app (Profile → Delete my account) and by email to privacy@playcancrusade.com. People can also request deletion without installing the app at https://playcancrusade.com/legal/delete-account.