Privacy Policy
Privacy Policy
1. Who We Are
RealDropHunt Labs (“RealDropHunt”, “we”, “us”) is the controller for data processed through our websites and the DropX app.
- Address: Trg vstaje 8, 2342 Ruše, Slovenia
- Email: info@realdrophunt.com
- Phone: +386 69 133 447
2. Scope
This Policy covers visits to our sites (e.g. realdrophunt.com), use of the DropX app, newsletters, hunts, reward redemptions, and partner campaigns.
3. Data We Collect
- Account: alias, email, password (hashed), region, preferences.
- Device & Usage: IP, device ID, OS version, app version, logs, in-app actions.
- Location: processed when needed to show or validate nearby drops; only while features are active.
- Rewards: drop IDs, claim times, redemption status, anti-fraud signals.
- Wallet: public wallet address, balances for rewards, transaction hashes (see Blockchain Data).
- Contact: support messages, newsletter opt-ins, marketing preferences.
- Partner Campaigns: interactions with branded drops, vouchers, conversions.
- Cookies: see below.
4. How We Use Data
- Provide the app: maps, drops, claims, rewards, wallet connections.
- Prevent fraud/spoofing with GPS checks and device validation.
- Improve features and personalize content.
- Send account/security notices and, with consent, marketing updates.
- Report campaign results to partners in aggregated or pseudonymized form.
- Comply with law and enforce our Terms.
5. Legal Bases (GDPR)
- Consent – e.g. marketing, precise location, non-essential cookies.
- Contract – delivering requested services (account, hunts, rewards).
- Legitimate Interest – fraud prevention, service analytics, improvement.
- Legal Obligation – compliance and lawful requests.
6. Cookies & Tracking
We use essential, analytics, and (if enabled) marketing cookies. Manage consent in our banner or your browser settings.
7. App Permissions
- Location: for map, claims, geofencing, anti-spoofing.
- Camera: for QR codes or AR features.
- Notifications: to alert you about drops and updates.
- Bluetooth/Motion: optional, for proximity or anti-cheat.
8. Sharing
We never sell data. We share only with:
- Service providers: hosting, analytics, crash reporting, email, wallet infra, anti-fraud.
- Partners: aggregated campaign metrics; your identity only if you redeem a partner reward.
- Legal: when required by law or to protect safety.
- Transfers: e.g. mergers/acquisitions.
9. Retention
- Account data: active + up to 24 months after deletion.
- Location: processed ephemerally; fraud logs max 60 days.
- Support data: up to 12 months.
- Marketing prefs: until opt-out.
- On-chain: public indefinitely.
10. Security
We apply encryption, access controls, secure development, and anti-fraud layers. No system is 100% secure.
11. International Transfers
If data is sent outside the EEA/UK, we use lawful transfer tools like Standard Contractual Clauses with safeguards.
12. Your Rights
You may request access, correction, deletion, restriction, portability, or object to processing. Consent can be withdrawn anytime. EEA users may lodge complaints with their authority (e.g. Informacijski pooblaščenec in Slovenia).
13. Children
We do not knowingly collect data from children under 16 (or lower local law, never under 13). Contact us if you believe a child has shared data.
14. Blockchain Data
Rewards and $RION transactions may occur on public blockchains. On-chain data is public, permanent, and linked to your wallet. We do not control third-party wallets or nodes. Protect your private keys.
15. Changes
We may update this Policy. The “Last updated” date shows the latest version. Major changes will be announced via app, site, or email.
16. Contact
Email info@realdrophunt.com for privacy questions. We may need additional info to verify requests.