Privacy notice

Version 3. Project Hermes, projecthermes.dev. Contact: projecthermesyt@gmail.com

Draft for review. This text has not yet been checked by a lawyer.

About this notice

This notice explains what personal data Project Hermes collects when you use the app and the website at projecthermes.dev, why we collect it, who can see it, how long we keep it and what choices you have. It is written with the Personal Data Protection Act of Singapore (PDPA) in mind.

Our contact for data questions is projecthermesyt@gmail.com.

What we collect

• Sign-in: an identifier from Google or Apple. We do not read or keep your name, email address or photo from them.
• Age: the birth month and year you enter once, only to check you are 16 or over. We keep only a note that your age was confirmed and when, never your birth date.
• Display name: the name you choose.
• Location: your live position, taken from your phone while a lobby or match is open.
• Match data: which room and team you were in (in Manhunt, your role as hunter or prey), what happened in the match (such as damage, pickups and eliminations), and your results (place, kills and damage, linked to a player number).
• Your agreement: which version of the Terms and Privacy notice you accepted, and when.
• Technical data: logs on our server, such as connection times, error messages, the app version and the game events of each match, which we use to fix faults and check that the game worked correctly. Your network address (IP address) may appear in these logs.

On your phone, the app keeps your sign-in and your settings in secure storage on the device.

We do not collect your contacts, photos, camera, microphone or health data.

Why we collect it

Only to run the game: to put you on the map, decide who is in range, apply the storm, show results, keep the game fair and safe, fix faults, and look after your account. We do not show ads, sell your data or use it to train anything. We do not use advertising or analytics tools.

We ask for your agreement before the app asks your phone for location access. You can say no, but then you cannot play.

Your location

The app uses your location about once a second, only while it is open on screen in a lobby or match, and never in the background. The screen needs to stay on while you play.

Other players see your position only when they are close to you (and your teammates always see you). Your position trail is deleted within 24 hours. Match results are kept.

Manhunt mode is different: hunters see the position of every prey on the map for the whole match, once the head start is over, wherever the prey are in the circle. Prey see hunters only within 100 metres, and teammates always see each other.

Who can see what

Players in your room see your display name, your team and your results. In a match they see your position as described above (in Manhunt, hunters see every prey). A teammate who has been knocked out can watch your view, delayed by a minute. Everyone except the strongest player and their teammates is shown only a general direction towards the strongest player, never an exact position.

Our team can see technical logs on our server. We do not give your data to anyone else, unless the law requires it or it is needed to protect the safety of a person.

Service providers and other countries

We run our server with a cloud hosting provider. Google and Apple handle your sign-in under their own privacy policies. The map is served from our own server. We do not sell your data and we do not pass it to advertisers.

Our hosting provider may keep data in a data centre outside Singapore. If your data leaves Singapore, we take reasonable steps to make sure it is protected to a standard comparable to the PDPA.

How long we keep it

• Raw location trails: deleted within 24 hours.
• Match results: kept, with a player number and no account link once you delete your account.
• Account details: kept until you delete your account.
• Technical logs: kept only as long as we need them to fix problems and check the game, then deleted.

Your choices and rights

• Delete your account and data in the app: Profile, Delete account. This removes your account, display name and sign-in link. Match results stay without any link to you, so we cannot show you your old results afterwards.
• You can turn location off in your phone settings at any time, but then you cannot play. You may withdraw your agreement by deleting your account.
• To ask what personal data we hold about you, or to correct it, write to projecthermesyt@gmail.com. We may need to check it is really you. We aim to answer within 30 days and will tell you if we need longer.
• If you are not happy with how we handled your data, please tell us first. You can also complain to the Personal Data Protection Commission of Singapore.

Security

Connections to our server are encrypted. Only our team can reach the server. No system is completely safe. If a data breach is likely to cause you serious harm, we will tell you and the authorities as the law requires.

Children

The game is for people aged 16 and over. If we learn that someone under 16 has an account, we will delete it.

Our website

The website at projecthermes.dev does not show ads or use tracking tools. The web beta may keep your sign-in on your device so that you stay signed in. Our server may log basic technical information about each visit, as described above.

Changes and contact

If this notice changes in an important way, we will ask you to accept the new version. Questions: projecthermesyt@gmail.com.