Weird World

Privacy Policy

Last updated: September 24, 2026

Read this first. Weird World is a location-based game. It uses your precise GPS position while the app is open, it can read your step count and runs from Health Connect if you allow it, and it lets you upload photos of real buildings that other players see. Buildings you capture with a wallet are recorded on a public blockchain, including their coordinates. Sections 4, 5, 6 and 7 cover each of these before you decide to play.

1. Who is responsible

3D Print Corner · Anastasiia Miroshnichenko
Ehrenbergstraße 8, 10245 Berlin, Germany
E-mail: coffeeonchainsol@gmail.com

2. What we never collect

  • Your email address, real name or phone number (the figurine shop is the one exception, see section 8)
  • Passwords, private keys or seed phrases — transactions are signed inside your wallet app
  • Your contacts or calendar, or your photo library beyond the one image you pick
  • Background location — the app never asks for it
  • Individual Health Connect records, heart rate, or any health data other than steps, distance and running sessions
  • Advertising identifiers. We run no ads, no analytics SDK and no third-party tracking

3. What we process, and on what legal basis

This section is organised by why we process each item, because that decides what you can do about it.

A. To run the game you asked for — contract (Art. 6(1)(b) GDPR)

DataWhat for
Wallet public address, or a guest key generated on your deviceIdentifying your account; ownership of heroes and buildings; payments
Display name and usernameShown to other players (section 6)
Precise location, while the app is openPlacing you on the map, spawning crates and monsters near you, checking you are close enough to open, fight or capture (section 4)
Gameplay recordsSparks, resources, gear, hero XP, crates opened, monsters defeated, missions, walked distance, clan membership, friends, raid rooms
Captured buildingsCoordinates, footprint, height, the name you give it, capture time
Photos and clan logos you uploadDisplayed on the building or clan to every player
Clan chat messagesDelivered to your faction by Cherry (section 8)
Figurine claim recordsThe hero, its code, the first wallet that revealed it, and the shop order number

B. To keep the game fair and working — legitimate interest (Art. 6(1)(f) GDPR)

Our interest is a game whose rewards are earned honestly and an app that does not crash. You may object at any time (section 11); where a toggle exists, it is the quickest way.

DataWhat forYour control
Movement checks: speed, distance, GPS accuracy of a walkRefusing rewards for spoofed or driven movementNone — part of every reward. Checks only ever withhold a reward, never act against your account (Terms §9)
Wallet address, reward ledger and crate cooldowns after you delete your accountStopping delete-and-re-register from collecting the same rewards twice; accounting for $SKR paid outKept by design (section 10)
Crash reports: error message, stack trace, app version, platform and runtime, OS version, device brand and model, screen name, a per-launch session id, the last 40 app events, and a short technical noteFinding and fixing crashes. Your wallet address, tokens, emails, addresses and coordinates are removed before sending, and again on our server, so a report cannot be linked to your accountSettings → Send crash reports
Image moderation of every uploadRejecting sexual content before anyone sees it. Runs on our own server; no outside service sees the image. If the check itself fails, the image goes up unchecked and is removed when reportedNone — a condition of uploading
IP addressRate limiting. Held in memory only, never written to our database—
Leaderboard standingShowing rankings to other playersSettings → Appear on leaderboards

C. Only with your consent (Art. 6(1)(a) and, for step data, Art. 9(2)(a) GDPR)

DataWhat forHow to withdraw
Device location permissionEverything in A that needs a positionSettings → Use my location (you then play from a city you pick), or revoke the permission in Android settings
Step count, distance and running sessions from Health Connect and the step sensorStep goals, step rewards, run missions, and your lifetime steps on the steps leaderboard and your clan's roster (section 5). Off until you say yes to the game's own questionSettings → Share step data, or revoke in the Health Connect app
CameraPhotographing a building you capture; AR viewRevoke in Android settings
Photo library (the one image you pick)A building photo or clan logoRevoke in Android settings

Withdrawing consent stops future processing; it does not make past processing unlawful. Every one of these is optional — refusing one disables only the feature it serves.

4. Location

  • Read only while the app is open on screen. The app does not request background location and runs no background location task.
  • Your position is sent to our server when something depends on it: loading what is around you on the map (captured buildings, raid rooms, bosses), opening a crate, fighting a monster, capturing a building, opening a raid room, a mission step, and — every few seconds during a walk with a travel pass — validating the walk.
  • We do not keep a history of where you have been. The last position of a walk is forgotten 24 hours after you stop walking; the start and end points of a walk are erased when it ends (or 48 hours after its last update if the app was closed mid-walk); locations implied by crate and monster records are overwritten after 48 hours.
  • Your live position is never shown to other players. When you open a raid room, others nearby see the boss's position, not yours.
  • When you plan a route, its start and destination go to the public OpenStreetMap routing service (routing.openstreetmap.de); when you place a building, the area around it is looked up in the public Overpass API. Mapbox receives the map area you are viewing, like any map app.
  • Turning off Use my location stops GPS entirely and deletes the position stored on your phone; the last position our server holds is forgotten within 24–48 hours like everyone's (section 10). You pick a city instead; opening crates, fighting and capturing stay locked, because standing somewhere is what proves you are there.

5. Health Connect and physical activity

If you allow it, Weird World reads these data types from Android Health Connect: Steps, Distance and Exercise sessions (only running sessions are used). It also reads the phone's step sensor while the app is open (Physical activity permission).

  • Off until you say yes. The game asks you once, in its own words, before any Android permission prompt and before anything is read. Until you answer, you are treated as having said no. “No thanks” is a complete answer; you can change it later in Settings.
  • What for, and nothing else: step goals, step rewards, run missions, and your lifetime steps on the steps leaderboard and your clan's roster.
  • Read on your phone. Only totals leave it: a step count for a time window, and the distance of runs. Individual records, timestamps of sessions, heart rate and any other health data are never sent to us.
  • When: while the app is running (on launch, on returning to it, and every 10 minutes after that); the live step sensor only while it is on screen. Health Connect keeps its own history, so we read back up to 7 days — but never to before the moment you turned step sharing on.
  • What we store: today's step count, lifetime steps, the time of the last reading, and for each run mission the distance run towards it.
  • Never used for advertising, never sold, never used to decide credit, insurance or employment, and never shared except with the processors that host our database (section 8). Nobody reads it unless you ask us to, or to investigate abuse or comply with the law.
  • Turn it off with Settings → Share step data: nothing more is read, you are taken off the step leaderboard, your clan's roster stops showing your steps, and our server ignores step and run reports from your account. Revoking the permission in the Health Connect app also stops all reading. Totals already stored stay until you ask us to delete them or delete your account.

Weird World's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

6. Who can see what

Other players (signed in to the game) can see

  • Your username or display name, hero level and class, clan, and your wallet address (the app shows names, but the address is part of what it receives)
  • Your rank and score on the leaderboards — buildings, territory, steps, distance, monsters, crates, Sparks — unless you turn off Appear on leaderboards. The step board also leaves out anyone with step sharing off
  • In the player list: your lifetime Sparks. Players can search it by the start of a username or wallet address. With Appear on leaderboards off you are left out of the list and of partial searches, but a player who types your whole username or wallet address can still find you — that is how friends add you
  • Anyone viewing your clan's page: your name, role, buildings contributed, hero level, distance walked, monsters defeated, join date, and lifetime steps unless step sharing is off. Appear on leaderboards does not hide you here
  • Raid rooms: your name, level and the damage you dealt
  • Buildings you captured: your wallet address, the name you gave the building, its photo, capture time and clan
  • Your clan chat messages, to your faction

Nobody sees your live position, where you have walked, your step history, or whether you are online.

Anyone on the internet can see

  • Everything written to the Solana blockchain (section 7)
  • Building photos and clan logos, which are served at public web addresses
  • Hero metadata: class, level, XP and, for figurine editions, whether the figurine was claimed

7. On-chain data: public and permanent

The following is written to the Solana blockchain when you use a wallet. It is publicly visible and cannot be modified or deleted by us, by you, or by anyone:

  • Your wallet address, in every transaction you sign
  • Hero NFT ownership, class and level
  • Captured buildings, including their coordinates and the name you gave them
  • Payments in SOL or $SKR, and $SKR rewards you claim
  • Your on-chain profile, which records the location of the first building you placed

A public record of buildings you captured is, indirectly, a record of places you have been. If that matters to you, capture away from your home and workplace, or play as a guest. We have stopped writing names and pass locations to the chain and have cleared the ones stored in current account data, but earlier transactions stay in the ledger history.

8. Who we share it with

We do not sell your data. These providers process it on our behalf (processors) or answer requests the app sends them directly:

ProviderRoleWhat it receives
NetlifyHosting of our game API and image storageEvery request to our server, including its IP address; uploaded photos and logos
NeonOur databaseEverything in section 3 that we store
HeliusSolana RPCYour wallet address and the transactions you send
MapboxMap tiles and 3D buildings; finding a city you typeThe map area you view, the city name you type, your IP address. Usage telemetry is switched off on Android
Cherry (cherry.fun)Clan chatYour wallet address as your chat identity, and your messages
OpenStreetMap routing (FOSSGIS)Route planningRoute start and destination
Overpass APIChecking what is at a building siteThe coordinates of the area
AlchemyReading Ethereum NFTs, only if you link one to an Ultra heroThe Ethereum address you give
ShopifyThe figurine shopYour order, including the name, email and shipping address you give the shop. We keep only the order number
Expo (EAS)Building the appNo player data; over-the-air updates are switched off
Solana networkPublic blockchainSection 7
Solana Mobile dApp StoreApp distributionWhatever you give the store, under its own policy

We disclose data to authorities only where the law requires it.

9. International transfers

Several providers above process data outside the European Economic Area, including in the United States. Transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified). The Solana blockchain is a global network with no location.

10. How long we keep it

DataKept for
Sign-in challenges10 minutes
Your last walking position24–48 hours after you stop walking
Locations implied by crate and monster records48–72 hours, then overwritten — also after account deletion, because the same records stop a returning account looting the same crates again
Walk start and end pointsUntil the walk ends; 48 hours after its last update if the app was closed mid-walk
Mission starting pointUntil the mission is finished or expires
Raid rooms (boss position, host)Rooms last 7 hours; deleted 48–72 hours after they expire
Walk speed records (no coordinates)30 days
Crash reports14–15 days
Account, progress, step and running totals, friendsUntil you delete your account
Building photosUntil you delete your account. A replaced photo is no longer shown, but the file is kept
Clan logosFor as long as the game operates. A replaced logo is no longer shown, but the file is kept
Wallet address, Spark ledger, $SKR accounting, crate cooldowns, captured buildings (coordinates and name, without your photos), marketplace and boss-fight records, minted gear, figurine claimsFor as long as the game operates, including after account deletion (section 3B)
Fingerprints of images we blockedIndefinitely, to stop re-uploads. A fingerprint cannot be turned back into the image
Moderation rejections, server request logsOur hosting provider's log retention period
On-chain recordsPermanently, outside anyone's control

11. Your controls and your rights

In the app, without asking us

  • Settings → Privacy: Use my location, Share step data, Appear on leaderboards, Send crash reports. Location, leaderboards and crash reports are on by default; step data is off until you say yes. Each can be turned off without losing the rest of the game. Location, step data and crash reports are remembered by the device and survive signing out, so a switched-off consent does not switch itself back on; Appear on leaderboards belongs to your account and follows it to any device.
  • Settings → Delete my account erases, immediately: your name and username, your walking positions, your step, running and walking history, the photos on your buildings, missions, wardrobe, unminted gear, friends, raid rooms, clan membership, and all progress. Locations implied by crate records follow within 48–72 hours (section 10). Your captured buildings stay on the map with their coordinates and the name you gave them, now with generated artwork, and marketplace and boss-fight records stay too. Crash reports cannot be linked to you, and expire on their own. It keeps what section 10 lists as kept after deletion, and cannot touch the blockchain. You may come back with the same wallet, starting from zero.

By email

You have the right to access your data and receive a copy in a portable format, to have it corrected or erased, to restrict or object to processing, and to withdraw consent. Write to coffeeonchainsol@gmail.com naming the wallet address concerned (or your username, for a guest account). We may ask you to sign a message with that wallet to prove it is yours. We reply within one month.

Deletion has a hard limit: we can erase what is on our servers. Nothing written to the blockchain can be erased, by us or anyone.

You may complain to a supervisory authority — ours is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) — or to the one where you live.

12. Children, security and automated decisions

The game is for players aged 18 and over and is not directed at children. We do not knowingly collect data from children; if we learn that we have, we delete it.

Traffic is encrypted in transit (HTTPS), and the app does not allow its data to be included in device backups. We never receive your private keys.

Our anti-cheat checks decide automatically whether a walk or step count earns a reward. That is their only effect: any action against an account is decided by a person, and you can appeal it (Terms §9). We make no other automated decisions about you.

13. Changes

When we change what we collect or why, we update this page and its date first. Changes that need your agreement are shown in the app before they take effect.

14. Contact

3D Print Corner · Anastasiia Miroshnichenko
Ehrenbergstraße 8, 10245 Berlin, Germany
E-mail: coffeeonchainsol@gmail.com

← Back to Weird World