Last updated: September 30, 2026
This policy covers the Sølvringens Gåte app, which teams use during the treasure hunt at Yttervik Gård. It does not cover the host's screen or our websites; our general privacy policy covers those.
In short
You don't create an account, and we don't ask for your name, email, phone number or age.
During the game we store what your team types and photographs, and the team's latest location.
All of it is deleted automatically no later than 24 hours after the game ends. Your team can also delete it straight away in the app.
We keep only anonymous statistics about how the game is played.
We show no ads, and we don't sell or share data with anyone other than the providers that run the service for us.
Who is responsible
Breach AS (org. no. 918 166 769), Fjordgata 76, 7010 Trondheim, Norway, is the data controller for what the app collects. Send questions about privacy to support@breachvr.com.
What the app collects, and why
Team name and team size, to show your team on the scoreboard. Every team in the game and the host can see it.
The answers your team enters, to check them and award points. Only your team and the host can see them.
Photos your team takes in the game, for the vote at the end. Every team in the game and the host can see them.
Your team's location, to show the distance to the next challenge and send your team to one nearby. We store only the latest location, replaced each time the phone gets a new one. Only the host can see it.
A random game ID, to keep track of your team without anyone signing in. It is created automatically when the app starts and says nothing about who you are. No one sees it.
Crash reports and performance data, to find and fix faults. They contain details about the phone (model, operating system version) and what the app was doing when the fault happened. Only we see them.
Game events, such as when a challenge was solved and how many hints were used, to improve the game. They contain only numbers and fixed values, never text you type or photos. The only location detail is the distance to the challenge, rounded to the nearest 50 metres. Only we see them.
The app does not collect contacts, the advertising ID, or anything else from the phone beyond what is listed above.
Permissions the app asks for
Location, only while the app is open: to show the distance to the next challenge and pick one nearby.
Camera: for photos in the game, to show the boat in augmented reality (AR), and to scan the code that starts the game. Photos are not saved to the phone's photo library.
NFC: to read the marks placed around the farm.
You can turn any permission off in the phone's settings at any time. The parts of the game that need it will then stop working.
Legal basis
We process this data because we have a legitimate interest in running the game you have booked, keeping the app stable and improving the game (GDPR Article 6(1)(f)). We collect only what the game needs. You decide what the photos show, and they don't need to show faces.
How long we keep it
Team names, answers, photos, location and the game ID are deleted automatically no later than 24 hours after the game ends. A game that is never ended counts as ended 24 hours after it started.
Your team can delete its own data straight away with "Leave the game and delete our data" in the app's menu.
Google deletes crash reports after 90 days.
Once the game data is deleted, the game events are no longer linked to any team or person. We keep these anonymous statistics.
Who processes the data for us
The app runs on Google Firebase and Google Cloud. Google processes the data on our behalf under a data processing agreement.
Game data and photos are stored in Google's data centre in Belgium (EU).
Crash reports and performance data (Firebase Crashlytics and Performance Monitoring) may be processed outside the EEA. Such transfers are covered by the EU Standard Contractual Clauses in Google's terms.
We don't share the data with anyone else, and we don't sell it.
Children
The game is played by groups, including families and school classes, and an adult books it for the whole group. The app does not ask for age, name or contact details, and no one has to appear in the photos.
Your rights
You have the right to ask for access to, correction of or deletion of data about you, and to object to the processing. Because the app doesn't know who you are, we need the time of the game and the team name to find the data. After 24 hours it has been deleted in any case. Send your request to support@breachvr.com.
If you believe we process data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).
Changes
If we change how the app handles data, we update this page and the date at the top.