Privacy Policy
Last updated: December 2025
At Obsession Solves, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
Key Privacy Points
- Your .obstrack password never leaves your browser - All decryption happens locally
- You control what data you share - Choose exactly what to make public
- Your email stays private - Only your display name is shown publicly
- We don't sell your data - Ever.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address: Required for account recovery, verification, and moderation notifications
- Password: Stored as a secure hash (we cannot see your actual password)
- Display name: Auto-assigned from our nature-inspired name pool
1.2 Content You Submit
When you submit a solve, you choose what to share:
- GPS tracks (breadcrumbs)
- Waypoints and markers
- Photos
- Title, description, and category
Important: Your .obstrack file password is used only in your browser to decrypt the file. We never receive, store, or have access to your password. All decryption happens client-side using the Web Crypto API.
1.3 Automatically Collected Information
When you use the Service, we automatically collect:
- IP address (for security and rate limiting)
- Browser type and version
- Pages visited and timestamps
- Referring URLs
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Verify your email and account
- Display your submitted content to other users
- Send you important service notifications
- Respond to moderation and support requests
- Prevent abuse and enforce our Terms
- Improve the Service
3. Information Sharing
3.1 Public Information
The following information is publicly visible:
- Your display name (not your email)
- Content you submit (based on your privacy choices)
- Submission dates
3.2 Private Information
We keep the following information private:
- Your email address
- Your IP address
- Data you choose not to share from your .obstrack file
3.3 Third-Party Sharing
We may share information with:
- Service providers: Cloudflare (hosting), Mapbox (maps) - only as necessary to provide the Service
- Legal requirements: If required by law or valid legal process
- Safety: To protect rights, safety, or property
We never sell your personal information.
4. Data Security
We implement security measures including:
- HTTPS encryption for all data in transit
- Secure password hashing (PBKDF2-SHA256)
- Session token security with hashed storage
- Rate limiting to prevent abuse
- Regular security reviews
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
5. Coordinate Privacy
When submitting tracking data, you have the option to apply coordinate fuzzing. This adds a random offset (up to 500 meters) to all coordinates, providing additional privacy for sensitive locations.
Please carefully consider what location data you share. Once published, GPS coordinates may reveal the general areas you visited.
6. Data Retention
- Account data: Retained until you delete your account
- Submitted content: Retained until you delete it or we remove it
- Server logs: Retained for 90 days for security purposes
- Deleted accounts: Data is removed within 14 days
7. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Receive your data in a portable format
To exercise these rights, contact us at privacy@obsession.community
8. Cookies
We use minimal cookies:
- Session cookie: Keeps you logged in
- Cloudflare cookies: Security and performance
We do not use tracking cookies or third-party advertising cookies.
9. Children's Privacy
The Service is not intended for users under 13 years old. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it.
10. International Users
The Service is operated from the United States. By using the Service, you consent to the transfer of your information to the United States and its processing there.
11. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes via email or a notice on the Service. The "Last updated" date will reflect the latest revision.
12. Contact Us
For privacy questions or concerns:
- Email: privacy@obsession.community
- For data requests: privacy@obsession.community