Legends in Motion Privacy Policy

This privacy policy explains how Little Gary Games, a studio of LogiNestForge ("we", "us"), handles personal data in Legends in Motion (the "game"), a location-based walking game for Android. It applies under the UK GDPR and the Data Protection Act 2018.

Who we are

LogiNestForge is the controller for personal data processed through the game. You can contact us at support@loginestforge.uk.

When a school, club or other organisation runs a private group trail, that organisation decides how the game is used with its members and is responsible for telling them (and, for pupils, their parents or carers) about it. We process group members' data to provide the game for that organisation.

How you can play

With your own account: you sign in with Google.
In a school or club group: you join with a group code or a printed pass and use a nickname. No Google account, email address or date of birth is needed.

What data we collect

Your account

Google sign-in: Firebase Authentication receives your Google account ID and email address so you can sign in. The game sends our server only a secure sign-in token, never your Google password.
Group members: we create an account with a random identifier when you join with a code or pass. Passes are stored only in a scrambled (hashed) form.

Game data on our server

Your character (name and look), inventory, XP, quests, achievements and medals.
Trail progress: which stops you completed and how (by location, answer, QR scan or a leader's tick).
Group memberships and the nickname you use in a group.
Which organisation's trail first brought you to the game, and any welcome gifts claimed.
Answers to trail quiz questions are counted without linking them to you.

Location

The game uses your device's precise location while it is open: to lift the fog on your map, to show nearby places and to check when you reach a stop.

Arrival checks: your position is sent to our server to check you're at a stop, then thrown away. It isn't stored or logged.
Find trails near me: your position is sent once, only when you ask, and isn't stored.
Your map (Google accounts): the areas you've uncovered and your last map position are saved on your phone and backed up to your account on our server, so you keep them if you change phone.
Group members: your map and position are never saved, on your phone or on our server.

Organisations never see your location, your map or where you walked.

Camera

The camera is used only to scan QR codes. Scanning happens on your phone; no photos or video are saved or uploaded.

Map data

Map details are downloaded from OpenStreetMap through the Overpass service, which receives your device's IP address and the map area being loaded. For Google accounts, map tiles are cached on your phone for up to 14 days; for group members they're kept in memory only.

Install link

When you install the game from a trail link, the app checks the Google Play install referrer once so it can open that trail for you.

Usage statistics

The game includes Google Analytics for Firebase, which may automatically collect basic usage information such as app opens, session length, app version and device type, linked to a random app identifier. It doesn't receive your location, map, answers or game content, and we don't use it for advertising.

What we don't collect

No date of birth, real names of pupils, school rosters, photos, chat or contact details. There are no adverts and no in-app purchases.

What organisations can see

Public trails: totals only — poster scans, new players, trails started and finished, finds per stop and how many people chose each quiz answer. Numbers below five are hidden, and they never see names, locations or maps.
Private groups: the group leader sees each member's nickname and which stops they've completed, and can export that list. Leaders never see locations or live tracking.

How we use it and our lawful basis

To run your account, save your progress and provide trails — contract.
To provide group trails for schools and clubs on their behalf — legitimate interests of the organisation and of us in providing the service.
To keep the game safe, working and fair, and to understand basic usage — legitimate interests.

Third-party services

Google Firebase (Authentication and Analytics) — sign-in and usage statistics. Firebase privacy information
Railway — hosts our game server and database. Railway privacy policy
OpenStreetMap / Overpass API — map data. OpenStreetMap Foundation privacy policy
Google Play — app distribution and install referrer. Google privacy policy

Children

Children can play through a school or club group, where they use a nickname, no contact details are collected and their location and map are never saved. To sign in with your own Google account you must be at least 13.

How long we keep it

Google accounts: for as long as your account exists, until you ask us to delete it.
Group trail progress: deleted after the period set by the organisation (90 days by default) once the trail ends or is archived. Pupil accounts are deleted once their last group membership has been removed.
Organisations: an organisation can export or delete its groups and trails at any time, which also deletes pass-only pupil accounts.
Server logs: error logs never contain request contents, answers or coordinates.

Deleting your account

You can ask us to delete your account and its data at any time using our account deletion page or by emailing support@loginestforge.uk. Uninstalling the game doesn't delete your account.

Your rights

You have the right to access, correct, delete or restrict the use of your personal data, to object to its use, and to data portability. To exercise any of these rights, email support@loginestforge.uk. Group members can also ask their group leader. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

We will update this page if the game changes the way it handles personal data. The date at the top shows when it was last changed.