1. Data controller
The app is published by the person or entity responsible for the developer account associated with Invaders Finder. For any question about data processing, use the contact information available on the Support page.
2. Data you provide
Account (optional). If you create an account or sign in:
- Authentication is handled by Supabase (email/password, Sign in with Apple, or Google depending on your choice). Credentials are processed according to that service’s practices.
3. Data stored when using the app
The items below describe the current behavior of the app when communicating with the server.
Flashed invaders — When signed in, the list of invader IDs you mark as found can be synced and stored server-side (dedicated table linked to your account).
Technical profile — During sync or account-related actions, the app may record: last sync date, app version, a local technical install identifier (generated and stored locally, distinct from Apple’s advertising identifier), and mini-game related information (e.g. high score if you play it and sync runs).
Push notifications — If you accept notifications, an Apple-provided token (APNs) may be transmitted to the server together with the install identifier above, to be able to deliver notifications. This may happen even without an account, based on the current behavior of the app.
Invader catalog — The app downloads public data about mosaic locations and metadata (files or API) to display the map and lists. It is not personal data you enter.
Location — With your consent (“while the app is in use”), the app uses your position to display your dot on the map on the device. This location is not sent to our servers; it is only used for local map rendering and related interactions.
4. Data stored on device only
Settings, preferences and lists of flashed invaders can be kept locally on your iPhone or iPad (e.g. via the system’s storage). Without an account or sync, these data are not sent to the server.
5. Purposes
- Provide the map, list and detail features;
- Enable backup and sync of your progress when using an account;
- Ensure technical operation (app version, install identifier to correlate data server-side when needed);
- Send notifications if you have authorized them.
To the extent of this description, the app does not include personalized advertising or resell personal data to third parties for advertising purposes.
6. Processors
The data described in sections 2 and 3 are processed via Supabase.
7. Retention
Account-related data is kept as long as the account exists and sync is being used. Account deletion is available directly from the app settings.
8. Your rights
Under applicable law (notably GDPR in the European Union), you may have rights of access, rectification, erasure, restriction, opposition and portability. To exercise these rights: Support page. You may also lodge a complaint with the relevant data-protection authority.
9. Changes
This policy may be updated as processing evolves. The date at the top will be adjusted accordingly. Continued use of the app after publication constitutes acknowledgement of significant changes, to the extent permitted by law.
10. Contact
invaders-finder.com/en/support — privacy and support contact.