Privacy Policy
Last Updated: May 15 2026
POAP Inc. (“we,” “us,” or “our”) operates The Passport Game (the “Service”).
This Privacy Policy explains how we collect, use, and share information when you use the Service, as well as your rights under applicable data protection laws.
1. Information We Collect
We collect information you provide directly, as well as information collected automatically when you use the Service.
a. Information You Provide
- Account information (such as email address or login credentials)
- Content you upload (such as photos or other media)
- Communications you send to us
b. Location Data
We collect location data from your device when you use location-based features.
This may include:
- Precise GPS location
- Approximate location derived from your device or network
c. Metadata (Including EXIF Data)
When you upload photos or media, we may extract and process metadata, including:
- Timestamp
- Device information
- Embedded location data (EXIF GPS coordinates)
- Other technical attributes associated with the file
d. Automatically Collected Information
We may collect:
- Device information (e.g., device type, operating system)
- Log data (e.g., IP address, timestamps, app activity)
- Usage data (e.g., features used, interactions with the Service)
2. Categories of Personal Information (CCPA)
We collect the following categories of personal information:
- Identifiers (e.g., email address, IP address)
- Internet or network activity (usage data)
- Geolocation data (precise and approximate location)
- User-generated content (photos and associated metadata)
3. Legal Bases for Processing (GDPR)
We process personal data under the following legal bases:
- Performance of a contract: to provide and operate the Service
- Legitimate interests: including fraud prevention, security, and improving the Service
- Consent: for collection and use of precise location data and certain optional features
- Legal obligations: to comply with applicable laws and regulations
4. How We Use Information
We use information to:
- Provide, operate, and maintain the Service
- Issue digital stamps based on location, metadata, and related signals
- Detect, prevent, and investigate fraud, abuse, and manipulation
- Improve and develop new features
- Communicate with you (including service-related updates)
- Comply with legal obligations
5. How We Share Information
We do not sell or share your personal information as defined under applicable law.
We may share information in the following circumstances:
a. Service Providers
We may share information with vendors who help operate the Service (e.g., hosting, analytics, payments).
b. Legal and Compliance
We may disclose information if required to:
- Comply with applicable law, regulation, or legal process
- Enforce our Terms
- Detect or prevent fraud, abuse, or security issues
c. Business Transfers
If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
6. Location and Content Visibility
Content you collect may be visible to:
- You
- Other users, depending on product features and your settings
While your content and specific location will not be visible to others, other users may be able to see the stamps you collected.
7. Location Data and Sensitive Information
Certain data we collect, such as precise location data, may be considered sensitive.
We process such data only as necessary to provide the Service and, where required, based on your consent.
8. Data Retention
We retain personal information for as long as necessary to:
- Provide the Service
- Comply with legal obligations
- Resolve disputes and enforce agreements
Retention periods may vary depending on the type of data and the purposes for which it is used.
We may retain certain information for longer periods where necessary for security, fraud prevention, or legal compliance.
9. Your Rights
a. GDPR (EU/EEA Users)
If you are located in the European Economic Area, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
You also have the right to lodge a complaint with a data protection authority.
b. CCPA (California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Request correction of inaccurate information
- Opt out of the sale or sharing of personal information (note: we do not sell or share personal information)
- Not be discriminated against for exercising your rights
You may designate an authorized agent to make requests on your behalf. We may require verification of your identity and the agent’s authority.
c. Exercising Your Rights
To exercise your rights, contact us at contact@thepassportgame.com.
We may need to verify your identity before fulfilling your request and will respond within the timeframes required by applicable law.
10. International Data Transfers
If you use the Service from outside the United States, your information may be transferred to and processed in countries with different data protection laws.
Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.
11. Security
We use reasonable administrative, technical, and organizational measures to protect your information.
However, no system is completely secure, and we cannot guarantee absolute security.
12. Children’s Privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction).
We do not knowingly collect personal information from children.
If we become aware that we have collected such information, we will take steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
We will notify you of material changes by updating the effective date or through the Service.
14. Contact
POAP Inc.
82 Nassau St.
New York, NY
10038
15. Additional Information for California Residents
We do not sell or share personal information for cross-context behavioral advertising.
We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law.