Privacy in plain language

Who operates Roam Uncommon

Roam Uncommon is operated by Resolve Gameworks. Davin Gray is the operational and legal contact. Use the support contact provided with your Quest Pass.

Service providers

Stripe hosts payment checkout and processes card information directly. Roam Uncommon does not receive or store complete card numbers. The service keeps the purchaser email, selected Quest, route and mode, amount and currency, Stripe transaction identifiers and status, and the support history needed to deliver, reconcile, refund, or replace the Quest Pass.

Cloudflare Email Sending receives the destination email address and transactional message content when the service sends a transactional message. These messages are limited to purchase delivery, access recovery, account verification, password recovery, deletion confirmation, and essential service notices; the current product does not use them for a marketing list.

The application, PostgreSQL data, and temporary game media are hosted on an independent Contabo virtual private server. Better Auth runs inside that application to manage optional Solo Fieldbook sessions. Google sign-in and third-party product analytics are not enabled; any additional authentication or analytics provider must be disclosed here before it receives player information.

Group Quests need very little personal information

A Quest Pass can be claimed free or purchased and played without creating an account. One pass covers the host’s group with unlimited synchronized player phones. The host’s email is used to deliver the access link, game code, any applicable receipt, and essential service messages. A free Quest Pass does not request or send payment details to Stripe. Guest players use a display name chosen for that game.

Location is used only when you choose it

Location access is optional. It may be used to show nearby Quests, estimate distance to a clue area, or run a temporary radar feature. The current group-Quest configuration uses an exact-location retention setting of zero: latitude, longitude, and accuracy are used for the immediate proximity response and discarded before the attempt is stored. Solo ranking can hold a clearly implausible transition by comparing discovery times and the fixed coordinates of two published places; it does not retain the player’s readings. A hold pauses public rank only and leaves the private discovery and XP intact for review. Operational counts may record that a proximity check, low-signal result, arrival, or manual recovery occurred, but those aggregate records do not contain the reading, player identity, email, or IP address. Exact location does not appear on public leaderboards or shared result cards.

The current clue can survive a brief connection loss

For a Published Quest, the currently authorized clue may be cached on that player’s device for up to 24 hours so a reload does not replace the game with unrelated content. The cache is scoped to one game, player, and stop, and is cleared when the team finishes. It never contains accepted answers, exact coordinates, or future clues.

Game photos are temporary and shared with your group

Players may upload destination selfies as optional evidence, or the host may require one at each stop before points, the story, and the next clue unlock. Before the game starts, every joined player is shown whether photos are optional or required. Uploaded copies are re-encoded to remove embedded metadata, visible only to people holding an authorized link for that game, and automatically deleted seven days after upload. To recover from weak mobile service, a photo is transferred in resumable pieces; an unfinished transfer expires after one hour.

The host can download individual photos during that window. A downloaded copy is saved to the host’s device and is no longer controlled by Roam Uncommon, so hosts should share and retain downloads respectfully.

Completed routes become a private memory journal

After a team completes its route, people holding an authorized game link can reopen the route art, earned story fragments, generated clue sketches, checked source links, illustrated passport stamps for earned discoveries, and the shared photo timeline. The journal and passport do not include accepted answers, skipped or unfinished clues, or exact destination coordinates. Temporary photos still follow the separate seven-day deletion rule described above.

Your group reviews photo answers

Joined players can privately mark a photo as the wrong answer. A photo is discreetly invalidated only when more than half of the game’s players vote and the host is among them. The photo is then muted in the timeline and its evidence points are removed from the uploader’s displayed score. Individual votes and vote totals are not shown.

Make Good proof is temporary

If a player forfeits a clue and chooses a Make Good, the group submits exactly one proof photo before the next clue unlocks. There are no typed Make Good submissions or minimum travel-distance requirements. Every required target and participant must appear in that single frame. Ask every photographed person for affirmative consent before raising the camera, use adults only outside your group, accept no immediately, and never include names or contact information. This proof is visible only to the authorized game record, is not added to the group photo timeline, and is automatically deleted after seven days.

Post-Quest ratings are individual and private

After completion, every joined player may submit one 1-to-5 rating for discoveries, puzzles, route, and value. Ratings do not affect the game score, and players cannot see one another’s responses. Quest Studio receives only combined response counts and averages for those four dimensions.

Support actions are recorded

Quest Studio records an audit note when support reconciles a purchase, issues a refund, restores host access, or creates a replacement Quest Pass. A replacement link is random, private, revocable by issuing a newer link, and usable once. It creates a fresh game with the original purchaser’s email and Quest selection.

Operating measurements are aggregate

The service keeps daily counts by Quest, route, and clue for events such as checkout starts, joins, starts, pauses, completions, answer rejections, hints, radar use, low GPS signal, photo success, Make Goods, time penalties, route reports, and post-Quest ratings. These records contain no player name, email, IP address, photo, answer text, or exact location and are removed after 400 days. A third-party product-analytics provider is not enabled.

Solo Fieldbook is separate

Solo accounts store a username, verified sign-in identity, discoveries, badges, progress, privacy choices, private notes, latest revisit dates, and one optional private photo per earned discovery. The private neighborhood atlas groups earned discoveries and available silhouettes but contains no route line, visit order, or exact coordinates. Private photos are re-encoded to remove embedded metadata, require the owner’s secure server session, never enter leaderboards, and remain until the player replaces or deletes them or deletes the account. Public rankings show only the opted-in username and aggregate game statistics—not email, real name, notes, photos, routes, or exact locations. Secure server sessions, rather than browser-only state, authorize Fieldbook data and progress.

Feature availability

The live interface shows which payment, email, account, and game features are currently available. Roam Uncommon does not collect payment or account data through a feature that is unavailable.

Solo account deletion

When account deletion is available, a signed-in Solo player can open it from the Fieldbook, type an explicit confirmation, and then open a time-limited deletion link from the signed-in browser. Deletion removes the authentication account, sessions, Solo profile, discoveries, Fieldbook entries, badges, attempts, account-linked report text, and private Fieldbook media. Group-Quest evidence photos remain separate and expire under their seven-day session policy.

Changes to providers or data use

This notice will be updated before a new provider receives personal information or an existing use of that information materially changes.