Subprocessors and third parties
Last updated
On this page
These are the companies involved in running Hunting Game, what each one receives, and where. This page belongs with our Privacy Policy. If a change here affects you, we will say so in the app.
Companies that process data on our instructions
They act only on our instructions, under terms that require them to protect your data.
| Company | What it does | What it receives | Where |
|---|---|---|---|
| Amazon Web Services | Hosts our database, file storage, servers and secrets, and the in-memory store for live game positions (never backed up) | Everything described in the Privacy Policy | Paris, France (EU) |
| Amazon CloudFront (Amazon Web Services) | Delivers our website and profile photos quickly | Your IP address and the pages and photos requested. It keeps copies of public files and photos for a short time | Europe, North America and Israel |
| Amazon SES and Amazon SNS (Amazon Web Services) | SES sends our emails: sign-in codes, account emails, and marketing email to people who switched it on. SNS reports back on each marketing email | Your email address and the message, and whether the email was delivered, bounced or reported as spam. No open or click tracking | Paris, France (EU) |
| Apple (iCloud Mail) | Hosts our mailbox, contact@hunting-game.com | Everything you email us, with your email address and the name your email app sends | United States and other countries where Apple runs its servers |
| Expo (650 Industries) | Relays push notifications | Your push token and the notification: title, text, and data such as another player's name, photo address and a join code | United States |
| RevenueCat | Manages Pro subscriptions | Your Hunting Game account ID, whether you have Pro and whether yours is a guest account, a Firebase installation ID while "Share diagnostics" is on, when the Pro screen was shown and, while "Measure our ads" is on, the ad campaign you came from (on iPhone, Apple's Apple Ads attribution token). Not your name or email address | United States |
| Google Firebase | Crash reports, performance and usage diagnostics | Your account ID, whether you have Pro, app events (Privacy Policy, section 2.9), app version, device model, operating system, crash reports and an installation ID. Never for guests, and not after you switch off "Share diagnostics". No advertising ID | United States |
| Mapbox | Draws the Pro map styles in the app and on share cards | Your IP address and the map area requested, which shows roughly where you are. Mapbox's usage and location telemetry is switched off | United States |
| Cloudflare | Runs our domain names (DNS only; app traffic does not pass through it) | Lookups of our domain names | Worldwide |
Companies that act on their own account
Their own privacy policies apply, and we do not decide what they do with the data. Meta is a special case: see its row.
| Company | What it does | What it involves |
|---|---|---|
| Apple | Sign in with Apple, notifications, App Store, Pro payments, Apple Ads attribution, the city name on share cards, iMessage | Your Apple sign-in, a device token for notifications, your purchase, whether an Apple Ads ad led to your install (campaign only, while "Measure our ads" is on), and the rough location of your route when you make a share card. With Hide My Email we only see the relay address |
| Google Sign-In, notifications, Google Play, Pro payments, the city name on share cards (Android) | Your Google sign-in, a device token for notifications, your purchase, and the rough location of your route when you make a share card | |
| Meta Platforms Ireland | Measures whether our ads on Facebook and Instagram work (Privacy Policy, section 2.15). We and Meta are jointly responsible for collecting this data and sending it to Meta. After that, Meta uses it on its own account, also to choose who sees our ads, under its Business Tools terms | Android only. From the app, for every signed-in player, also under 18: a random installation ID made by Meta's software, your device and app version, your IP address, and three events: app opened, account created, game finished. From our server, never for players under 18: that installation ID, your device and app version, and each Pro trial, purchase and renewal (with price). Not your name, email address, account ID or any advertising ID. Nothing after you switch off "Measure our ads". Meta processes data in Ireland and the United States |
| OpenFreeMap | The free map in the app and on share cards | Your IP address and the map area requested, which shows roughly where you are |
| OpenStreetMap Foundation | The map on our website's game page | Your IP address and the map area you view, which shows roughly where the game is |
| Apps you share to | Only when you choose to share a card or clip with them | The image or video and the text you share |
International transfers
Everything we host ourselves is in Paris, France. Suppliers marked "United States", "Worldwide", "North America" or "Israel" receive data outside the EEA, and so do Apple, Google, Meta and the OpenStreetMap Foundation (United Kingdom). Those transfers rely on the EU–US Data Privacy Framework where the company is certified under it, otherwise on the European Commission's Standard Contractual Clauses, or on an adequacy decision (Israel, United Kingdom). Ask us for a copy of the safeguards for any supplier.
What we do not use
No data brokers, no advertising IDs, no ads in the app, and no tracking on our website. Meta's measurement software, on Android only, is the only part that comes from an advertising company. Meta uses what it receives to measure our ads and to choose who sees them, and you can switch it off.