1. Data Controller
Warrecords
Sint-Katelijnevest 42
2000 Antwerp, Belgium
Contact for privacy inquiries: wsh@warrecords.be
2. Data We Collect
When you use W.S.H., we collect and process the following personal data:
- Account data: username, email address, encrypted password
- Location data: GPS coordinates at the time of each sticker scan
- Photographs: images you capture of stickers during scanning
- Activity data: scan history, points earned, leaderboard position, timestamps
- Device data: browser type, operating system (collected automatically by third-party services)
3. Purpose of Processing
Your data is processed for the following purposes:
- Operating the sticker hunt game (scoring, leaderboard, discovery tracking)
- Verifying sticker authenticity via AI image analysis (SIFT + neural embedding matching)
- Promotional use: scanned photographs become the property of Warrecords for promotional purposes (social media, marketing, press)
- Improving the service and user experience
4. Legal Basis
Processing is based on your consent (given upon registration) and on our legitimate interest in operating the game and promoting Warrecords.
5. Third-Party Services
We use the following service providers who process data on our behalf:
- Supabase (EU) — authentication, database, file storage
- jsDelivr / unpkg (CDN) — serving JavaScript libraries (TensorFlow.js, OpenCV.js, ONNX Runtime, Leaflet, HTMX)
- CartoDB (CDN) — map tile imagery
All ML models (YOLO26-Nano for sticker detection, MobileNet for embeddings) are custom-trained and hosted on our own infrastructure — no third-party AI processing.
All third-party processors have data processing agreements in place or operate under GDPR-compliant terms.
6. Cookies & Local Storage
W.S.H. uses:
- Session cookies — required for authentication (keeping you logged in)
- LocalStorage / IndexedDB — for offline scan queueing and cached reference templates
No tracking cookies or advertising cookies are used. A consent banner is shown on first visit.
7. Data Retention
- Account data is retained as long as your account is active
- Scanned photographs are retained indefinitely for promotional purposes (you grant us ownership upon upload)
- Location data from scans is retained as part of the game ledger
8. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data (except photographs already used for promotion)
- Withdraw consent at any time
- Lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit)
To exercise any of these rights, contact us at wsh@warrecords.be. Account deletion and data requests are handled via email.
9. Data Security
We use encryption in transit (HTTPS), encrypted password storage, and row-level security on the database. AI inference runs client-side where possible to minimize data exposure.
10. Age
No minimum age restriction. However, users under 16 should have parental consent to register.
11. Changes to This Policy
We may update this privacy policy. Continued use of W.S.H. after changes constitutes acceptance of the updated policy.
12. Contact
Warrecords
Sint-Katelijnevest 42, 2000 Antwerp, Belgium
Email: wsh@warrecords.be