Privacy
This page explains what happens to your data when you play Off the Map (on iPhone, iPad, Mac or Android) and when you visit playotm.com. In short: the game sends anonymous usage statistics to our server unless you turn them off in its settings, never anything that names you; and without your consent nothing about your visit to the website leaves our server.
Who is responsible
Triplemind GmbH, see the imprint for the address and contact.
In the game
The game has no account and no sign-in, no advertising, no tracking across apps and no in-app purchases, and it doesn’t use the advertising identifier. It doesn’t ask for your location, contacts, photos, camera or microphone. Screens such as signing in and hiking together are previews only and don’t connect anywhere yet. Your hike, your settings and the game’s log files are saved on your device; removing the game removes them.
Versions up to 0.5.0 send nothing to us or anyone else. From version 0.5.1, the game sends anonymous usage statistics, described below. You can turn them off at any time. Versions with a Send feedback screen send a report only when you choose to (see “Sending feedback from the game”).
From version 0.7.0, the game downloads the files of a world from our server at playotm.com when you choose to download or update that world; once a world is on your device, it needs no connection. A download is an ordinary request for files: it tells our server which world and which version of the game the files are for, and it is logged like any other request to this server (see “Server logs”). It carries no ID of your installation and nothing about your hike.
Game statistics
To see how the game is played and where it needs fixing, the game sends us:
- what happens in the game: sessions and play time, the world played, distance walked, altitude and places reached in the game, the in-game weather, menus and settings used, falls and similar events;
- how the game runs: load times, frame rate, memory and heat warnings, unexpected exits;
- your device: platform, model, operating system and version, language, screen size and the game’s version.
Positions are the hiker’s position in the game’s world, never your real location. Each installation gets a random ID so that its events can be told apart; it is not linked to an account, a name, an advertising ID or any other app. We never collect your name, contacts, photos, messages or real location; the only text and picture we ever receive are the ones you send us yourself as feedback, described below.
The statistics are sent encrypted to our server at playotm.com. Your internet address is used there only to look up your country and region (with the free DB-IP database on our own server) and is then discarded: it is not stored with the statistics and not passed on. We keep the statistics in our database (hosted by Triplemind GmbH in Germany) for 12 months. From our server we pass them, with the country and region but without your internet address, to Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which processes them for us on our behalf and keeps them for 14 months; data may be processed by Google in the USA, and Google is certified under the EU–US Data Privacy Framework. Nothing else is shared with anyone, and nothing is used for advertising.
Turning it off. In the game, open Settings › Privacy and switch Statistics off. The game then sends nothing more, deletes its queue of unsent events and the random ID, and asks our server to delete what it holds for that ID. “Delete my statistics” in the same place deletes what our server holds for your installation at any time. Data already passed to Google Analytics can’t be matched to you by us; it is deleted when its 14 months end. In some countries or regions the game may instead ask before sending anything; then it sends nothing unless you agree.
Legal basis: our legitimate interest in understanding how the game is used, keeping it running smoothly on your device and improving it (Art. 6(1)(f) GDPR). You have the right to object at any time (Art. 21 GDPR), most simply by switching Statistics off, or by writing to info@playotm.com.
The Android version also lists permissions the game engine includes by default; the game uses internet access only for these statistics, for feedback you choose to send and for downloading its worlds. The engine also includes Google’s Play Games library, which we have not set up and don’t use.
When online features arrive (an account, a display name you choose, your progress kept online, and seeing other hikers), this page will say exactly what is sent and kept before a version with them is released, and you can delete your account at any time (see below).
Sending feedback from the game
From the pause menu you can send us feedback about the game. This is sent only when you choose Send, and it works with Statistics switched off too. A report contains:
- what you wrote and the kind of feedback you picked;
- a picture of the game as it was when you opened the menu, unless you untick “Attach the picture”. It shows the game’s world only, never your camera or anything else on your device;
- where the hiker stood and looked in the game’s world (never your real location), and the world played;
- the game’s version, your platform and device model;
- the last lines of the game’s log, with file paths and anything that looks like an e-mail address or a key removed;
- your e-mail address, only if you type one because you’d like an answer. It is used for that answer and nothing else.
Each report gets its own random ID so that the same report isn’t stored twice. It is not linked to the statistics’ ID, to an account or to any other app. Once a report is sent, the game keeps no copy of it.
Reports are sent encrypted to our own server at playotm.com and kept in our database (hosted by Triplemind GmbH in Germany). Only we read them, to fix and improve the game; they are not passed to Google Analytics or anyone else. We delete a report when it has been dealt with, and after 12 months at the latest. To have a report deleted sooner, write to info@playotm.com and tell us roughly when you sent it.
Legal basis: your request that we look at what you send us, and our legitimate interest in fixing the game (Art. 6(1)(b) and (f) GDPR); for the optional e-mail address, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us.
The feedback form on this website
On playotm.com/feedback you can send us feedback or a question without the game. This is sent only when you choose Send. It contains what you wrote and the kind of message you picked; the platform and game version, if you pick them; and your e-mail address, only if you type one because you’d like an answer. It is used for that answer and nothing else. No picture, position, device details or log is sent, and your internet address is not stored with the message.
To keep automated spam out, the feedback page uses Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA), which checks that a person is sending the form. For that check your browser loads a script from Cloudflare, and Cloudflare receives your internet address and details of your browser and device, and may run a short test in your browser; our server then asks Cloudflare, with your internet address, whether the check passed. Cloudflare processes this for us on our behalf, also in the USA, and is certified under the EU–US Data Privacy Framework. Turnstile is loaded on the feedback page only: no other page of this website loads anything from Cloudflare. Our server also counts messages per internet address for about two hours, so that nobody can flood the form.
Messages from the form are stored, read and deleted exactly as reports from the game are (above): in our own database, read only by us, deleted when dealt with and after 12 months at the latest, or sooner if you write to info@playotm.com.
Legal basis: your request that we look at what you send us, and our legitimate interest in answering it and improving the game (Art. 6(1)(b) and (f) GDPR); for Turnstile, our legitimate interest in keeping the form free of automated abuse (Art. 6(1)(f) GDPR); for the optional e-mail address, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us. If you’d rather not use the form, write to info@playotm.com instead.
App stores and downloads
The iPhone, iPad and Mac versions come from Apple’s App Store or, during the alpha, Apple’s TestFlight (the “Join the alpha” links). What happens there is governed by Apple’s privacy policy. If you choose to share crash reports or feedback with developers on your Apple device, Apple passes them to us; we use them only to fix the game.
On Android the game comes from Google Play, including its testing tracks. What happens there is governed by Google’s privacy policy. Google may show us crash and performance statistics it collects through Google Play; we use them only to fix the game.
On Windows the game comes from the Microsoft Store or as a download from this website. What happens in the Microsoft Store is governed by Microsoft’s privacy statement.
The Mac version (a DMG file) and the Android version (an APK file) can also be downloaded from this site. Downloading one is logged like any other request to this server (see below).
Server logs
Like every web server, ours records technical data about each request (IP address, time, page requested, browser, referring page) to keep the site running and secure. These logs are kept by our hosting provider for a short period and then deleted. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Website statistics (Google Analytics)
On this website, only if you choose “Allow statistics” do we load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It then sets cookies and measures which pages are visited and which buttons are used (for example, how often the TestFlight link and the downloads are used and the trailer is opened), with IP addresses shortened. Data may be processed by Google in the USA; Google is certified under the EU–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time with “Statistics settings” at the bottom of every page.
Your choice
Your answer (allow or not) is stored in your browser’s local storage, not on our server, so we don’t ask again on every visit.
Fonts, images and video
All fonts, images and the trailer are served from our own server; nothing is loaded from other services unless you allow statistics. The one exception is the imprint page, which loads the imprint from www.triplemind.com, our company’s own website.
Your game account and deleting it
The versions released so far don’t create an account. What our server holds about your installation’s game statistics can be deleted in the game (Settings › Privacy › Delete my statistics, see above). Once accounts exist, here is how to delete yours, what is deleted and what is kept: Delete your account. You can always write to info@playotm.com, also to ask what we hold about you.
Children
The game asks for no personal data from anyone, children included. Its anonymous statistics (see above) are the same for everyone; if you are under 16, you or a parent can switch them off in Settings › Privacy.
Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to complain to a data protection authority. Write to us at the address in the imprint.
As of October 2026.