Privacy Policy

Last updated: June 2025

This policy explains what personal data Terra Obscura collects, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR). We are committed to protecting your privacy and handling your data transparently.

1. Who We Are

Terra Obscura is operated by Thomas Andersen, based in Norway. Norway is part of the European Economic Area (EEA) and is subject to GDPR.

Data controller contact:
Thomas Andersen
thomas@teledge.no

2. What Data We Collect

We collect the following data when you use Terra Obscura:

Email address — when you create an account using email and password
Google account information — name and email address, when you sign in with Google
Exploration data — geographic coordinates representing areas you have explored in the game, stored as latitude/longitude pairs
Pin data — names and geographic coordinates of pins you place on the map
Timestamps — when your data was last updated

If you do not create an account, no personal data is sent to our servers. Your exploration progress is stored only in your browser's local storage.

3. Why We Collect It (Legal Basis)

We collect and process your data on the following legal bases under GDPR Article 6:

Contract (Art. 6(1)(b)) — to provide the account and cloud save service you signed up for
Legitimate interest (Art. 6(1)(f)) — to maintain the security and integrity of the service
Consent (Art. 6(1)(a)) — for any optional features or communications you opt into

4. How We Use Your Data

To authenticate you and give you access to your account
To save and synchronise your exploration progress across devices
To store your map pins
To provide customer support if you contact us

We do not use your data for advertising, profiling, or sell it to any third party.

5. Data Storage and Processors

Your data is stored using Google Firebase (Firestore and Authentication), which is our data processor. Firebase is GDPR-compliant and Google has signed a Data Processing Agreement. Your data may be stored in Google's data centres within the EEA or elsewhere subject to appropriate safeguards.

Firebase Privacy Policy: firebase.google.com/support/privacy

We do not share your personal data with any other third parties.

6. Data Retention

We retain your data for as long as your account is active. If you delete your data using the in-game reset function, or request deletion by contacting us, your data will be permanently removed from our systems within 30 days.

7. Cookies and Local Storage

Terra Obscura uses browser local storage to save your exploration progress locally on your device. This is not a cookie and does not track you across websites.

Firebase may set cookies for authentication purposes. These are strictly necessary for the service to function and do not require consent under ePrivacy rules.

8. Your Rights Under GDPR

As a data subject in the EEA, you have the following rights:

Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can request deletion of your personal data ("right to be forgotten"). You can do this instantly using the reset button in the game, or by contacting us
Right to restriction — you can ask us to pause processing of your data
Right to data portability — you can request your data in a machine-readable format
Right to object — you can object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at thomas@teledge.no. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no

9. Data Security

We take reasonable measures to protect your data, including using Firebase's built-in security rules to ensure users can only access their own data. All data is transmitted over encrypted HTTPS connections.

10. Children

Terra Obscura is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests:
Thomas Andersen
thomas@teledge.no