Plain English, because you should be able to read this in a car park. It is not legal
advice, and it is not a contract drafted by a lawyer — it is the person who runs this telling you
honestly what it does.
This app records where you are. While you have it open, your phone sends your position
to the server every few seconds, and everyone on your team sees it on a map with your callsign
next to it.
That gets written down and kept for about a month. Positions are not
only shown live — every one is appended to a log file on the server, along with your callsign and
anything you place on the map. That file is rotated weekly and four older copies are kept, so a
position is deleted somewhere between four and five weeks after it was recorded. If you are
not comfortable with a record of where you were existing for a month, do not use this.
Using it at all means you accept these
If you do not, close the app and do not enter a key. If you have made an account, ask whoever
runs the games to delete it — there is no button for that yet, and until there is, a person does
it by hand.
What is collected
Your location, while the app is open, to roughly the accuracy your phone reports.
The callsign you type. Use whatever you like — it does not have to be your name.
A random id for your device, generated in your browser, so the server can tell one
phone from another. It is not linked to you, your phone number or any account.
Markers and drawings you place, with the position and time you placed them.
At an event: which team the host puts you on, and any squad you join.
An account. A call sign you choose, an email address, and a password. The password
is stored as a scrypt hash, which is a one-way scramble — it is not stored, cannot be read
back, and nobody running this can tell you what it is. Alongside those: when the account
was made, when the address was set, when you last signed in, and whether it is switched
off.
Your email address is stored and is NOT checked. Nothing is ever sent to it —
there is no mail software on this server at all — so nobody has confirmed that the
address is yours, and nothing in the app treats it as proof of who you are. It is there
so whoever runs the games has a way to reach you about one. If you would rather not give
a real one, ask them to make you an account instead.
A sign-in cookie, so you are not asked again for ninety days. It holds your account
id and a signature, nothing else, and your browser will not hand it to any other site.
No phone number, no contacts and no photos. The call sign on your account is
whatever you type — it does not have to be your real one, and the person who sets it up can use a
callsign. Nothing at all is collected when the app is closed.
⚠ Use a password you do not use anywhere else. That is true of every site and it is
worth saying here: this is one small server run by one person as a hobby, not a company with a
security team.
Who can see it
Your team. Anyone holding your team's key sees your live position and callsign.
At an event: your team and the host. The host can see both teams. The other team cannot
see you — the server enforces that separately from the app, and you sit in a lobby where you
can see nothing until the host puts you on a team.
Whoever runs the server can read the log file, because it is a file on their machine.
Whoever runs the games can see the list of accounts — the names, when each was made
and when each last signed in — and can add somebody, switch an account off, remove one, or
give somebody a one-time code to set a new password. They cannot see anybody's
password, and they cannot see a list of games from there: there is deliberately no such
list anywhere in this app, for anyone.
Every one of those actions is written to a separate log on the server, with who did it and
when. That log is not shown in the app and does not contain passwords or codes.
Nobody else. Nothing is sold, shared, published or handed to any third party, and there
are no adverts or analytics.
How long it is kept
Live positions are held in memory only. The server forgets a player about 15 minutes
after their phone goes quiet, and forgets a whole game after it sits unused — half a day for a
team game, about four days for an event. A restart clears every live position immediately.
Markers and drawings expire on their own, from ten minutes for a contact to an hour for
a base.
The log file is the exception, and it is the one that matters. It is append-only,
so while it exists it holds every position it was sent. It is rotated weekly and the
last four weekly copies are kept, compressed, on the same server — so the oldest thing
in it is about five weeks old, and anything older has been deleted. (There is also a 256 MB
ceiling in the app itself, which stops it writing rather than deleting anything; rotation is
what actually bounds how long your positions are kept.)
Your account is kept until somebody removes it. Ask whoever runs the games and they
can delete it — the name, the password hash and the dates all go, and nothing about it is
kept afterwards.
The sign-in cookie lasts 90 days and renews itself while you keep playing.
Signing out clears it from your phone. Changing your password ends every other sign-in you
have, everywhere, immediately — which is what to do if you lose a phone.
A one-time code for setting a new password lives for 15 minutes, in memory
only, and is destroyed when it is used, when it expires, or when the server restarts.
Copies of the account file and the game list are taken nightly and kept for two weeks on the
same server. The location log is deliberately not copied — copying it would quietly
extend how long your movements are kept, and the weekly rotation above is the promise.
What you control
Close the app and nothing more is sent. That is the complete off switch.
Press HIT and your position freezes where you were, flagged to your team, until you
press RESPAWN. Your walk back is not broadcast.
At a multi-day event, while the host has stood the day down, your phone sends nothing
at all — so you are not tracked overnight or off duty.
Ask the host to remove you from a game. ⚠ Removal is permanent for that game: you
cannot rejoin it, even with the key.
Ask whoever runs the server about the log. There is no tool to strip one person's
entries out of it, so the realistic choices are leaving it to age out on its own within about
five weeks, or deleting the whole thing sooner.
It is not a safety device
It runs on a phone battery, over mobile data, under tree cover, on a small
server with no guarantees. It will sometimes be late, sometimes wrong, and sometimes not there at
all. Do not use it as your plan for finding somebody who is hurt or lost. It is a
convenience for a game. Carry a radio, agree a rally point, and count everyone back in.
It is provided as-is, with no warranty of any kind. The person running it is not responsible for
anything that happens because it was wrong, late, or unavailable.
Fair use
Do not share a key with people the host has not agreed to.
Do not use it to track anyone who has not chosen to be on the map.
Do not attack the server, flood it, or try to reach another team's positions.
Anyone running a game can remove a player, clear the map, or delete their game entirely.
Who this is for, and age
This is a private tool for a group who know each other and for events they run. Anybody can
make an account, but an account is not access. It gets you a name and a way to sign in, and
nothing else: a map is behind a key that is handed out by the person running the game, and at an
event you see nothing at all until that person puts you on a team.
So the age rules below are still theirs to apply, because handing out the key is still
the moment somebody decides you are in — that is simply no longer the same moment as making an
account. The software performs no age check and cannot; the box on the sign-up form is something
you tell us, not something anybody verifies.
Nobody under 13 may use this. It collects location, which is personal information
about a child, and this app has no way to obtain or verify a parent's consent. If you are under
13, do not enter a key.
If you are 13 to 17, a parent or guardian must know you are using it
and must understand what it shares: your live position, continuously, with everyone else holding
that key, plus a record kept for about five weeks. Whoever gives a key to someone under 18 is
responsible for making sure that conversation actually happened.
Airsoft sites have their own minimum ages and their own rules about minors. Those come first —
nothing here permits anybody to play anywhere.
Where it runs
On a rented virtual server in the United States (Oregon), reached over an encrypted connection.
Using it means your data is handled there.
Changes
These terms change when the app does. Logins have arrived, and what an account stores is
listed above. If email is ever checked for real — which would need mail software this server does
not have — this page will say so before it happens, because an address nobody has confirmed and an
address somebody has are different things and only one of them could ever gate anything.
Questions
Ask the person who gave you the key. They run the game and the server, and they are the only
person who can change anything here.