Veni Vidi Wiki

Privacy Policy

Effective July 15, 2026

Information we process

When you create an account, Firebase Authentication processes your email address, password or other authentication credential, account identifier, IP address, user agent, and related security signals. We store your email address, private profile name, Firebase account identifier, and account dates. Veni Vidi Wiki does not receive or store your raw password in its Firestore database.

Your device location is used while you use the app to show nearby places, identify your current region, and confirm that you are close enough to a landmark. The selected map center—often your current coordinate—is sent directly to Wikimedia to find nearby articles. A recent precise sample is also sent to our protected Firebase service for claim verification and, for U.S. regional lookup, relayed to the U.S. Census Geocoder.

For each accepted discovery, we retain the Wikipedia page identifier and title, the landmark's public high-resolution coordinates, county/state/country, the location-sample and discovery times, horizontal accuracy, and verified distance. We discard the submitted raw device coordinate after the request, but the retained record shows that your account was within the allowed distance of that landmark at that time. This is a timestamped proximity record, not a continuous background or live-location trail.

Security and diagnostic data

Firebase App Check processes App Attest assertions and short-lived tokens to verify that requests come from the genuine app. We do not retain attestation material ourselves. Firebase services may process device, operating-system, app-platform, IP, user-agent, and request diagnostic information. Our operational and abuse-prevention logs can include a pseudonymous player identifier, error details, quota reasons, and integrity metrics; they do not intentionally log raw passwords or submitted device coordinates.

Public leaderboards

Leaderboards show an automatically generated Explorer handle, a one-way pseudonymous player identifier, and aggregate discovery count for regions you join. They do not publish your raw account identifier, email address, private profile name, exact activity timestamp, or precise live location.

Why we use this information

We process it to provide account sync, nearby discovery, anti-cheat verification, regional progress, leaderboards, abuse prevention, security, and user-requested account deletion. We do not use it for cross-app tracking or targeted advertising.

Service providers

Firebase provides authentication, App Check, protected server functions, database storage, and website hosting. Apple provides maps and device location. The U.S. Census Bureau receives a recent coordinate for U.S. county/state lookup. Wikimedia receives the selected map coordinate and provides nearby article data and article pages.

Veni Vidi Wiki remains responsible for these transfers. We minimize each transfer to what the requested feature needs, review recipients' terms and published privacy/security practices, and use providers whose protections are consistent with this policy. We do not authorize recipients to use this data for advertising or cross-app tracking on our behalf. Their independent services remain subject to their own privacy terms.

Retention and deletion

Account, discovery, regional membership, and leaderboard data is kept while your account exists. A pseudonymous current-region cache is marked to expire after about 10 minutes. Three private current-region leaderboard grants retain only the verified board and catalog-release identity plus timestamps, never the submitted coordinate or coordinate hash, and expire after at most 30 minutes. Claim-integrity state expires after about 30 days; a minimal deletion tombstone after about 24 hours. The tombstone prevents an already-issued sign-in token on another device from recreating account data after deletion. Expired Firestore records may take additional time to be physically removed. Application operational/security logs are retained for up to 30 days.

You can delete your profile, discovery history, regional memberships, public leaderboard entries, and active Firebase Authentication account inside the app under Profile → Privacy & Data → Delete Account. Firebase's privacy and retention documentation states that authentication IP logs are retained for a few weeks and that deleted Authentication data can remain in its live-system and backup deletion process for up to 180 days before final removal. We do not use deletion-process copies for gameplay, advertising, or tracking.

Security and choices

We use authenticated access, Firebase App Check, server-side proximity verification, restricted database rules, and encrypted network connections. You can change location permission at any time in iOS Settings. Disabling location limits nearby discovery and verification but does not delete your account.

Children

Veni Vidi Wiki is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes and contact

Material changes will be reflected on this page with a new effective date. Questions or privacy requests can be sent to privacy@venividiwiki.app.