Privacy Policy — AWOTOWA
Last updated: 2026. This is a working draft; please have it reviewed by a qualified advisor before relying on it.
AWOTOWA (“we”, “us”) operates awotowa.com, an online shop and the “Wanderer” city hunt in Bergen, Norway. This policy explains what personal data we collect, why, and your rights under the EU/EEA General Data Protection Regulation (GDPR).
Who is responsible
The data controller is AWOTOWA. For any privacy request, contact us at info@awotowa.com.
What we collect and why
- Playing the hunt (anonymous): a game session identifier, your chosen alias, language, the entry channel, and gameplay events (scans, answers, hints, timings). Legal basis: our legitimate interest in running the game. No name or email is needed to play.
- Creating an account: your email address and display alias, so we can save your progress, place you on the leaderboard, and send you your reward coupon. Legal basis: performance of the service you request.
- Signing in with Google: if you choose Google sign-in, we receive your email address and basic profile from Google to create or access your account. We do not receive your Google password.
- Shop orders: if you buy from us, WooCommerce processes your billing/shipping details and your payment is handled by our payment provider (Stripe). We do not store full card numbers.
- Marketing (optional): only if you tick the separate, unchecked consent box do we use your email to send you news and offers. Legal basis: your consent, which you can withdraw at any time.
Cookies
We use strictly necessary cookies (session, language, cache) and, for logged-in users, an authentication cookie. Analytics or marketing cookies, where used, are described here and set only with your agreement.
How long we keep it
Game sessions and events are kept while the pilot runs and for a reasonable period afterwards for aggregate statistics, then deleted or anonymised. Account and order data are kept as required for the service and by law (e.g. accounting). Marketing consent is kept with its timestamp until you withdraw it.
Who we share it with
We use trusted processors only to run the service: our host (Hostinger), WooCommerce, our payment provider (Stripe), Google (only if you use Google sign-in), and our email delivery. We do not sell your data.
Your rights
You may request access to, correction of, or deletion of your personal data, object to processing, or withdraw marketing consent. To delete your account and associated data, contact info@awotowa.com and we will action it. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Location on the map
The hunt map can use your device location only if you tap the location buttons. We do not store your location; it is used momentarily in your browser to help you, and (for the “I can’t find the QR” helper) sent once to check distance, then discarded.
Changes
We may update this policy; the date above shows the latest version.