Last updated: 15 September 2026
This Privacy Policy explains how Remidus Ltd (“Remidus”, “we”, “us”) processes personal data when you use CaperQwest (the “App”) at projects.remidus.com/apca-treasurehunt.
Who we are
Remidus Ltd is a company registered in England and Wales (Company Number 15130513). Registered office: 167-169 Great Portland Street, London, England, W1W 5PF.
Contact: enquiries@remidus.com
What this App does
The App runs a live office treasure hunt for an organised event. Teams join with an event code, solve stops (text, QR, photo, or location), and a Game Master operates a control room. It is not a public social network and is not used for advertising.
Personal data we process
- Team details — team name you choose; device identifier linking one phone to that team.
- Gameplay data — answers, hint/skip flags, scores, timestamps, announcements shown to your team.
- Photos — images you submit for photo-check stops (reviewed by the Game Master).
- Location — approximate GPS coordinates from your device’s browser Geolocation API when you choose Allow on the location prompt during Allow App Access (and while a location watch runs during play). Used for location-stop map UX (your position pin, distance to the pin, walking route) and optional Game Master “last GPS” view. Location is optional: the hunt can continue if you decline or if GPS is slow; Reveal Task is not hard-blocked by distance on the server. On iPhone, use Allow (and Precise Location for this site if offered) so the in-app map pin works reliably.
- Technical / session data — session cookie contents needed to keep you joined or signed in as Game Master.
- Game Master account — login credentials configured by the organiser (not Google sign-in in this App).
Why we process it (purposes & lawful bases)
- Running the hunt — join teams, validate answers, score, show standings, store media. Lawful basis: legitimate interests (and, where you take part in a contracted/organised event, performance of that arrangement).
- Security & integrity — one-device-per-team claims, admin session protection. Lawful basis: legitimate interests.
- Map & navigation UX — showing your position and distance on location stops after you grant browser location permission. Lawful basis: legitimate interests / necessary for the map feature you use.
- Offline resilience — queueing GPS/events on your device until the network returns. Lawful basis: legitimate interests / necessary for the service you requested.
We do not sell your data or use it for marketing profiles. We do not track you outside the hunt event or build location histories for advertising.
Cookies and similar technologies
We use a small number of strictly necessary cookies and on-device storage so the App works. We do not use advertising or analytics cookies. See the Cookies Policy for the full list, including the on-device flag that remembers you completed Allow App Access, and when Google Maps previews (Game Master only) may set third-party cookies. Browser location permission is controlled by your phone/browser settings, separate from that flag.
Who we share data with
- Event organiser / Game Master — standings, photos for approval, GPS ages, and related control-room views for that event.
- Hosting infrastructure — the App runs on Remidus-operated servers serving projects.remidus.com.
- Map & font providers (technical) — when maps or fonts load, your device may request tiles/routes/fonts from third parties. On player phones this is typically OpenStreetMap map tiles and OSRM walking routes (via Leaflet), which may receive approximate start/end coordinates for a route request. Game Masters may also load a Google Maps preview embed (only after choosing to show it). Fonts may load from Google Fonts. Those providers process connection data (such as IP address) under their own terms.
- Pin parsing (Game Master) — when a Maps share link or place name is pasted in the designer, our servers may resolve coordinates via Google Maps URLs and/or OpenStreetMap Nominatim. That happens on our servers for stop setup, not as a cookie on players’ phones.
We do not share hunt data with advertisers.
International transfers
Some third-party technical services (fonts, CDNs, map tiles) may process data outside the UK/EEA. Where that happens, it is incidental to loading those resources. Prefer opening the App on the organiser’s network and granting only the permissions you need.
How long we keep data
Event data (teams, answers, photos, GPS pings) is kept for the duration of the hunt and a short period afterwards so the organiser can review results and media, then deleted or anonymised when no longer needed for that event — unless the organiser asks us to retain an archive longer for a specific event.
Your rights (UK GDPR)
Depending on the circumstances, you may have rights to access, rectify, erase, restrict, or object to processing, and to complain to the ICO. For hunt-day requests, contact the Game Master first; otherwise email enquiries@remidus.com. You can also revoke location or camera access in your browser or phone site settings at any time; clearing site data for projects.remidus.com removes the local “app access” flag and session.
Children
The App is intended for adult workplace / organised event participants. Do not use it if you are under 16 without appropriate organiser oversight.
Changes
We may update this policy when the App changes. The “Last updated” date above will change when we do.