LEYLINE Privacy Policy

Last updated: 10 July 2026. Data controller: Mode-X Digital Development, United Kingdom. This policy is written for UK GDPR and the Data Protection Act 2018, and is compatible with EU GDPR.

NOTE TO OPERATOR: review with a solicitor before launch and complete the contact and ICO registration details.

What we collect

Account data: codename, hashed password (we never store the password itself), chosen faction, account timestamps. Gameplay data: your location while the app is open and in use, actions you perform (harvest, deploy, attack, link, nominate), items, XP, level and scores. Location is the core mechanic of the game; without it the Game cannot function. Content you submit: node nominations (title, description, coordinates, optional photo URL) and expeditions. Technical data: IP address in standard server logs, device platform, app version.

We do not collect your real name, email address, contacts, or advertising identifiers in the base game. If analytics or advertising SDKs are enabled in a future version, this policy will be updated first and consent will be requested in the app (see the Analytics and Adverts document).

Why we process it (legal bases)

Performance of a contract: running the game you asked to play, including location based mechanics, scores and anti cheat. Legitimate interests: service security, fraud and cheat prevention, aggregate statistics. Consent: any future analytics or advertising, and any optional photo uploads.

Public visibility

Your codename, faction, level, and the nodes, links and fields you create are visible to other players and on the public intel map. Your live position is never shown to other players or on the intel map. Node actions reveal that a codename acted at a node's location at a point in time; choose a codename that does not identify you if this concerns you.

Retention and deletion

Action logs are kept for up to 12 months for anti cheat and statistics, then deleted or anonymised. Account data is kept while your account is active. You may request deletion of your account and personal data at any time by contacting support; deletion is completed within 30 days. Nodes created from approved nominations remain (they are world content), with the nominating account unlinked.

Sharing

We do not sell personal data. Data is stored on our own server infrastructure in the UK or EEA. Map tiles are fetched by your device directly from OpenStreetMap or Carto tile servers, which see your IP address and the tile areas requested, governed by their own policies.

Your rights

Access, rectification, erasure, restriction, portability and objection, plus the right to complain to the Information Commissioner's Office (ico.org.uk). Contact: privacy at your game domain.

Children

The Game is not directed at children under 16 and we do not knowingly process their data. Suspected underage accounts are removed.