Privacy Policy
1. Who we are
Whereabouts is made and published under the name Late Lamp by Efe Onur Özcandan, an individual established in Türkiye ("Late Lamp", "we", "us"). Late Lamp is the data controller for the data described in this policy. This policy explains what information the app handles, why, and the choices you have. If you have any question about it, write to support@latelamp.com or to the postal address in section 14.
2. What we collect
We collect as little as the game needs. Nothing below identifies you by name.
| Category | What it is | Where it lives |
|---|---|---|
| Game progress | Solved cases, current level, gold, tools, hearts, settings (sound, music, vibration, reminders), and which tutorial cards you have seen. | Only on your device. It is not uploaded. Deleting the app deletes it. |
| Usage analytics | Events such as "case started", "case solved", "tool used", "shop opened", with details like level number, board size, time on the case, and the outcome. Also app opens and closes. | Sent to our analytics provider (PostHog) together with the technical data below. |
| Session replays | A visual recording of how the game's screens look and are touched during a session, used to see where players get stuck. The game has no text entry, so replays never contain anything you type. | Sent to PostHog. |
| Technical data | A random installation identifier generated by the app, device model, operating system and version, app version, language, time zone, screen size, and your IP address. The IP address is used at the moment we receive an event to derive an approximate location (country or city) and is then discarded; it is not stored with the event. | Sent to PostHog. |
| Purchase records | Which in-app product you bought, when, and the price shown. Never your card or bank details, which only Apple or Google see. | Apple or Google, our purchase-validation provider, and PostHog. |
3. Why we collect it
- To run the game: keep your progress, remember your settings, deliver purchases you made, schedule reminders you asked for.
- To improve it: understand which cases are too hard, where tutorials fail, and which features are used.
- To test changes: some players may see a different version of a feature (an A/B test). Assignment is random and tied to the installation identifier.
Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (running the game and purchases); consent where we ask for it; and our legitimate interest in understanding how the game is played so we can fix and improve it, which is the basis for usage analytics and session replays. We balance that interest against your privacy by collecting no names or contact details, by keeping replays for a short period, and by letting you object at any time (section 9).
4. Who we share it with
We do not sell personal data. We share data only with the services that make the game work:
| Service | Purpose | Their privacy policy |
|---|---|---|
| PostHog, Inc. | Analytics, session replay, feature flags | posthog.com/privacy |
| Apple Inc. (App Store) | App distribution, in-app purchases, subscriptions | apple.com/legal/privacy |
| Google LLC (Google Play) | App distribution and in-app purchases on Android | policies.google.com/privacy |
| RevenueCat, Inc. | Validates purchases and keeps your entitlements in sync across devices | revenuecat.com/privacy |
We may also disclose data if the law requires it, or to protect the rights and safety of players and of the game.
5. Ads and tracking
This version of Whereabouts shows no ads, does not ask for tracking permission, and does not use your device's advertising identifier.
A later version may add rewarded ads: short videos you choose to watch in exchange for hearts, never between cases. If that happens we will update this policy first, and on iOS the game will ask through Apple's App Tracking Transparency prompt before the first ad.
6. Purchases
All purchases, including the Detective's Badge subscription and gold packs, are made through Apple's App Store or Google Play. They handle payment and hold your billing information; we never see it. We receive a receipt that says which product was bought so we can unlock it, and we keep it so purchases can be restored on a new device.
7. Reminders
If you allow it, the game schedules local reminders, for example when your hearts have refilled. They are created on your device and no notification server is involved. Switch them off in the game's Settings or in your phone's notification settings.
8. How long we keep data
- Game progress stays on your device until you delete the app.
- Session replays are deleted 30 days after they are recorded.
- Analytics events are kept for up to 24 months and then deleted.
- Purchase records are kept for as long as you may need to restore a purchase, and as long as tax or accounting law requires.
9. Your choices and rights
- Reminders: switch them off in the game or in your phone's settings.
- Delete local data: delete the app.
- Access, correct, delete, restrict, or object to the processing of data we hold, or ask for a copy of it. Because we do not have accounts, we may ask for details (for example the approximate installation date and device model) to locate the anonymous record for your device.
Write to support@latelamp.com to exercise any of these. If you are in the EEA or UK you also have the right to complain to your data protection authority. If you are a California resident: we do not sell or share personal information as those terms are defined by California law.
10. Children
Whereabouts is a murder-mystery game and is not directed at children under 13. We do not knowingly collect personal data from children under 13 (or under the age of digital consent where you live). If you believe a child has provided us with data, contact us and we will delete it.
11. International transfers
We are established in Türkiye, and our service providers process data in the United States and other countries. Where the GDPR or UK GDPR requires it, transfers rely on safeguards such as the EU Standard Contractual Clauses, the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement.
12. Security
Data is sent over encrypted connections, and our providers are established companies with their own security programmes. No system is perfectly secure, which is one reason we collect as little as we do.
13. Changes
We will update this policy when the game changes what it collects, for example if we add accounts or cloud saves. The effective date at the top tells you when it was last changed, and material changes will be announced in the app.
14. Contact
Late Lamp (Efe Onur Özcandan)
[POSTAL ADDRESS]
Türkiye
support@latelamp.com