Poop Passport

Privacy Policy

Last updated: 23 September 2026

Who we are

Poop Passport is a light-hearted mobile game in which players check in at public toilets, claim them as "thrones" and compete with friends. This policy explains what information the app collects and how it is used.

Information we collect

Account information. Email address, password (stored hashed by our auth provider), or your Google account email and name if you use Google sign-in. Royal name, avatar and profile preferences. Email verification is required before you can play.
Precise and approximate location. Collected only while you use the app, to find nearby thrones and to verify a claim at a real place. The coordinates of each claim are stored with that claim. We never collect background location, and other players never see your live location.
Photos. When you verify a claim, the photo is sent to Google's Gemini AI model (through our AI provider) to check it shows a restroom or outdoor scene. It is analysed in memory and is never stored by us.
User content. Comments, ratings, poll votes, throne names and reports you file.
Gameplay and in-app activity. Claims, visits, streaks, badges, drops, coins, missions, friends, rivalries, blocks and in-app analytics events.
Purchase history. For Google Play purchases we receive the product, order ID, purchase time and a purchase token. Card and payment details are handled by Google only.
Device identifiers. A push notification token (Firebase Cloud Messaging on Android or a web push subscription) if you enable notifications. On Android, Google AdMob collects the advertising ID.
Diagnostics. Error logs and basic technical information (app version, browser/device type, IP address in server logs) to run the service and prevent cheating.

Third-party services

Google AdMob (Android only): advertising ID, IP address, device information and ad interactions, to show, measure and prevent fraud in ads. Consent is requested through Google's consent form where required. Buying "Remove ads" stops interstitial ads.
Firebase Cloud Messaging (Google): push token and notification content.
OpenStreetMap: map tiles are loaded from OpenStreetMap servers (which see your IP address and the map area viewed), and claim coordinates are sent to OpenStreetMap Nominatim to look up the suburb and country name.
Google Maps Platform: approximate coordinates may be sent to find public places for the Daily Mystery Hunt.
Google Gemini (via our AI provider): claim verification photos, not stored.
Google Play Billing: processes purchases; we verify them with Google.
Cloud hosting and database: stores your account and gameplay data, encrypted in transit (HTTPS) and protected by access controls.
Email delivery provider: sends verification and password-reset emails.

How we use your information

To create and secure your account and verify your email address.
To run the game: verify claims, award experience, coins, badges and drops.
To prevent cheating, spam and abuse, and to review reported content.
To send the notifications you have switched on.
To show and measure advertising, where you have consented.

Sharing

We do not sell your personal information. Data is processed only by the service providers above. Other players can see your royal name, avatar, level, public achievements, comments and the thrones you rule.

Reporting and blocking

You can report players, comments and throne names, and block players, from their profile or the content itself. Reports are reviewed by our moderators.

Children

Poop Passport is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from them.

Your choices

Turn location, notifications and ad personalisation on or off at any time.
Request a copy of your data by emailing us.
Withdraw consent for advertising in the app's privacy settings.

Deleting your account

Delete your account and associated data at any time — in the app under Settings, or from any browser (even after uninstalling) at pooppassport.fun/delete-account. Self-service deletion is immediate; email requests to support@pooppassport.fun are completed within 30 days. We keep anonymised Google Play purchase records (order ID, product, date) for up to 7 years for tax and fraud obligations, thrones you discovered remain as public places without your name, and backups are purged within 30 days.

Security and retention

Data is encrypted in transit and stored on managed cloud infrastructure with access controls and row-level security. We keep information while your account is active and delete it as described above when you delete your account.

Changes

We will update this page when the app changes and adjust the date above. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: support@pooppassport.fun