Privacy Policy

Flagchase is a digital orienteering app operated by Eksire (“we”, “us”). This Privacy Policy describes what personal data we collect when you use Flagchase, why we collect it, and the choices you have. For any privacy-related questions, contact us at rorvik.asbjorn@gmail.com.

• Account information. When you sign in with Apple or Google Sign-In, we receive your name and email address (or a private relay address if you choose to hide your email).
• Location data. While you are actively running a route, we collect your GPS position and accuracy. This is used to verify checkpoint scans and classify the validity of your run. We do not track your location when you are not running.
• Run results. Your completed runs, split times, and finishing times for each route.
• Device information. Basic technical information about your device (such as model, operating system version, and app version) used for diagnostics and compatibility.

• Displaying leaderboards and your personal results to you and other users.
• Suggesting routes near you and improving route discovery.
• Operating, securing, and improving the service, including fraud and cheating prevention.

Flagchase runs on Encore Cloud infrastructure. We store data within the European Union where possible, and apply appropriate safeguards for any transfers outside the EU/EEA.

We do not sell your personal data. We share data only with service providers necessary to operate Flagchase: map tiles are loaded from OpenStreetMap and MapAnt tile providers, which may receive your IP address and the map area you view as part of serving tiles. We may also disclose data where required by law.

You can optionally connect your Strava account to Flagchase. When connected, you can upload completed runs (including the GPS track, time, and route name) to Strava as activities on your behalf. To do this, we store the OAuth access and refresh tokens Strava issues us, along with basic Strava profile details (your athlete ID, name, and profile picture) used to show which account is connected. We do not read your other Strava activities or data. Disconnecting Strava in the app revokes our access with Strava and deletes the stored tokens and connection details. Strava’s own handling of your data is governed by Strava’s privacy policy.

If you enable push notifications, we use Firebase Cloud Messaging (a Google service) to deliver them. This involves storing a device push token, which Google processes to route notifications to your device. You can disable notifications at any time in your device settings.

The Flagchase app does not use third-party analytics SDKs. Firebase is used solely for push notification delivery. This website does not use tracking cookies or analytics.

You can delete your account and associated data at any time directly in the app under Profile → Delete Account, or by emailing us at rorvik.asbjorn@gmail.com.

If you are in the EU/EEA, you have the right to access, rectify, erase, and port your personal data, to restrict or object to its processing, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at rorvik.asbjorn@gmail.com.

We may update this Privacy Policy from time to time. Material changes will be announced in the app. This version is effective as of June 11, 2026.