Privacy

Who we are

HNTED (a trading name), Melbourne, Victoria ("HNTED", "we"). Questions or requests: hnted.contact@gmail.com.

What we collect

• Visiting the site: nothing that identifies you. We do not ask for your location, use analytics, or use advertising trackers.
• Keys and objects: when you claim a key or register an object, the initials you enter are shown publicly on the record. A random device code (for example AFR-9979) is kept with the claim so the record can tell claims apart. It is not linked to your name.
• The market: your shard code and the amounts it bid. No name.
• Problem reports: if you use "Report a problem", we keep your message with your shard code, the screen you were on, and your phone or browser type and screen size - to find and fix the fault. No name or email. To stop a flood of reports, the address your connection comes from is kept for up to 24 hours and is not linked to the report.
• Payment: your card details and email go to Stripe, our payment provider, through Stripe's own form. We never see or store your card number. Your email is used only for your receipt and is held by Stripe, not in our own records.

What stays on your phone

The site stores a few small items in your browser: the device code above, which transmissions you have seen, when you last visited, and - if you bid - your shard code, so you can check it without typing. "Forget this shard" removes the code; clearing your browser's site data removes everything. None of this is sent anywhere except the device code with a claim, and the shard code when you check or bid.

Who else handles it

• Stripe - card payments and receipts (stripe.com/au/privacy).
• Supabase - stores the record: keys, shards, bids, objects.
• Netlify - hosts the site.
• Google Fonts and jsDelivr - supply the typefaces and the 3D viewer, so your browser contacts them when a page loads.

These services may store data outside Australia. We do not sell or share your information with anyone else.

How long we keep it

• When a market finishes, saved cards and Stripe records are removed for everyone who did not buy. Buyers' records stay with Stripe for receipts, refunds and disputes, without the saved card.
• Bid amounts are kept in a permanent record so the result can always be checked. Live bid amounts are shown in the market without the shard that bid them; sealed bids are never shown.
• Claims stay on the object record - that record is the point of it.

Security

We keep as little as possible, so there is little to lose. Card details never reach our systems. No system is perfectly secure; if a breach is likely to cause serious harm, we will tell the people affected.

Young people

Anyone can take part in the hunt. If you are under 18, only use a card with the cardholder's permission. A parent or guardian can ask us to remove a young person's information.

Your choices

You can ask what we hold about you, ask us to correct it, or ask us to remove anything that does not need to stay on the record. Email hnted.contact@gmail.com.

Complaints

If you are unhappy with how we have handled your information, email hnted.contact@gmail.com. If our reply does not resolve it, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If this policy changes, the new version is posted here with a new date.