Privacy Notice

This Privacy Notice describes how Crystal Roden, operating Exploration Navigation (the "Service"), collects, uses, and shares your personal information. Crystal Roden is the data controller for the personal data described below.

1. Information we collect

• Account information: name, email address, and credentials when you create an account or purchase a hunt.
• Order information: the hunts you purchase and the date of purchase. Payment card details are collected and processed by Paddle and are never stored on our servers.
• Hunt activity: session progress, photos and captions you choose to upload at hunt stops, and approximate location coordinates when you tag a stop.
• Support communications: messages you send us when you ask for help.
• Technical data: IP address, device type, browser, and basic usage telemetry needed to operate and secure the Service.

2. How we use information

• To provide, maintain, and improve the Service.
• To deliver the hunts you have purchased and record your progress.
• To process payments through Paddle and fulfill our contract with you.
• To respond to your support requests.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with our legal obligations.

3. Legal bases (UK/EEA users)

Where the UK GDPR or EU GDPR applies, our legal bases for processing are: performance of a contract (delivering hunts you purchase), legitimate interests (security, service improvement, support), legal obligation (tax, accounting), and consent (where required, e.g. non-essential cookies).

4. How we share information

We share personal data with:

• Paddle, our Merchant of Record, to process payments, subscriptions (where applicable), tax compliance, and invoicing;
• Service providers and subprocessors who help us operate the Service (cloud hosting, database, analytics, error monitoring, email delivery);
• Professional advisers such as legal and accounting professionals where required;
• Authorities where required by law or to protect rights and safety.

We do not sell your personal information.

5. International transfers

Our infrastructure and some service providers are located in the United States. Where personal data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We retain personal data for as long as needed to provide the Service and to meet our legal, tax, and accounting obligations, then we delete or anonymize it.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. UK and EEA users also have the right to lodge a complaint with their local supervisory authority. To exercise any of these rights, contact us at Support@explorationnavigation.com. We aim to respond within one month.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege practices — to protect your personal data. No system is completely secure; please use a strong password and notify us promptly if you suspect unauthorized access.

9. Cookies

We use cookies and similar technologies that are essential to operating the Service (for example, keeping you signed in). We may also use limited analytics to understand aggregate usage. You can manage cookies through your browser settings.

10. Changes to this notice

We may update this Privacy Notice from time to time. The "Last updated" date above indicates the most recent revision.

11. Contact

For privacy questions or requests, contact Support@explorationnavigation.com.