Privacy Policy

Effective date: September 21, 2026

Introduction

StadiumQuest (operated by Stepp Enterprises) helps sports fans plan stadium trips, check in at the stadiums they visit, and collect points, achievements, and commemorative posters along the way. This policy explains exactly what information the StadiumQuest mobile app and website collect, how it is used, and the choices you have. We wrote it to match what the app actually does — nothing more.

Information We Collect

Account information: your email address, display name, and — if you sign in with Google or Apple — the basic profile info those providers share (name, email, and profile picture). You can also use the app as a guest without providing any of this; a guest profile stores only your gameplay.
Profile details you choose to add: a profile photo, your home city (typed by you — not read from your device), sports interests, and favorite teams.
Photos you choose to upload: pictures you take or pick from your library to remember stadium visits, and an optional profile photo. Photos are re-encoded on your device before upload, which strips all embedded metadata — including any GPS tags — so no location information ever reaches our servers through a photo. Uploading photos is optional; you can complete visits without them.
Gameplay activity: your stadium check-ins, quests (including quest titles and notes you write), points, achievements, leaderboard standing, earned posters, and the optional ticket details (date, section, row, seat) you type to personalize a poster.
Purchase information — only if you buy a printed poster: the shipping name and address and the email address you enter at checkout, what you ordered (including the ticket text printed on the poster), the amount paid, and the order's status. Buying a poster is entirely optional and requires a full account. Your card details are entered on a checkout page hosted by Stripe and never reach StadiumQuest.
Crash diagnostics — only if the app crashes or hits an error: device model, OS version, app version, and the app's state at the time (see Service Providers below).

What We Do Not Collect

Location: the app has no location permission and no geolocation code. Checking in at a stadium is a manual button tap — we never read your device location, and photo location metadata is stripped before upload.
Videos or audio: the app does not record or upload either.
Contacts, calendar, or messages: never accessed.
Advertising identifiers: the app contains no advertising or analytics SDKs and does not read your device's advertising ID.
Payment card details: poster payments are handled entirely by Stripe — StadiumQuest never sees or stores your card number.
Phone number, health information, or other financial information (such as bank accounts or credit data).

What Other Users Can See

Your display name and profile photo appear on the StadiumQuest rankings/leaderboard, visible to other signed-in users. Your uploaded stadium photos are private to your account — no other user can view them. If you set your profile privacy to Private in the app, you are excluded from leaderboards entirely.

How We Use Your Information

To provide the app: accounts, check-ins, scoring, achievements, posters.
To fulfil poster orders: printing and delivering your poster, showing your order status and receipt in the app, handling refunds, and keeping the tax and accounting records the law requires.
To display leaderboards and your own progress.
To respond when you contact support.
To protect the integrity of the game (e.g., investigating score anomalies).

We do not sell your information, share it with advertisers, or send marketing messages.

Service Providers

StadiumQuest runs on Google Firebase (authentication, database, file storage, and server functions), so the data described above is processed and stored on Google Cloud infrastructure on our behalf. When you type a city name into the app's city search, that typed text is sent to Google's Geocoding service to find matching US cities — no account or device information goes with it.

The app also uses Sentry, a crash-reporting service, to help us fix bugs. If the app crashes or hits an error, technical crash data (device model, OS version, app version, and the app's state at the time of the crash) is sent to Sentry and used solely for debugging. Crash reports are not used for advertising or analytics, contain no advertising identifiers, and are not tied to your gameplay profile.

Poster purchases are processed by Stripe, our payment processor. Checkout opens in your browser on a secure Stripe-hosted page; Stripe collects your card details, email, and shipping address there and handles them under its own privacy policy. StadiumQuest receives the order details described above, but never your card number. Your shipping address is used solely to print and deliver your order; it is stored on the order record and shared with print and delivery partners only as needed to fulfil it. Printed posters currently ship to United States addresses only.

Security

All data travels over encrypted connections (TLS). Access to stored data is enforced by per-user security rules — your data is readable by your account and our administrators only. Administrative access is protected by hardware-backed two-factor authentication, and sensitive administrative actions are audit-logged.

Data Retention and Deletion

We keep your information for as long as your account exists. You can permanently delete your account at any time, directly in the app (Profile → Delete Account) or by request — see our Account Deletion page for exactly what is removed and how. Deletion is immediate and irreversible, apart from a non-identifying deletion audit record and the poster-order carve-out below.

The poster-order carve-out: if you bought a printed poster, the order record (items, the ticket text printed on the poster, amount, shipping address, email, and your internal account ID) is kept after account deletion for as long as tax, accounting, and refund obligations require. Stripe keeps its own payment records under its privacy policy.

Children

The app is not intended for use by children under the age of 16. If you are under 16, please do not use the app.

Changes to This Policy

If we make significant changes — for example, adding a new service provider or any new data collection — we will update this page and note the new effective date. The policy always describes the current, shipping behavior of the app.

Contact Us

Questions about this policy or your data: support@stadiumquest.com