Privacy Policy

• We collect only what the game needs: your account, the photos you scan and your activity.
• Photos are identified by a car-recognition provider and are never used for training.
• Spotra never uses your location, and we never sell your information or show advertising.
• You control what others see, and you can delete your account at any time.

This summary is for convenience. The full text below is what applies.

Spotra is a car-spotting game available on the web and as an app for iPhone, operated from Australia. In this policy, “Spotra”, “we” and “us” refer to the operator of the service.

This policy explains what personal information we hold, why we hold it, who else handles it and the choices available to you. It is written to meet the Australian Privacy Principles under the Privacy Act 1988 (Cth).

• To provide the game: identifying cars, creating cards, building your garage and profile, ranking the leaderboards, and running the market, messages and notifications.
• To keep it fair and safe: detecting cheating, fake photos and abuse, reviewing reports, and enforcing the Terms of Use.
• To support you: answering support tickets and informing you of important changes.
• To improve Spotra: understanding which features are used and fixing what breaks.

We do not sell personal information, show advertising or build advertising profiles.

When you scan a car, the photo is sent to our car-recognition provider, Anthropic, which identifies the make, model and generation. The result is used to create your card. Photos are sent for that purpose only and, under Anthropic’s commercial terms, are never used for training.

Every scanned photo, including those that do not become a card, is also kept privately for up to 7 days so that staff can check for screenshots and fakes, and is then deleted. Photos that become cards are kept with the card.

Please keep people’s faces and other personal details out of the frame. The game only needs the car.

• Public: your username, profile, badges, the collectibles you choose to show, your garage (unless private), your leaderboard positions and anything you post in shared spaces. Some profile pages can be viewed without signing in.
• Private: a private garage, a hidden city, your email address and your password.
• Between participants: direct messages are visible only to the people in the conversation. Staff may access messages and posts when investigating a report or a breach of the Terms of Use.

We share information only with the providers that operate parts of Spotra for us, and each receives only what it needs:

• Supabase for the database, photo storage and sign-in.
• Anthropic for identifying cars in scanned photos.
• Apple for app distribution and in-app purchases.
• RevenueCat, which checks App Store purchases with Apple and tells us what was bought. It receives your account ID and your purchase history.
• Resend for sign-up and sign-in emails.
• Our hosting provider for the servers the website and app connect to.
• IP lookup services, which receive an IP address to detect VPNs and proxies.
• Apple’s music search, which receives the search when you look for a song to add to your profile.

We may also disclose information where the law requires it, or where it is necessary to protect someone’s safety.

Some of our providers store or process information outside Australia, including in the United States. We use only providers with strong security practices and contractual protections for your information.

• Sign-in: a cookie that keeps you signed in.
• Security: the random device identifier described above, which prevents a banned player from simply creating a new account.
• Preferences: small settings such as motion, how your garage is sorted and arranged, and tips you have dismissed.

We do not use advertising or cross-site tracking cookies.

Connections to Spotra are encrypted, passwords are hashed, each account can access only its own data, and staff tools are restricted to authorised accounts. No online service is perfectly secure, so please use a password you do not use anywhere else.

• Your account: kept for as long as the account exists.
• On deletion: your profile, cards, photos, messages and sign-in details are removed within minutes.
• Scan checks: up to 7 days, as described above.
• Server logs: up to 30 days.
• Security and legal records, such as a ban, are kept for as long as they are needed.

• Change or remove anything on your profile at any time from Account and Settings.
• Control visibility by making your garage private, hiding your city and blocking other players.
• Request access or correction of the information we hold about you through Support.
• Delete your account from Settings, which removes your information as described above.

If you are concerned about how your information has been handled, please contact us first; we will respond within 30 days. You may also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Spotra is for people aged 13 and over. We do not knowingly collect information from children under 13, and we delete any account we find belongs to one.

When this policy changes, the date at the top of this page is updated, and significant changes are announced in the app or on the Updates page.

For privacy questions and requests, open a ticket in Support in the app.