Privacy Policy

Who we are

Warsong Studios operates Drop Radar, our mobile apps, website and beta program. This policy explains how we handle information when you use them. Contact support@dropradar.io about privacy or your data. The service is intended for adults aged 18 or older in the United States.

Accounts and beta applications

• Sign-in providers give us an account identifier so we can authenticate you. Discord provides your username and relevant community membership or roles; Apple may provide an email address, including a private relay address. We store provider credentials securely where needed to maintain sign-in and linked accounts. We do not receive your provider password or read your private Discord messages.
• Your app profile uses a chosen handle, avatar, optional bio, collectible interests, reputation and badges. We record your confirmation that you are 18 or older, account settings (such as the My reports filters you save, which follow your account across devices) and linked sign-in providers. Your real name is not part of your public app profile.
• Beta applications include your Discord identity and avatar, community membership, first name, US state, testing pledge, device platform, model and operating-system version. We hash the submitted browser user agent. We keep application decisions and administrative history to manage the testing program.
• Android applicants also provide the email used for Google Play. We use it to manage access to the closed test, including adding approved testers to Google Play's tester list. The email and first name are available to the applicant and authorized administrators, not on public profiles. Google processes the tester email to provide test access. App sign-in remains separate from the Google account used to install the app.

Giveaways

When you enter a Drop Radar giveaway on this website, such as the feedback giveaway, we use your Discord sign-in to find the Drop Radar account linked to it and check that you can enter. We keep your entry: your answers, any optional screenshots you add, your Discord identity, when you entered or last edited, whether you agreed we may message you on Discord about your answers, and your confirmations that you're 18 or older in the US and accept the rules. We note your app platform and version from your registered devices rather than asking. We use your feedback to improve Drop Radar, and to choose and contact the winner.

Your browser removes location and camera details from screenshots before uploading them, and we re-encode them again on our servers. Screenshots are kept private, visible only to authorized staff through short-lived links, and deleted 90 days after the giveaway closes. Entering also adds you to a list for future Drop Radar giveaways; email us to be removed. Other entrants never see your entry.

Location, stores and routes

Drop Radar needs location to work: the map is built around the stores near you, and reports and verification photos depend on where they were made. The apps ask you to allow location and turn on location services before you can use them, and explain why. Approximate location is enough to use the app. When you report from a store or take a verification photo, the app asks for precise location to check that you were at the store; if you decline, you can still send it as a tip with less influence. Location also helps plan routes and apply location-based alert preferences. During a Nav trip you start, the app keeps using your location while you drive with your maps app, shown by the trip's Live Activity or notification, to notice when you reach or leave a stop and update your arrival time; it stops when the trip ends. Otherwise the app doesn't use your location in the background.

We process the coordinates and accuracy supplied for those features, along with selected map areas, stores, route stops, trip activity and saved alert areas. An address or starting point you choose for a route may also be stored with that route or trip. The coordinates saved with a report or empty shelf check are private: we keep them with it to check and weigh it, and remove them if you delete your account. You can turn location off in your device settings at any time, but the app can't be used again until it's back on.

We never show your exact location, or the coordinates saved with your reports and checks, to other members, and there is no people-nearby feature. A report identifies the store and shows your handle unless you report anonymously, so others can infer that you visited that store. Shared routes show the information included in the route you choose to share. Opening directions sends the destination or route to your chosen maps app under its own policy. Android map display requests map resources from OpenFreeMap; those requests expose your IP address and the map area being loaded to that service.

If you choose voice dictation in Nav, your device's speech service transcribes microphone audio into editable text. Depending on your device, language and speech settings, that service may process audio on-device or with its provider under that provider's privacy policy. Drop Radar does not upload a separate voice recording. The route request text is sent when you choose to submit it. You can stop dictation or type instead.

Photos, posts and community activity

We collect reports, posts, comments, uploaded photos and videos, binder entries, suggestions, votes, follows and other actions you submit. Public content, handles, avatars, reputation and badges can be seen by others. Shared content may be copied or downloaded, including outside the app; deleting it here cannot remove copies already saved by someone else.

Verification photos are different from public social uploads. They are captured in the app and processed on your device to blur detected faces before upload. We receive the processed photo, capture time, location, accuracy and integrity evidence to check the report. Verification photos are never public. Automated verification processes them, and authorized moderators or administrators may access them to resolve disputes. Face detection is not used to identify people. If your connection is weak, the app keeps the processed photo in its private storage on your device, never in your photo library and excluded from backups, while it tries to finish sending within 15 minutes. It stops retrying once that window has passed. If your phone is offline or has paused the app, the waiting photo is removed when the app or its background task can run again. It is also deleted when you sign out or delete your account.

If you photograph a receipt for verification, we process the store, purchase date and time, and relevant products to check your report. We retain the purchase timestamp and limited results indicating whether it matches the store and reported items and represents a completed sale. We do not intentionally extract bank, card, customer, loyalty or transaction identifiers into these results. The private photo may still contain anything visible on the receipt, so keep unnecessary sensitive details out of the frame. It follows the same 7-day verification-photo retention period.

Empty shelf checks record that a collectible's shelves were empty when you looked. A photo is optional; when you add one, it is taken in the app and handled like every verification photo: faces blurred on your device, never public and deleted after 7 days. Store pages show checks anonymously, with the collectible, the time and whether a photo confirmed it, never your handle. To help check later photos at the same store, we keep a short text description of the shelf section a verified photo showed, such as “a card endcap with a red Pokémon header,” and delete each one after 90 days. These descriptions never describe people. Empty shelf check alerts are off unless you turn them on; they use the stores saved in My Stores.

Heads ups tell other members a drop might be about to happen at a store, such as a line forming or a vendor expected. They show the store, the time, your handle unless you send one anonymously, and an optional note once it has been reviewed. As with reports, we keep the location you sent it from privately to check whether you were at the store, never show it, and remove it if you delete your account. When members say they see it too or that it was a false alarm, we keep only whether they were at the store, not where they were. When you report a problem with a store, such as a store that doesn't sell a collectible, we keep the report and whether you were at the store, not your location.

Help, moderation and AI features

We collect the messages, location corrections, feedback, bug descriptions, optional screenshots and diagnostic information you send us. Help conversations and bug reports are not public; suggestions and their public comments are visible to the community. Avoid including passwords, payment details or other sensitive information in free-text fields or screenshots.

We use OpenAI services to check verification photos, reported claims and empty shelf checks, screen content for community-rule violations, interpret route requests and provide Help Center responses or check submitted store information. Relevant content, images, conversation history or route context is sent for that purpose. AI results can be wrong. Moderation reports, decisions and disputes may also be reviewed by authorized staff. Contact support if you want us to review a decision.

Device information and service operation

We process account and device identifiers, push notification tokens, app and operating-system versions, notification preferences, request information and security events to operate the service, deliver notifications, troubleshoot problems and prevent abuse. Our servers and service providers receive network information such as IP addresses when you connect. App activity such as feed views and interactions helps us personalize recommendations and operate community features.

Android uses Firebase Cloud Messaging for notifications, Google Play Integrity for supported verification checks and ML Kit for on-device face detection. These services can process installation identifiers, device and app information, integrity signals, usage events, errors and performance diagnostics. ML Kit's diagnostic collection is separate from its on-device image processing. Device permissions control camera, location and notifications. Location is required to use the app; denying camera or notification permission limits the features that need it.

Our website uses necessary cookies or similar storage for sign-in, sessions and security. The beta has no advertisements or payment collection. We do not sell personal information or use third-party advertising trackers on this site.

Who receives information

Authorized staff and service providers receive information needed for hosting, database and media storage, delivery, authentication, notifications, AI processing, security and support. These include our hosting and storage infrastructure, Cloudflare media services, OpenAI, Apple, Discord, Google services and our support email provider. Providers may operate infrastructure outside your state or country. Their own policies also govern services you use directly, such as signing in, installing a beta or opening an external maps app.

We disclose content you choose to make public or share and may disclose information when needed to respond to a valid legal requirement, protect safety or investigate abuse. We use encrypted connections and access controls to protect information, but no system can guarantee absolute security.

Retention and deletion

• Verification photos, including empty shelf check photos, expire after 7 days, private bug-report screenshots after 90 days, and giveaway screenshots 90 days after the giveaway closes. Scheduled cleanup removes expired files; a failed storage deletion is retried. Structured report and check outcomes, including the short shelf descriptions described above (deleted after 90 days), can remain after a photo expires.
• Ended Nav trips are scheduled for deletion after 30 days. Saved routes remain until you delete them or your account. You can also clear completed trip history in the app.
• Account and community information is generally kept while it is used to provide the service, until you remove the content or request account deletion. Beta applications are separate from app accounts. Withdrawing a pending or waitlisted application changes its status; it does not erase the application record. Deleting your app account deletes an application linked to it; otherwise, contact support to request its deletion.
• Account deletion removes sign-in identities, scrubs your profile, ends sessions and removes associated social content, preferences, routes and other personal account data, including a beta application linked to the account, giveaway entries and your place on the future-giveaways list. Uploaded media is marked for deletion and its stored files are removed by scheduled cleanup. If the account was banned, suspended or limited, we keep a one-way fingerprint of each sign-in identity, with no other account data, so that deleting the account doesn't lift the restriction.
• Some community contributions remain with the author removed or replaced by a deleted-user record, including report evidence and suggestions that others relied on. Security, audit and moderation records may remain to protect the service and preserve decision history. There is no fixed automatic expiry for those retained records. We can review a request to remove personal information that you included in a retained contribution.

See Delete your account and data for the in-app deletion option and a way to request deletion without reinstalling the app. Deleting your app account does not delete your Apple, Discord or Google account.

Your choices and privacy requests

You can edit your profile, remove supported content, adjust alerts, disable permissions and delete your account. Email support@dropradar.io to request access to, correction of or deletion of personal information, including beta records. We may need to verify ownership before acting on a request. We do not knowingly offer the service to children; contact us if you believe a child has provided personal information.

Policy updates

We will update this page when our practices change and revise the date above. Material changes may also be communicated through the app or website. New features may include additional explanations or choices when you use them.