The short version
- Location is collected only while you're in a lobby or an active game, never in between.
- It's used to run the game and is deleted 7 days after the game ends, along with the game's chat and replay.
- Other players see your position only as the game rules allow. Targets, for example, see hunters only briefly, with the Radar item.
- No ads, no tracking, no data brokers. We don't sell or rent your data, and we don't use advertising or analytics services. On Android, Google's map and QR code scanner components send Google some device and usage data (see Who sees your data).
- You can play as a guest, with no email or password, and delete your account in the app any time.
Manhunt (formerly Assassin) and its website, at manhunt.wtf and assassin.wtf, are run by Zinance Inc., a corporation organized under the laws of Ontario, Canada ("we", "us"), the controller of the personal information described here. Questions go to admin@zinance.app.
What we collect and why
| Data | Why we need it |
|---|---|
| Account: a random account ID, your display name, your profile photo (optional), and the date you confirmed you're 13 or older | So other players know who they're playing with, and to meet the age requirement. |
| Sign in with Apple (optional, iPhone only): your Apple user ID and the email Apple shares with us, which can be a private relay address | To keep your stats when you switch phones, and to revoke the link if you delete your account. |
| Device: an app-specific device identifier (a random ID created when you install the app) and your app version, and on iPhone also your push notification token and iOS version | To keep you signed in, enforce bans and know when an update is required, and on iPhone to deliver tag claims and Live Activity updates. |
| Precise location, only during a lobby or an active game | To run the game: pings, the zone, the danger meter, crates, tag checks, cheat detection and the replay. |
| Game data: games you joined, your role, tags, coins, crates and time survived, tag claims and how they resolved, and each game's name, zone and settings | For results, awards, your game history and rematches. |
| Chat and callouts inside a game | So teams can talk. Names and messages are filtered for profanity. |
| Reports and blocks, including any chat excerpt attached to a report | To keep players safe and act on abuse. |
| Crash and hang reports from iOS, with your app and iOS version. The Android app doesn't send us crash reports. | To find and fix bugs. They don't contain your location. |
| Emails you send us | To answer you. |
We don't collect your contacts, your photo library (beyond the photo you pick for your avatar), your microphone, an advertising identifier, or browsing activity. Your selfie is resized and stripped of its location metadata on your phone before it's uploaded.
If you're in the EEA or the UK: we process account, game and location data to provide the game you asked for (contract), crash reports, reports and cheat checks for our legitimate interest in a safe, working game, and location, notifications and photos only after you allow them on your phone (consent, which you can withdraw in your phone's settings).
Your location
- Manhunt asks for location only while you use the app (While Using the App on iPhone, While using the app on Android), never Always or all the time. While you're in a lobby or a game it keeps updating, so the game works with your phone in your pocket: on iPhone the blue location indicator shows, and on Android an ongoing notification shows, with a Leave button.
- Location tracking stops completely when you're not in a lobby or an active game.
- When you host, the app uses your position on your phone to center the zone, and the zone's center to suggest a name for the game. Only the zone you save is sent to us. The suggestion comes from Apple Maps on iPhone, and on Android from your phone's location service, which on most Android phones is run by Google.
- Positions go to our game server, which decides who may see them. Hunters see targets at each ping, a target's last known spot if their phone goes quiet, and live when a target leaves the zone, when a hunter uses an item that tracks them, or when the host turns on live pings. Teammates can see each other live, targets see hunters only briefly through the Radar item, and a referee sees everyone. Your phone only ever receives what your role is allowed to see.
- After the game, everyone who played in it can watch a replay of every player's path, and can share a picture of the game's paths on the map, without player names.
- To keep games fair, the server rejects simulated locations and flags speeds or jumps that look like a vehicle or a spoofed GPS to the host.
- Location is kept in the game's server storage and in its replay file, and deleted 7 days after the game ends. The game record keeps the zone the host drew (an area on the map, not anyone's position) with the results.
- You can turn location off in your phone's settings at any time. You can't join a game without it.
Who sees your data
- Players in your games see your display name, photo, role, game stats and chat, and your location as described above. They never see your account ID, your Apple email or anything about your device.
- Service providers who run parts of Manhunt for us: Cloudflare (servers, database, file storage and report emails) and, on iPhone, Apple (Sign in with Apple and push notifications). They process data only to provide those services.
- Google, through parts of the Android app. The map is drawn by Google's Maps SDK, and Scan a QR code uses Google's code scanner. They send Google information such as your phone model and Android version, app and SDK versions, an SDK identifier, your IP address, the map areas you view, crash data from Google's code, and scanner performance data. Google uses it to provide and improve its services, under the Google Privacy Policy. The scanner reads the camera on your phone and returns only the code to the app. Your phone's location comes from Google Play services. We don't send Google your name, photo, chat or game data.
- When the law requires it, or when it's necessary to protect someone's safety, we may share the minimum needed with the authorities.
We don't sell or rent your data or share it for advertising. Apart from the players in your games, our service providers, Google as described above, and when the law requires it, nobody else gets it.
How long we keep it
- Location, chat and replays: deleted 7 days after each game ends.
- Account and game history: until you delete your account.
- After you delete your account: your name, photo, blocks, Apple sign-in and devices are removed, and you're signed out everywhere. Other players' results from games you played keep the numbers and show you as "Deleted player". Your random account ID stays with those results, and your app-specific device ID stays with your old sign-in records, to enforce bans.
- Reports and bans: as long as needed to protect players, including a minimal record that stops a banned player from coming back.
- Crash reports and support emails: as long as they're useful for fixing the problem, then deleted.
- Data Google's components collect on Android: kept by Google under its own policies.
Your choices and rights
- Change your name or photo in Profile.
- Turn off location or notifications in your phone's settings, and Live Activities on iPhone. On Android, the ongoing notification's Leave button lets you leave the game, which stops location.
- Delete your account in the app: Profile › Delete account. More on deleting your account.
- Ask us for a copy of your data, a correction or deletion, or object to how we use it, at admin@zinance.app. We'll answer within 30 days (45 days for requests under US state privacy laws), and we may ask a question or two to confirm it's your account. Depending on where you live, you may also complain to your local data protection authority.
This website
This website sets no cookies and runs no ads or trackers. We may use Cloudflare Web Analytics, which counts page views without cookies or fingerprinting. Cloudflare, our host, processes your IP address to deliver and protect the site. When you open an invite link, the page fetches that game's public preview (its name, host name and photo, and player count) to show you what you're joining.
Children
Manhunt is for people 13 and older, and the app asks before you can play. It isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child under 13 is using Manhunt, email admin@zinance.app and we'll delete the account.
Security
All traffic is encrypted in transit. Sign-in tokens are stored in the iPhone Keychain, or on Android encrypted with a key kept in the Android Keystore, and the server stores only hashed versions of long-lived tokens. Profile photos are stored under unguessable names. No system is perfect, but we keep what we collect small, and delete it on schedule.
We're based in Canada, and our servers run on Cloudflare's global network, so your data may be processed in Canada, the US or elsewhere outside your country, with the protections required by law.
Changes and contact
If we change this policy we'll update the date at the top, and tell you in the app before any change that affects how your location is used. Questions or requests: admin@zinance.app. If you need a postal address, email us and we'll provide one.
