EFFECTIVE SEPTEMBER 12, 2026

Golden Egg Hunt
Privacy Policy

This policy applies specifically to Golden Egg discovery, verification, ranking, identity, and public-history features operated by The Flins App Vault, LLC. It supplements the privacy policy of each participating game.

1. Scope and operator

The Flins App Vault, LLC. (“The Flins,” “we,” “us,” or “Operator”) operates the Golden Egg Hunt website, discovery service, and related leaderboards (the “Hunt”). Participating games may have separate privacy notices governing information processed inside those games or by Apple, Google, or another platform.

2. Information the Hunt processes

• Pseudonymous player and Hunt identifiers: server-issued player records, cryptographically protected device or app bindings, and Hunt-identity relationships used to associate legitimate discoveries without publishing internal identifiers.
• Discovery records: participating game and Golden Egg identifiers, app and build versions, authoritative server timestamp, overall and game-specific rank, first-finder status, verification state, idempotency data, and a nonpublic hash of gameplay-verification evidence.
• Security information: request timestamps, one-time nonce records, authentication results, abuse-prevention signals, and ordinary infrastructure logs such as IP address, browser or app information, and request metadata.
• Privacy and display choices: Public or Anonymous status and, only after affirmative consent, the provider-reported Game Center display name obtained during a fresh verified identity exchange. An unsubmitted find remains local when the player chooses not to post; it is not automatically submitted later. Existing pending server records stay out of public pages until the player explicitly chooses Public or Anonymous.
• Platform identity information: where a participating app supports verified platform linking, the service may process a scoped Apple Game Center or similar platform identifier and a short-lived verification package. Platform identifiers are used as account keys, not shown publicly, and must not be replaced by a name as proof of identity.

3. Information displayed publicly

Public Hunt pages may show the sanitized provider-reported Game Center display name only after affirmative public-display consent, or Anonymous after an explicit Anonymous choice. Pending and unposted finds are excluded. Public records may also show game title, Golden Egg title, discovery date and time, permanent ranks, first-finder status, progress count, public reference, and commemorative code. Reviewing a name alone does not publish a discovery. A failed public-name check never silently selects Anonymous. Public references and codes do not prove ownership and cannot claim, transfer, or modify a discovery.

4. How information is used

Player identifiers, the provider-reported Game Center display name, and discovery records are linked user data used for app functionality: verifying discoveries, preventing duplicate credit and replay attacks, establishing history and rankings, associating progress across participating games, honoring privacy choices, investigating abuse, maintaining security, and supporting players. Public-name consent is permission to publish the Game Center display name, not permission for advertising tracking. We do not use Hunt data for advertising, data-broker sharing, or cross-company advertising linkage.

5. Game Center and cross-game identity

The app obtains the Game Center display name only after successful authentication and sends it with fresh identity-verification material. The service verifies the signed player identity and binds the provider-reported display name to that verified session; the display name itself is not signed and is never accepted as proof of identity. The website has no finder-name entry field. Private player identifiers, signatures, salts, key locations, tokens, and cross-game correlation values are never published. A changed name can be accepted only through another fresh verified exchange.

6. Children and family use

The Hunt does not ask for a birth date, real name, email address, phone number, precise location, photograph, voice recording, or social-media account. Players should never use a real name, school, address, contact information, or other identifying material as a display name. A parent or legal guardian should supervise a child's use and make any public-name decision. If we learn that information was submitted by a child in a manner requiring parental authorization, we may anonymize or remove it and take other legally required steps.

7. Sharing and service providers

Information may be processed by hosting, database, content-delivery, security, platform-authentication, and technical-support providers only as needed to operate and protect the Hunt. We may disclose information when reasonably necessary to comply with valid legal process, enforce our terms, protect users or the service, investigate fraud or security incidents, or complete a lawful business transaction subject to appropriate safeguards.

8. Retention

Verified discovery timestamps and ranks are designed as permanent historical records. Authentication nonces and short-lived discovery sessions expire on limited schedules. Security logs follow operational and provider retention schedules. If a valid privacy request requires removal of identifying information, we may preserve a deidentified or Anonymous discovery record so that historical ranks and other players' records remain accurate, where permitted by law.

9. Security

Controls include HTTPS, bounded request parsing, game-specific authentication, cryptographic verification, one-time nonces, idempotency protections, server-issued timestamps and ranks, opaque public references, restricted privacy updates, data minimization, moderation, and dependency review. No online service can guarantee absolute security. Please report a suspected vulnerability without accessing, changing, or retaining another player's information.

10. Your choices and requests

You may choose not to post a local find, post as Anonymous, request a change from Public to Anonymous, or request access, correction, deletion, or other rights available under applicable law. Returning to the game does not remove a previously posted record; use its privacy controls or contact us to change it. We may need information sufficient to verify control of the relevant discovery or platform identity. Do not send passwords, Game Center credentials, private signing material, a child's full name, or unnecessary personal information.

11. International and regional rights

Privacy rights vary by location. Where applicable, you may have rights to know, access, correct, delete, restrict, object, or appeal. We will not unlawfully discriminate against a person for exercising an applicable privacy right.

12. Changes and contact

We may update this policy when Hunt features, participating games, service providers, or legal obligations change. Material changes will receive a revised effective date and any notice required by law. Contact theflinsappvaultllc@gmail.com with “Golden Egg Privacy” in the subject line.

Professional legal review is required before public campaign launch, particularly for children's privacy, platform identity, eligibility, prizes, promotions, charitable claims, governing law, and regional privacy obligations.