Privacy Policy

Last updated: July 29, 2026

Introduction

Teleport: Spot (“Spot,” “we,” “our,” or “us”) is a 360° observation game by Teleport. This policy explains what we collect, how we use it, who processes it on our behalf, and how to get it deleted. It covers the Spot app and the services at spot.teleport.eco and spot-api.teleport.eco.

What we collect

• Without an account: nothing personal. Game progress stays on your device.
• With an account: your email, username, optional display name and avatar, game progress, scores, friends, and rooms you choose to back up.
• Location (optional): used only to find nearby playable venues and geotag rooms you capture, with your permission.
• Content you upload: 360° captures and their panoramas, placed objects, stickers you cut out, item tags, room names, kept reaction clips, comments, ratings, and feedback you send us.
• Gameplay and diagnostics: which rooms were played, round results, achievements, and basic in-app events, plus standard server logs (IP address, device and app version, request time) used to run and secure the service.
• Push tokens (optional): if you enable notifications, an Apple push token and your notification preferences, so we can send friend, duel, and creator alerts.

What stays on your device

• Reaction clips and reveal photos stay on your device unless you act: sharing exports a copy, and — when you’re signed in — keeping a clip posts a watermarked copy to the public Spot Clips feed (you can delete it any time from My Clips).
• Rooms you capture stay local unless you sign in and back them up.
• Your contacts are never uploaded; the contact picker only prefills an invite message you send.
• Camera and AR sensor data is processed on device. Item detection and sticker cutouts run locally; only the results you save are uploaded.

How we use your information

• Provide, operate, and maintain the game and its online features.
• Store and serve the rooms, objects, tags, and clips you back up or publish.
• Run leaderboards, friends, duels, multiplayer matches, achievements, and the Passport.
• Send the notifications you opted into.
• Improve gameplay and fix problems, using aggregate play and difficulty data.
• Operate, debug, secure, and improve Spot internally — including testing renderers, tuning difficulty, and improving item detection and face blurring. Anything we publish from this work is aggregated or de-identified.
• Promote Spot using content you made public — public rooms, kept clips, and your public profile name and avatar — in screenshots, trailers, store listings, social posts, and press. Private and friends-only content is never used this way. See Terms of Service § 5.
• Detect and prevent cheating, abuse, and fraud, and enforce our terms.

Faces and shared spaces

Panoramas pass automatic face blurring before display. Publish only spaces you own or have permission to share. Automatic blurring is a safeguard, not a guarantee — review a room before you make it public, and report anything that shouldn’t be there.

Who else processes your data

We don’t sell your data. We share it only with the service providers that run Spot for us, and where the law requires it:

• Apple — Sign in with Apple, App Store in-app purchases, and push notification delivery (APNs).
• Google — Google Sign-In, if you use it.
• Amazon Web Services (S3) — storage and delivery of captures, panoramas, objects, and clips.
• Neon (PostgreSQL) — database hosting for accounts, progress, and content records.
• Vercel — hosting for the Spot API and website.
• Upstash — rate limiting and short-lived operational caching.
• Resend — delivery of feedback and support email you send us.

Content you publish — public rooms, venue rooms, clips, comments, and your public profile — is visible to other players by design. You choose each room’s audience (private, friends, or public) and can change it or delete the room at any time.

What we don’t do

We don’t sell your data, run third-party ads, or use tracking across other companies’ apps. Spot does not ask for the App Tracking Transparency permission because it does not track you across apps or websites.

Security

We use industry-standard measures to protect your data:

• Encrypted transmission over HTTPS/TLS.
• Hashed passwords — we never store them in plain text.
• Signed, expiring session tokens, revocable by signing out or deleting your account.
• Presigned, time-limited upload and download URLs for stored files.
• Server-side authorization checks on every request that reads or writes your content.

No system is perfectly secure, so we can’t guarantee absolute security — but we do keep the surface small and review it as the app changes.

Your rights

Depending on where you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data — most of it is editable in the app under Profile.
• Request deletion of your data.
• Object to or restrict certain processing.
• Opt out of notifications, at any time, in Settings.
• Delete your account and its server-side data.

To exercise a right we can’t handle in the app, email privacy@teleport.eco.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect and why, to request a copy of it, to correct it, to request its deletion, and to opt out of its sale or sharing. You may not be discriminated against for exercising any of these rights — we do not offer a different level of service or price based on them.

We do not sell or share your personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioral advertising, so there is no opt-out to make. The categories we collect are listed under “What we collect” above; we collect them from you and from your device, use them for the purposes listed under “How we use your information,” and disclose them only to the service providers named above. To make a request — yours or one submitted by an authorized agent on your behalf — email privacy@teleport.eco. We will verify it against your account before acting on it.

Deletion and retention

Delete your account any time from Profile → Account → Delete account; this permanently removes your account and its server-side data. On-device progress stays on your device. Deleting a clip or room from the app removes it from public feeds immediately.

We keep account data while your account is active. After deletion we remove personal data and content within 30 days, except where we must retain it by law or to resolve a dispute, and except for anonymized, non-identifying gameplay statistics that no longer point to you. Operational logs and analytics events are retained on a short rolling window.

Children’s privacy

Spot is not intended for children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has given us personal information, we will delete it. If you believe a child has created an account, contact us and we will remove it.

International data transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We use appropriate safeguards to protect it in line with this policy wherever it is processed.

Cookies

The Spot app does not use cookies. On spot.teleport.eco we use only essential cookies for session handling — no third-party advertising or cross-site tracking cookies. You can control cookies in your browser settings.

Changes to this policy

We may update this policy. Material changes will be highlighted in the app or on this page, and the “Last updated” date above will change. Continued use after an update means you accept it.

Contact

Privacy questions? See Contact Us, or email privacy@teleport.eco. Our Terms of Service govern your use of Spot.