Privacy policy

Updated 2 October 2026

SCRAM is a hide-and-seek game you play outdoors with friends, each on your own phone. To run a game it has to know where the players are, so this policy sets out exactly what SCRAM collects, who sees it, and how long we keep it. SCRAM is run by Moveera Pty Ltd, an Australian company (“we”, “us”).

What we collect, and why

Your account

Your name, username and email address. We use your email to sign you in, by sending you a one-time code, and your name and username to show you to the players in your games. Other players never see your email.

Your email choice

Whether you’ve asked for emails about new features and big updates, and when you said yes. You’re only on that list if you tick the box.

Your location, only during a round

SCRAM starts sharing your location when the host starts a round, and stops the moment it ends, or sooner if you’re tagged or leave the game. That includes while your phone is locked, because hide-and-seek happens with your phone in your pocket. On iPhone you’ll see the blue location indicator while it’s on. SCRAM doesn’t use your location outside a round.

What happens in a game

The games you join, your team, the messages you send on Radio, and who tagged whom.

Your stats

When a round you played ends, we keep a short summary of it on your account for your stats: your team, how the round ended, whether and when you were tagged, how long it lasted, and how far you moved, as your phone measured it during the round. It doesn’t include where you went.

Game alerts

If you allow notifications, your phone gives us a push token when a round starts, so we can alert you about what other players do (a tag, a runner the hunters can see) while SCRAM is closed. It’s kept with that game and deleted with it.

Your hosting purchase

If you buy hosting, the App Store or Google Play gives us a signed record of the purchase: its order number, what was bought, when, and whether it was a test purchase. We check it and use it to let your account host games. Apple or Google take the payment; we never see your card or billing details.

Sign-in secrets

Your phone makes random secrets to prove it’s you, both for your account and for each game. We store only scrambled (hashed) versions of them, and of your sign-in codes, so they can’t be used by anyone who sees our records.

Crash reports

If SCRAM crashes or hits an error, it sends us a report so we can fix it: what went wrong and where in the app’s code, the screens and buttons you’d just used, your phone’s model, system version, language and time zone, the SCRAM version, and a random ID for the app on your phone. Reports don’t include your name, email, location, Radio messages or IP address.

What we don’t collect

No contacts, photos, advertising identifiers or analytics beyond the crash reports above. We don’t track you across other apps or websites.

Who sees your information

Players in your game

They see your name. Where you are follows the game’s rules: your own team sees you live; hunters see runners only when a ping goes out, or live if a runner stays outside the play zone past the grace period; runners never see where the hunters are. Radio messages go to your team.

The services that run SCRAM

• Convex hosts the game server and stores the information above.
• Expo passes game alerts on to Apple and Google, which deliver them to your phone.
• Resend sends our emails: sign-in codes, and update emails if you asked for them.
• Sentry receives and stores crash reports.
• Apple (the App Store) and Google (Google Play) take payment when you buy hosting, under their own privacy policies.
• Apple Maps (on iPhone) and Google Maps (on Android) draw the map, loading map images for the area on screen.

They handle your information only to provide their service to us. We don’t sell or rent your information, and we don’t share it with anyone for advertising. We’d only give it to anyone else if the law required us to.

Where it’s stored

Convex, Resend, Expo and Sentry store and process information in the United States. By using SCRAM, your information will be held there, under those companies’ security and privacy terms.

How long we keep it

• Games, including every location shared in them, Radio messages, tags and push tokens: deleted automatically 7 days after the game is made.
• Sign-in codes: they work for 10 minutes and are deleted within about an hour after that.
• Your account: until you delete it.
• Your stats: until you delete your account.
• Your email choice: until you change it or delete your account.
• Your hosting purchase: until you delete your account.

Your choices

• Delete your account in the app: Settings, then Delete account. Your name, username, email, sign-ins, stats and hosting purchase record are deleted straight away. If you make a new account, you can restore hosting to it from the App Store or Google Play. Anything left in games you played goes within 7 days, as above. If you can’t open the app, ask us by email instead.
• Stop update emails in Settings, or with the unsubscribe link in any update email. Sign-in codes still come through when you ask for one, because that’s how you sign in.
• Location: turn it off in your phone’s settings at any time. SCRAM can’t play a round without it.
• Change your name or username in Settings. To see or correct anything else, email us and we’ll help.

Children

SCRAM isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child under 13 has an account, email us and we’ll delete it.

Keeping it safe

Information travels between your phone and our server encrypted. Codes and sign-in secrets are stored hashed, and only the people who run SCRAM can see our records.

Changes

If we change this policy, we’ll update the date at the top. If a change matters, we’ll tell you in the app or by email before it applies.

Contact and complaints

Email hello@scramhideandseek.com with any question or complaint about your privacy, and we’ll reply within 30 days. If you’re not happy with our answer, you can complain to the Office of the Australian Information Commissioner.