Privacy Policy
Last updated: September 16, 2026
1. Data controller
Owner: Carlos Blanco
Address: Carrer Tinent Coronel Sagués, 14, 08770 Sant Sadurní d'Anoia (Barcelona), Spain
Contact email: hola@visitastic.com
2. What data we process
- Registration data: name and email when you create an account. If you sign in with Google, it is Google that provides us with your name, your email and an identifier of your Google account; we never receive your Google password.
- Service activity: routes marked as favorites, reviews, reports of problems in a challenge and your games: which route, which challenge you are on, score and medal, app version and the distance (in metres) to the first point when you open the game.
- Geolocation: your location is used on the device to guide you during the route (radar) and is not sent to our servers: we never store your coordinates. On the web it is only used if you tap "Use my location", to center the map, and it never leaves the browser.
- Challenge photos: the photos you take in photo challenges stay on your phone. They are not uploaded to Visitastic.
- Error reports: if the app crashes, it sends a technical report (error message, trace, version and platform) so we can fix it. It is not linked to your account.
- Technical data: the session and the usual server logs (IP address, date and page requested), used for the security of the service. We use no analytics or advertising tools.
3. Purposes and legal basis
- Providing the service (account, favorites, gameplay, score and achievements): performance of a contract.
- Location to guide you: your consent, which you can withdraw from your device settings.
- Sending you service emails (confirming the account, recovering the password, security notices): performance of a contract. We send no marketing emails.
- Improving the routes and fixing bugs (problem reports, error reports and game data): legitimate interest.
4. Retention
We keep your data for as long as you keep the account. You can delete it whenever you want from the app or from "My account" on the web: the account, your favorites, your games and your reviews are erased immediately; reports of problems in a challenge are kept without an author, because they help fix the route. Error reports and server logs are kept for a limited period and are not linked to you. All of this unless a legal obligation requires us to retain some data.
5. Recipients
We do not sell your data or share it for commercial purposes. We rely on these providers, which act as processors or process data on their own behalf:
- IONOS (hosting of the server and the database), with data centres in the European Union.
- Resend (delivery of service emails). It is a US company: the transfer is covered by the EU-US Data Privacy Framework and by standard contractual clauses.
- Google, only if you choose to sign in with Google. Google processes your data under its own privacy policy.
- OpenStreetMap (map tiles on the web): when the map loads, your browser connects to their servers, which may log your IP address.
- The app stores (Google Play, App Store) when you download the app, under their own policies.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@visitastic.com. If you believe we have not handled your request, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Minors
Visitastic can be played in a group, and as a family too. Accounts must be created by adults; an adult is responsible for the use made by the minors in their care.
8. Changes to this policy
If what we do with your data changes, we will update this page and the date above. If the change is significant, we will let you know by email.