Privacy

What we never collect

No account and no sign-in. No name, no email address, no phone number, no date of birth. No contacts, no photos, no files, no microphone, no camera roll. We do not store your IP address. We do not use advertising identifiers, we do not show ads, and we do not track you across other apps or websites. There is no analytics SDK in this app.

What we do keep

• What you add to an artifact. The word, line, answer, guess, prediction, price, drawing stroke, color or relay time you contributed, and which artifact it belongs to.
• A random token. When you first open the app your device generates a random string and stores it locally. It is how the game knows you have already taken your turn on an artifact. It is not linked to you, your device identifiers, or anything else about you, and it never leaves your device except attached to the entries you make.
• Coarse location, only if you allow it. If you leave the location box ticked, your coordinates are rounded to about a mile before they are stored — enough to draw a trail between towns, never enough to find anyone. We also record the city, state or region, and country. We never store street-level coordinates or an address, and the rounding happens on our server, so unrounded coordinates are never written down. If you untick the box, the app still works; your hop simply has no place on the map.
• Your avatar and crew memberships. If you join a crew, the picture and ring color you picked, and which crews your token belongs to.
• Notification subscriptions. Only if you turn notifications on: the address your browser gives us for delivering them, plus its keys. Deleted the moment your browser tells us it is dead.
• Reports. If you report an entry, we store which entry, the reason you picked from the list, and the token that reported it.
• Basic usage counts. Artifacts created, viewed and hopped, bucketed to the hour rather than the moment, with the same coarse place information. Used to see whether the game is alive, not to build a profile.

Who else sees it

We do not sell your personal information, and we do not share it with advertisers or data brokers. Four companies necessarily handle data to make the app work:

• Vercel hosts the app. Their servers see the connection your device makes, and they derive an approximate city from it, which is what fills in the place on your hop when you have not shared location. We do not receive or store your IP address from them.
• Supabase stores the database described above.
• Anthropic checks written entries. Anything you type into a game — a word, a story line, a question, a place name — is sent to their content-safety model to decide whether it is safe to show a stranger. It is sent as text on its own, with no token, no location and nothing else about you attached.
• Esri serves the satellite imagery on the map. When you open a map, your device requests those tiles directly from them, which means they see that request the way any website you visit would.

We may publish or sell aggregate, anonymousfigures — for example how a question split by region, or what a haircut costs across different places. Never a single person’s answer, never a token, never anything from a crew artifact.

How long we keep it

Artifacts are meant to outlive the people who carried them, so entries and their coarse places are kept for as long as the artifact exists. Notification subscriptions are deleted as soon as they stop working. You can unlink yourself from everything at any time — see below.

Children

Pass Me Along is not directed at children under 13, and we do not knowingly collect personal information from them. The app has no account, asks for no personal details, and the random token described above is used only to run the game — to know whose turn has been taken — and never to contact anyone or to advertise.

If you are a parent or guardian and believe a child has contributed something you want removed, email us at the address below and we will delete it. You do not need an account or any proof of identity to ask; tell us the artifact code and roughly what was added.

Erasing yourself

You can unlink everything from your device at any time. Your entries stay on the artifacts other people built alongside you — removing them would tear holes in strangers’ chains and change journeys you do not own — but the token that connected them to you is overwritten with a value that maps to nobody and cannot be reversed, and your avatar, crew seats and notification subscriptions are deleted outright. It cannot be undone.

Contact

Steady North · hello@steadynorth.net
Questions, deletion requests, or anything about this page — that address reaches a person.