We never see your home
This game asks to scan the inside of a room you live in. That is a serious thing to ask, so here is exactly what happens to it — not a summary of a policy, but the actual behaviour of the software.
The scan stays on the phone. A floor plan of boxes leaves it.
What the server receives: a list of walls and objects, each with a size and a position; the outline of the floor as a polygon; and how high the floor sat. About ten kilobytes — smaller than a photograph, and it is not one.
What the server never receives:
- Camera frames. No image from your camera is uploaded, at any point, for any reason.
- The LiDAR mesh. The detailed 3D surface your phone builds while scanning stays on the phone and is never transmitted.
- The spatial map. The data that lets a phone recognise a place again — an
ARWorldMap— never leaves the device. When two players share a room, their phones send it to each other directly over your own Wi-Fi, not through us. - Anything that identifies you. The room upload carries no name, no account, no address and no location.
Because a promise nothing enforces is not a promise
This is not a policy sitting on top of a system that could do otherwise. The game was designed around it: the server holds boxes because boxes are all it was ever given, and the parts of it that would need a picture of your room were built not to need one.
A test fails the build if a camera frame, a mesh or a spatial map ever appears in an outbound request. The claim is worth exactly what enforces it, and this is what enforces it.
It has a cost, and it is worth naming: because we will not act as a courier for spatial maps, players sharing a room hand them to each other directly, and co-op therefore only works when everyone is on the same local network. We accepted that rather than the alternative.
The room registry
A room you upload is kept so that the arena can be rebuilt without rescanning, and — if you agree to it separately — so that it can be used to test that the game works in rooms of different shapes.
- You can have it deleted. Ask, and the room and everything derived from it goes. There is one identifier for a room and deleting it is one operation.
- It is boxes. A deleted room was never a picture of anything, which is the point of all of the above.
- Retention period: to be decided (Lane J). This page will state a number, not a phrase like "as long as necessary". It does not state one yet because one has not been agreed, and inventing it here would make this page the source of a promise nothing else knows about.
- Contact for a deletion request: to be decided (Lane J). In the meantime: hello@bitquid.com.
No analytics, no cookies, no third parties
- This site sets no cookies and runs no analytics. There is nothing here to consent to, which is why there is no banner asking you to.
- Every font, stylesheet and image is served from this domain. No content delivery network, no font service, no embedded video, no tracking pixel. Loading this page tells nobody but us that you loaded it.
- The web server keeps ordinary request logs so that outages can be diagnosed. They are not used to build a profile of anybody and they are not shared.