Privacy& Terms

The person responsible for your data (the “data controller” under EU law) is Konrad Kerker, operating Stone Quest from Poland. You can reach us any time through our contact page.

Under the GDPR, we have to tell you the legal basis for each thing we collect. Here it is in plain language:

Stone Quest is family-friendly, and we want children to enjoy looking up stones. But to keep things safe and lawful:

• Looking up a stone (scanning a code, reading its journey) needs no account and is open to everyone, including children.
• Creating an account requires you to be at least 16 years old, which is the age set under Polish law for giving your own consent to an online service. If you're under 16, a parent or guardian should set up and supervise the account.

We don't knowingly collect personal data from children under 16 without a guardian's involvement. If you believe a child has provided us data without that, contact us and we'll remove it.

We keep cookies to a minimum:

• Essential cookies — we use a small session cookie to keep you signed in after you click your magic link. The service can't work without it, so it doesn't require separate consent.

We do not use advertising or tracking cookies. If we ever add optional analytics, we'll ask for your consent first through a cookie banner before any non-essential cookie is set.

We use a few trusted services to run Stone Quest. Some of these companies are based outside the European Economic Area (for example, in the United States). Where that's the case, we rely on the providers' own GDPR-compliant safeguards (such as Standard Contractual Clauses) to protect your data in transit and storage.

• Supabase — our database, authentication, and file storage provider.
• Vercel — our hosting provider; your requests pass through their servers.
• Sightengine — an automated content-moderation service. To check an uploaded photo for inappropriate content (such as nudity, gore, or violence), we send them the photo. Because a photo can contain personal data such as faces, please remember that the photos you upload are also checked this way. We share no other personal data (no email, name, or location) with Sightengine.

No data is sold or shared with advertisers. Ever.

To keep the platform safe and family-friendly, uploaded photos are checked automatically before or shortly after they appear. This is an automated process. Where a check is ambiguous (for example, a painted design that might depict alcohol or a weapon), the content is held as pending and a human reviews it rather than being deleted automatically. If a decision affects you and you think it's wrong, you can ask us to review it by a person — contact us to request a review.

We keep your account data for as long as your account is active.

If you delete your account (or ask us to delete it):

• Your email and login data are erased.
• Stones you created and the journey entries you wrote may remain visible, because they're woven into journeys that other people have shared and found. Where they remain, your display name is removed or anonymised so the entries are no longer linked to you.

If you'd prefer a stone and its entries to be fully removed as well, say so in your request and we'll do our best to honour it, balancing it against the journeys of others who interacted with that stone.

If you want your data deleted, contact us and we'll respond within 30 days.

You have the right to:

• access the personal data we hold about you,
• correct inaccurate data,
• request deletion of your data,
• restrict how we process your data,
• object to processing,
• receive your data in a portable format (data portability),
• withdraw consent at any time (this won't affect anything we did before you withdrew it).

To exercise any of these rights, reach us through our contact page.

You also have the right to lodge a complaint with the supervisory authority. In Poland, that's the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) — uodo.gov.pl.

Stone Quest is a platform for tracking painted travelling stones. Anyone can look up a stone's journey — no account, no app, nothing to install. Creating stones, recording finds, and participating in the journey requires a free account.

You must be at least 16 years old to create an account. If you're under 16, please ask a parent or guardian to set up and supervise an account for you. Looking up stones is open to everyone.

When you upload a photo or write a message, you confirm that:

• you have the right to share it,
• it doesn't contain private information about other people without their consent,
• it doesn't show other people's faces — especially children's — without the consent of those people or their guardians,
• it's appropriate for a family audience.

By submitting content, you give Stone Quest permission to store and display it on the stone's public page. You keep ownership of your photos.

If a photo includes someone who didn't agree to appear, that person (or their guardian) can ask us to remove it using the “Report a problem” link on the stone's page, or through our contact page. We'll remove such content promptly.

• Nudity, sexual content, or graphic violence.
• Photos showing children's faces without the consent of their guardian.
• Personal information of others, such as full names, addresses, or phone numbers.
• Spam, offensive language, or harassment.
• Sharing or publishing a stone's code.
• Using bots, scraping, spam, or automated abuse.

All uploaded photos are automatically reviewed for inappropriate content, and we review text entries. Ambiguous cases are held for human review rather than removed automatically. We reserve the right to hide or remove any content, and to block any account that violates these terms — without prior warning. If your account is blocked, you can contact us to ask why and to request a human review of the decision.

Stone Quest is provided as-is. We don't guarantee the service will be available at all times. We are not responsible for the loss of stones, entries, or data due to technical issues.

These terms are governed by the laws of Poland and the European Union.