Privacy notice

Effective 23 September 2026 · Last updated 23 September 2026

Thank you for choosing to play Brismania, made by Deverence Group B.V. ("Brismania", "we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This notice explains, as clearly as we can, what information we collect when you use the Brismania app, the websites brismania.nl, brismania.be and brismania.de, and the servers behind them (together, the "Services"), what we use it for and what rights you have. If you have any questions, write to us at privacy@brismania.nl.

Contents

1. What information do we collect?
2. How is my location used?
3. How do we use your information?
4. Will your information be shared with anyone?
5. Is your information transferred internationally?
6. How long do we keep your information?
7. How do we keep your information safe?
8. Do we collect information from children?
9. What are your privacy rights?
10. Controls for do-not-track features
11. Do California residents have specific privacy rights?
12. Do we make updates to this notice?
13. How can you contact us about this notice?

1. What Information Do We Collect?

In short: an email address and a player name for your account, your location while you play, your game progress, and a short technical log only if you choose to send it.

Your account

Brismania has no passwords. To sign in you enter your email address and we email you a one-time code; entering the code signs you in. We also store the player name you choose. We do not ask for your real name, your phone number, your date of birth or your contacts. After you sign in, a session token is kept in your device's secure keychain so you stay signed in.

Your location

With your permission, the app reads your device's location while the map is open and sends it to our servers as you walk. Section 2 explains exactly how, because in a walking game it is the most important thing we handle.

Your game

We store what makes up your game: the Brissies you have caught and their levels, experience and statistics, your backpack, badges, catch streak, battle, training and duel results, the beacons you hold, the Brissie you have chosen to fight for you, and a running total of the distance you have walked in the game (for the Wanderer badge). This is game data; it describes your play, not you.

Notifications, if you allow them

If you allow notifications, Apple gives the app a device token so we can tell you when an explorer nearby challenges you to a duel. We store that token with your account, together with whether it belongs to Apple's test or live service, and use it for nothing else. Turn notifications off and the app asks us to forget the token. Reminders about your catch streak are scheduled on your phone itself and never reach us.

Diagnostic logs you choose to send

The app keeps a technical log on your own device so that, when something goes wrong, you can send it to us. It leaves your phone only when you press send in the app's diagnostics screen. A log describes what the app did: errors, timings, the app and iOS version and performance measurements. Coordinates are rounded to about a kilometre before they are ever written to it, which is enough to tell one town from another and not enough to find a street. A sent log carries your player name so we can reply, and it is delivered to our own support channel, which runs on mss.gs, another service of Deverence Group B.V., in the EU.

Downloads and ordinary server logs

The app downloads map data and creatures from our servers when it needs them. Like every web server, ours record requests, including the IP address and the time, so we can keep the service running and investigate abuse and faults. These operational logs are short-lived and are not used to build a picture of you.

What we do not collect

The app contains no advertising, no third-party analytics and no third-party tracking code. It does not access your photos, contacts, microphone, camera, health data or motion data, and it does not track you across other companies' apps or websites. The website sets no cookies and runs no scripts.

2. How Is My Location Used?

In short: to put you in the game world, and for nothing else. Only while the map is open, never visible to other players, never sold.

• Only while you play. Brismania asks iOS for "While Using the App" permission only. It does not read your location in the background, and you can change or withdraw the permission at any time in your device's Settings.
• What is sent. While the map is open, your position is sent to our servers every few metres of walking. The server keeps your most recent accepted position with your account.
• Why. The server uses your position to show you the world around you, to place wild Brissies, beacons and rewards near you, to check that you are within reach of what you fight or collect, to find explorers near you and duel partners, and to spot movement that no walker could make, which is how we keep the game fair.
• What other players see. Only once you have chosen a Brissie to fight with, explorers within about 250 metres who have played in the last few minutes can see your player name, that Brissie and its level, placed on a grid of roughly a hundred metres. They never see your exact position, and we do not tell them how far away you are. When you stop playing, you drop off their map within minutes.
• Without GPS. If you do not share your location, you can type a place instead. The name you type is turned into coordinates by Apple's location service on your device, under Apple's privacy policy. The server can also make a coarse guess from your network address, at the level of a town, to give you somewhere to start.
• What we never do. We do not sell your location, share it with advertisers or data brokers, or use it to build a profile of your movements, your home or your routines.

3. How Do We Use Your Information?

In short: to run the game, to keep it fair and safe, to fix it when it breaks, and to talk to you about your account.

We process your personal information for the following purposes, relying on the legal basis named with each:

• To provide the game. Signing you in, holding your progress, placing you in the world, running battles and duels, and showing you to explorers near you. Legal basis: performance of our agreement with you.
• To keep the game fair and safe. Detecting location spoofing, automation and other cheating, preventing abuse and protecting the Services against attack. Legal basis: our legitimate interest in a fair game that works.
• To fix problems. Reading the diagnostic logs you send us. Legal basis: your consent, given when you press send.
• To respond to you. Answering your questions and support requests. Legal basis: performance of our agreement with you.
• To contact you about your account. Sending sign-in codes and, where necessary, important messages about the service, such as changes to these documents. We do not send marketing email. Legal basis: performance of our agreement with you.
• To comply with the law where we are required to. Legal basis: legal obligation.

We do not make automated decisions about you that have legal or similarly significant effects, we do not use your data for advertising, and we never use it to train artificial intelligence models.

4. Will Your Information Be Shared With Anyone?

In short: we do not sell anything to anyone, and the list of people who touch your data is very short.

We never sell personal information, and we never share it for anyone else's marketing. We share data only in these situations:

• Other players. As described in section 2: your player name, your fighting Brissie and its level, and an approximate area, to explorers near you and to players you duel.
• Service providers. The companies that host our servers and infrastructure, acting on our instructions under a data processing agreement and operating within the European Union.
• Apple. Apple distributes the app and, if you type a place instead of using GPS, turns it into coordinates. What Apple receives in doing so is governed by Apple's own privacy policy.
• Legal obligations. Where we are legally required to disclose information, for example in response to a valid order from a competent authority.
• Protecting people and the Services. Where it is necessary to investigate or prevent fraud, abuse or a threat to someone's safety, or to establish or defend a legal claim.
• Business transfers. If the business or a part of it is ever sold or merged, data may pass to the acquirer, who would remain bound by this notice.

5. Is Your Information Transferred Internationally?

In short: no. Your personal information is stored and processed exclusively within the European Union.

All our servers and infrastructure are located in the Netherlands, within the European Union. We do not transfer, store or process your personal information outside the European Economic Area (EEA), and we have made the deliberate decision to work only with service providers and sub-processors that operate entirely within the EU and are subject to the General Data Protection Regulation (GDPR).

This means your data is protected by some of the most comprehensive data protection laws in the world and is not subject to foreign government access requests under laws such as the US CLOUD Act or FISA Section 702. If you play from outside the EEA, your information is transferred to and processed in the Netherlands, and it is protected by this notice and the GDPR wherever you are.

6. How Long Do We Keep Your Information?

In short: your account and game for as long as you play, positions only as long as the game needs them, logs briefly.

• Your account and your game are kept while your account exists. An account that has been inactive for more than two years may be closed, as the terms of service describe.
• Positions are kept only as long as they are needed to run the game and to keep it fair, and are not kept as a history of your walks.
• Diagnostic logs you send, and operational server logs, are kept only as long as they are useful for fixing faults and protecting the Services, and are then deleted.

When you delete your account, we delete or anonymise your personal information. Backups are encrypted and rotate on their own schedule, so deleted data can remain in a backup for a short time before it is overwritten; until then it is isolated from any further use. We may keep information longer where the law requires it or where it is needed for an active dispute or a safety investigation.

7. How Do We Keep Your Information Safe?

In short: with appropriate technical and organisational measures, and by holding as little as possible.

All traffic between the app and our servers is encrypted in transit. There are no passwords to leak: sign-in uses one-time codes, and the session token on your phone is kept in the device's keychain. Access to production systems is limited to the people who need it, and backups are encrypted. Other players only ever receive an approximate area for you, never your coordinates.

No transmission over the internet and no storage system can be guaranteed to be completely secure, so we cannot promise that a determined attacker will never succeed. We do our best, and we will inform you and the supervisory authority about a breach where the law requires it.

8. Do We Collect Information From Children?

Brismania is for players aged 13 and over, and players aged 13 to 15 need the consent of a parent or guardian, as our terms of service explain. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, write to privacy@brismania.nl and we will delete it.

9. What Are Your Privacy Rights?

In short: the full set of GDPR rights, and you may review, change or delete your account at any time.

If the GDPR applies to you, you have the right to ask for access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Where we rely on your consent, you may withdraw it at any time without affecting what happened before.

Your account and your data

• You can change your player name in the app.
• You can stop sharing your location at any time in your device's Settings.
• You can delete your account and everything in it yourself, in the app: open Settings from the card with your name and choose Delete account. It takes effect at once and signs you out.
• You can ask us for a copy of your data, or to delete your account if you no longer have the app, by writing to privacy@brismania.nl from the email address on your account.

Upon your request to delete your account, we will delete your account and its information from our active databases. We may keep some information where it is needed to prevent fraud, to investigate a safety issue, to enforce our terms or to comply with the law.

If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to a data protection supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); elsewhere in the EEA you may contact your local authority, listed at edpb.europa.eu. If you are a resident in Switzerland, the contact details for the data protection authorities are available at edoeb.admin.ch.

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") setting. No uniform standard for honouring it has been agreed, so we do not respond to DNT signals. This makes no practical difference with Brismania, because we do not track you across other websites or apps in the first place.

11. Do California Residents Have Specific Privacy Rights?

In short: yes, and there is nothing to opt out of, because we do not sell or share personal information.

California Civil Code Section 1798.83, the "Shine The Light" law, lets users who are California residents ask us once a year, free of charge, about the personal information we disclosed to third parties for their direct marketing purposes. We make no such disclosures, but you are welcome to ask using the contact details below.

If you are under 18, reside in California and have an account, you have the right to request removal of data you have publicly posted in the Services, such as your player name. Write to us from the email address on your account and say that you reside in California. We will make sure the data is no longer publicly displayed, though it may not be removed immediately from every system, such as backups.

12. Do We Make Updates to This Notice?

In short: yes, when the game or the law changes.

We will update this notice as the game develops and as the law requires. The date at the top always shows when it was last revised, and the new version applies as soon as it is published here. If we make a material change, such as using your location in a new way, we will tell you in the app or by email before it takes effect.

13. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, or a request about your data, you may contact our Data Protection Officer, Dominique Henkes, by email at privacy@brismania.nl or devs@deverence.com, by phone at +31 10 300 67 78 (ext. 2), or by post to: