Baseline — Privacy Policy
Last updated: 29 September 2026
Baseline is a location-based game in closed beta, made by an individual developer in Finland. This policy describes what the game collects, why, who can see it, and how to get it deleted. It describes the beta as it actually works today, not a finished product.
Contact for anything in this policy, including data requests: info@baselinegame.net
Who is responsible
Baseline is operated by an individual developer based in Finland. Because the developer is in the EU, the GDPR applies to everyone who plays, wherever they are.
Game data is stored on a virtual server rented from Hetzner, located in Finland. It is not transferred outside the EU except where Google processes your sign-in (below).
What the game collects
Your account
When you sign in with Google, Baseline receives and stores an opaque account identifier that Google generates for this app. That is all.
Baseline does not store your email address, your real name, or your profile picture. It never receives your Google password. The identifier cannot be used to contact you and is meaningless outside this game.
You also choose a callsign and a faction. Both are shown to other players. If you delete your account, your callsign is freed and another player may take it later.
Your location
Baseline is a game about where you physically are, so location is the core of it.
- Precise position, while you are playing. Your device sends its position to the game server every few seconds. This is held in memory only, for 30 seconds, and is never written to the database. When you stop playing it is gone within half a minute.
- Coarse position history, permanently. Every action you take in the game — attacking, building, harvesting — is recorded in the game's event log stamped with an approximately 0.7 km² map cell. This is a lasting record of roughly where you were and when.
- Precise position, in specific recorded actions. Your exact position is stored when you send a local chat message, place a deployable object, drop an item, or submit a new location for the map.
Baseline does not collect location when the app is closed or in the background.
Gameplay
Your level, experience points, inventory, squad membership, the map objects you build and capture, and the history of actions described above.
Chat
Messages you send in local, faction and squad channels, and private messages. Private messages are deleted automatically after 90 days. Other channels are kept for the beta's duration.
Bug reports
If you use "Report a bug", the report includes what you typed plus, attached automatically and stated on the screen where you type it: your callsign, account identifier, faction, level, where your map was centred, the nearest map object, your screen size, your device and browser identification string, and your in-game settings.
Device and anti-cheat
The platform your device runs and an app-integrity key identifying the installation, with the first and last time it was seen. Used to detect cheating and to block abusive installations.
When you look at a node on your own side whose contents a Veil or Penumbra hides from the other faction, the game records that you looked and when. These records are deleted after 8 days. They are used only to spot accounts that pass hidden information to the other side: a match flags the account for a moderator to review and never acts on its own.
Moderation
Reports you file about other players, reports other players file about you, and players you block.
Removal requests (you do not need to play)
Anyone can ask for a game location to be removed, or report illegal content, with the form at /remove-node. A request holds your name, your email address, how you are connected to the place, what you wrote about it, and the coordinates if you added them. We use them only to handle the request and reply to you. Only the people who moderate Baseline see them. Your name and email are deleted 12 months after the request is closed; the request stays in our moderation records without them.
Server logs
The game server records the IP address, time, and address requested for traffic it receives. These logs rotate and are overwritten automatically.
What other players can see
This matters more in Baseline than in most games, because the game is about physical places.
- Always: your callsign, faction and level, and anything you build on the map.
- Your position, to enemies: when an opposing player has an active Watchtower, your position is revealed to them while you are within 1 km of it and the Watchtower is live (30 minutes).
- Your position, to your squad: only if you turn on location sharing in the squad screen, and then only to squadmates within 10 km. It is off unless you switch it on.
- Chat: local messages are visible to players nearby; faction and squad messages to those groups; private messages only to the recipient.
Placing objects, capturing map locations and chatting all reveal something about where you are. That is the nature of the game rather than an accident of it.
What Baseline does not do
- No advertising, and no advertising identifiers.
- No analytics or tracking SDKs. There is no Firebase Analytics, no crash reporter, no attribution or marketing service.
- No selling or sharing of your data, to anyone, for any purpose.
- No profiling or automated decisions about you, beyond anti-cheat checks on implausible movement.
The only third party that receives anything about you is Google, which handles sign-in. Google's handling of that is covered by Google's Privacy Policy.
When you play somewhere nobody has played before, our server looks up the places in that area on OpenStreetMap's public map service (Overpass), so they can become part of the game. The request comes from our server, not your phone, and contains only a rectangle of map a few kilometres across: no account, no name, no device identifier and not your exact position.
Why the game is allowed to hold this (legal bases)
- Performance of a contract — account, location, gameplay and chat. The game cannot work without them.
- Legitimate interests — anti-cheat, moderation and server logs, to keep the game playable and secure.
- Legal obligation — handling removal requests and notices of illegal content (the EU Digital Services Act requires a way to send them), and the name and email that come with them.
- Consent — sharing your location with your squad. You give it by turning the setting on and withdraw it by turning the setting off.
How long data is kept
- Private messages: 90 days, deleted automatically.
- After you delete your account: reports other players filed about you, and any ban, for up to 12 months, so a banned player cannot return straight away with a new account. What you built on the map stays in the game without your name.
- Removal requests: the requester's name and email, 12 months after the request is closed.
- Everything else: for as long as the beta runs, or until you delete your account.
This is a beta, and the whole database may be deleted at any time — during testing, when rebuilding the world, or when the beta ends. Do not treat anything in Baseline as permanently stored.
Your rights
Under the GDPR you may request access to your data, correction, deletion, a copy in a portable form, restriction of processing, or object to processing. You may also complain to your national data protection authority — in Finland, the Office of the Data Protection Ombudsman.
To exercise any of these, email info@baselinegame.net from the Google account you play with, or send your callsign.
Deleting your account: in the game, Settings → Delete Account. Your account is locked at once and deleted 7 days later; signing in again within those 7 days cancels it. If you cannot open the game, ask by email and it is done within 30 days. What is deleted and what is kept is on the account deletion page.
Children
Baseline is not intended for children under 13, and accounts are not knowingly created for them. The game involves travelling to physical locations and should not be used by children without a parent's involvement. If you believe a child has an account, email the address above and it will be removed.
Security
Traffic between the app and the server is encrypted with HTTPS. Sign-in is handled by Google; Baseline never sees your password. Access to the server is limited to the developer.
No system is perfectly secure, and this one is a beta maintained by one person. Do not put anything in chat or a bug report that you would not want read by someone else.
Changes
This policy will change as the game does. The date at the top is the last revision. Material changes will be announced in the game before they take effect.