1. About this policy
Jack & Mani ("we") offers an investigation game available as a web version, playable from your browser, as well as an app downloadable from the app stores. This policy describes the cookies and other trackers we use on both platforms, the purposes pursued and how you can accept, refuse or withdraw them at any time.
It complements our privacy policy, which details all processing of personal data. For any question, you can write to us at info@jackandmani.com.
2. What is a cookie or a tracker?
A cookie is a small file placed on your device when you visit a website. It allows, for example, recognizing you from one page to the next or remembering your preferences.
We also use equivalent technologies: browser local storage (localStorage and sessionStorage), which keeps information directly in your browser, and, in the mobile app, measurement tools and technical identifiers provided by software development kits (SDKs). In this document, the word "tracker" refers to all of these technologies.
3. Your consent
Trackers strictly necessary for the service to work are placed without your consent, because the service cannot function without them. All other trackers (audience measurement, product analytics, session replay, error tracking, location tracking) are only activated after your consent.
On your first visit, a banner lets you accept or refuse these trackers. Refusing is as easy as accepting, and the absence of a choice does not count as acceptance. You can change or withdraw your consent at any time from the site's cookie settings, without this affecting the lawfulness of the processing carried out before that withdrawal.
Manage your preferences
You can review your choice about consent-based trackers (audience measurement, product analytics and session replay, error tracking) at any time.
4. The trackers we use
Here is a summary of the trackers used on the web version. Some rely on third-party providers, detailed in the following sections.
Strictly necessary
Not requiredPurpose
Account sign-in and security, remembering your game state and your preferences (language, consent choice). Displaying the interface matching your sign-in state.
Provider
Jack & Mani, Firebase (Google)
Data
Session identifier, sign-in state indicator, game state, preferences
Duration
Session to 12 months
Audience measurement
RequiredPurpose
Understand the use of the service and improve the game (traffic, page views).
Provider
Google Analytics 4 (Google)
Data
Measurement identifier, pages viewed, usage data
Duration
Up to 14 months
Product analytics, session replay and feedback
RequiredPurpose
Analyze journeys within the game, replay sessions to understand blockers, manage A/B tests and collect your feedback.
Provider
PostHog (European Union hosting)
Data
Usage events, session recordings (sensitive fields masked), survey responses
Duration
Recordings: up to 1 month; events: up to 12 months
Error tracking and performance
Not requiredPurpose
Detect and fix crashes and technical problems to ensure the stability and security of the game. This tracking is necessary for the proper functioning of the service.
Provider
Sentry
Data
Technical diagnostic data, error logs, device and session info, without identifiable personal data
Duration
Up to 90 days
Mapping and location tracking
Required (device permission)Purpose
Display the map, locate you on the outdoor trail and determine the city where you are playing.
Provider
Mapbox, browser location tracking API
Data
GPS coordinates, heading, city
Duration
For the duration of the game (no persistent retention)
Fitness tracking (optional)
RequiredPurpose
Remember your daily activity aggregates in order to show the fitness indicator in your account. Active only if you turn this option on.
Provider
Jack & Mani
Data
Distance, time spent outdoors and number of outings, per day
Duration
Rolling 14 days
5. Audience measurement (Google Analytics 4)
To measure the audience of our service and improve it, we use Google Analytics 4, provided by Google. This tool places trackers that collect information about your use (pages viewed, visit duration, device type). These trackers are only activated after your consent.
Google may process this data outside the European Union, in particular in the United States. You can object to tracking through the site's cookie settings, or install the Google Analytics opt-out add-on.
6. Product analytics, session replay and feedback (PostHog)
We use PostHog to understand how the game is used and to improve it. PostHog serves several purposes: analyzing journeys and usage events (pages and screens viewed, features used), managing optional features and A/B tests, and collecting your feedback through built-in surveys.
PostHog also offers session recording ("session replay"): it replays your navigation in an anonymized way (movements, clicks, screens viewed) in order to spot blockers and bugs. Sensitive fields, such as passwords and payment information, are masked and are not recorded. All these functions are only activated after your consent.
Our PostHog instance is hosted in the European Union (PostHog EU Cloud): in this context, your data is not transferred outside the European Union.
7. Error tracking and performance (Sentry)
To ensure the stability of the game, we use Sentry, an error tracking and performance tool. When a technical error occurs, Sentry records diagnostic information (error message, device and browser type, technical sequence that led to the problem) to help us fix it. This tracking is strictly necessary for the proper functioning and security of the service: it relies on our legitimate interest and is therefore not subject to your consent. We configure it so that it collects no identifiable personal data.
Sentry may process this data outside the European Union. We configure the tool to limit as much as possible the technical information collected.
8. Location tracking
The game's outdoor mode relies on your geographic location: it guides you from clue to clue through real places. For this, we use the location tracking API of your browser (or your mobile device), which only activates after your explicit authorization through the browser's or operating system's permission prompt.
Location tracking is not a cookie: it is a device permission. Your coordinates are used during the game to display the map and determine the city where you are playing. For this purpose, they are sent to Mapbox, our mapping provider, which may process them outside the European Union. We do not keep your coordinates persistently once the game is over.
You can disable location tracking at any time in your browser's or your phone's settings. The outdoor mode will then no longer be available, but the classic version of the game remains playable.
9. Third-party trackers and transfers outside the European Union
Some of our providers may process your data outside the European Union, in particular in the United States: Google (Analytics), Sentry and Mapbox. These transfers are framed by the safeguards provided for by the GDPR (standard contractual clauses or the EU-US Data Privacy Framework). PostHog, on the other hand, is hosted in the European Union and does not involve a transfer outside the EU in this context.
We have no control over the trackers these third parties place beyond the purposes described here; we invite you to consult their own privacy policies.
10. Mobile app
The app downloadable from the app stores does not use browser cookies. The same purposes (audience measurement, product analytics, error tracking, location tracking) are handled there through software development kits (SDKs) and technical identifiers provided by the publishers (in particular Google and the iOS and Android systems).
On mobile, permissions (location tracking, tracking) are managed by your operating system. On iOS, the app asks for your agreement through the App Tracking Transparency mechanism. You can change these permissions at any time in your device's settings.
11. How to manage or disable trackers
You have several means of control.
The site's cookie settings, accessible at any time, to revisit your consent to audience measurement, product analytics and error tracking.
Your browser's settings, to block or delete cookies. Disabling strictly necessary trackers may, however, prevent certain functions (sign-in, saving progress).
Your device's settings, for location tracking and, on mobile, advertising tracking.
12. Retention period
The retention periods specific to each tracker are listed in the summary above. The data collected is kept for the period indicated and then deleted or anonymized. For details of the retention periods of personal data, refer to our privacy policy.
13. Changes to this policy
We may update this policy to reflect changes in the service or in regulations. Any change is published on this page with an updated revision date. We invite you to review it regularly.
14. Contact
For any question about this policy or about exercising your rights, you can write to us at info@jackandmani.com. You also have the right to lodge a complaint with the Data Protection Authority (Belgium).