Privacy Policy
Last updated 28 September 2026 · applies to the OreScout mobile app and orescout.app
OreScout is published by Coconut Island Apps, who is responsible for the processing described on this page. OreScout is built to need as little of your data as possible. There are no accounts and no sign-in, and the app's core features run entirely on your device.
This website and support
Cloudflare hosts this website and receives technical request data, including your IP address, requested URL and browser information, to deliver and protect it. Fonts are served from this website. When you email support, we process your email address, message and attachments to respond. Please include only information needed for your request.
What stays on your device
Seeds you enter, saved seeds, custom markers, found-checklists, and app settings are stored locally on your device and are not uploaded to us. If you use your platform's device backup (for example Android's app backup), your operating system may include this local data in your backups under your platform account's terms.
Diagnostics we collect
To keep the app working we collect, via Sentry (see below):
- Crash reports: device model, operating-system version, app version, and technical stack traces.
- Usage events: content-free feature counters (for example "an ore search ran" or "the paywall was viewed"). These never include your seeds, coordinates, or anything typed into the app.
- App-integrity signals: a coarse install source (app store / sideload) and whether the app's code signature matches the official build. These are coarse categories and contain no device identifiers.
Service providers
The app uses the following service providers. Their legal roles depend on the service; not all act solely as our processors:
- Google AdMob (ads in the free tier) may process device advertising identifiers and coarse location to serve and measure ads, subject to your consent choices. In the EEA/UK a consent dialog is shown before any ad request, and you can revisit it any time via Settings → Ad privacy options. Ads are always requested with a general-audiences content rating. See Google's privacy policy.
- RevenueCat (purchases) processes purchase receipts and a pseudonymous app-generated identifier so your Premium subscription or lifetime purchase can be delivered and restored across devices. We never see your payment details; billing itself is handled by Google Play or the Apple App Store. See RevenueCat's privacy policy.
- Sentry (crash reporting and the diagnostics above) processes the technical data listed in the previous section; default personal-information collection is disabled in our SDK configuration. Diagnostics can still contain personal data, including a random installation identifier; disabling those defaults does not make every report anonymous. See Sentry's privacy policy.
- Cloudflare (app configuration) serves a small configuration file the app fetches from Cloudflare's network at launch. Like any web request, this exposes your IP address and a generic client identifier to the host for the duration of delivery; we set no cookies and store no per-user data there. See Cloudflare's privacy policy.
Legal bases
Purchase delivery and contractual support rely on Article 6(1)(b) GDPR. Website delivery, security, technical diagnostics and other support correspondence rely on our legitimate interests in operating a reliable service under Article 6(1)(f). Where consent is required for advertising or access to information on your device, we request it; consent-based processing relies on Article 6(1)(a). Records required by law are processed under Article 6(1)(c).
Non-personalised ads can still involve personal data and require consent. On iOS, declining tracking permission prevents IDFA access; it does not create a replacement advertising identifier.
International processing
Service providers may process data outside the EEA, including in the United States. Transfers must have a basis under Chapter V GDPR, such as an applicable adequacy decision or appropriate contractual safeguards. Contact us for information about the safeguards applicable to your data and how to obtain a copy.
Your choices
- Ads: adjust or withdraw ad-personalization consent in Settings → Ad privacy options (where applicable), or remove ads entirely with Premium (a subscription or lifetime purchase). On iOS, the system tracking prompt governs the ad identifier.
- Local data: clearing the app's storage or uninstalling removes its local data, subject to your platform's backup and restore behavior. Manage cloud backups separately through your platform account.
Children
OreScout is not directed at children under 13. The app carries a 13+ content rating and requests only general-audience ads.
Retention
Crash and usage diagnostics are retained by our providers for a limited operational period and then deleted or aggregated. We hold no user database of our own. Purchase records are retained as needed to deliver and restore entitlements and meet applicable recordkeeping duties. Support correspondence is kept as needed to resolve the request and address related contractual claims or legal duties.
Your rights
Under the GDPR you may request access, correction, erasure, restriction and, where applicable, portability of your personal data. You may withdraw consent without affecting prior lawful processing. You may object to legitimate-interest processing on grounds relating to your situation, and to direct marketing at any time.
Email us to exercise these rights. We normally respond within one month; we explain any legally permitted extension within that month. Requests are normally free, subject to statutory exceptions. The absence of an app account does not remove your rights: we will help identify relevant records where possible, requesting only the information necessary to handle your request.
You can complain to the Saxon Data Protection and Transparency Commissioner or another competent supervisory authority, including where you live or work.
Changes
If this policy changes materially we will update this page and the effective date above.
Controller and contact
OreScout is operated by Coconut Island Apps. The controller's legal identity and postal address are provided in our Legal notice / Impressum.