Pepper Legs is a playful social game for creating, hiding, and tracking cursed items through QR-coded plantings, findings, comments, and photos across 23 pages.

Privacy Policy — The Curse of Pepper Legs

1. The short version

Pepper Legs is a playful social game where you hide "cursed" objects in plain sight, track their journey through QR codes, and watch them travel your community. To do that, we collect a small amount of information about you — your email, a display name, the photos you upload of your cursed objects, and the city or nickname where you planted them. We don't sell any of it, and we don't use it to follow you around the internet. This page explains, in plain language, what we collect and why.

2. What we collect

Account info: your email address and password (stored encrypted). Your display name, which you choose and which is shown publicly on curses you create or find.
Photos: images you upload of cursed objects, planting locations, and findings. These are shown publicly on curse pages and in the gallery.
Location text: city names and location nicknames you type in (e.g., "Bob's house"). We never collect GPS coordinates unless you type them yourself.
Curse content: the titles, descriptions, and comments you write. These are public.
Purchase info: when you buy merchandise (shirts, sticker booklets), we pass your shipping address and email to Stripe and our print partner to fulfill the order. We keep a record of the order for support and refunds.
Usage data: basic, anonymous analytics about which pages are viewed, so we can keep the app from falling apart.

3. How we use it

To run the game — showing your curses and findings to the community, generating QR codes, and tracking chain-of-custody and distance.
To create and manage your account, and to email you about your account or order if needed.
To process and ship physical merchandise orders.
To moderate content reported by the community and to enforce our Terms.

4. Who sees it

Your curses, photos, comments, display name, and location nicknames are public — that's the point of the game. Anyone who scans a QR code can view a curse page without logging in. Your email and password are never shown publicly. We share order details with Stripe (payments) and our print fulfillment partner (production and shipping) only as needed to complete your purchase.

5. What we don't do

We don't sell your personal information.
We don't use your data to build advertising profiles.
We don't track your location in the background.

6. Your choices

You can edit your display name in your profile. You can delete curses you created while they're still in your inventory. You can request deletion of your account and associated content by contacting us. Note that once a cursed object is out in the world and scanned by others, its chain of custody becomes part of the public game record.

7. Children

This app is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has registered, contact us and we'll delete the account.

8. Security

We use industry-standard measures to protect your data, but no method of transmission or storage is 100% secure. Payment data is handled entirely by Stripe — we never see or store your card number.

9. Changes

If we materially change this policy, we'll update the date above and do our best to let you know. Continued use after changes means you accept the updated policy.

10. Contact

Questions about your data? Reach out through the app's support contact. See our Terms of Use for the rules of the game.