Viageur Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how LTY Enterprises, Inc. ("Viageur", "we", "us" or "our") collects, uses, shares and protects personal information when you use:

• the Viageur website at https://www.viageur.com; and
• the Cleared by Viageur mobile app for iPhone and Android.

Together these are the "Service". The website and the app use the same Viageur account.

1. Who we are and how to contact us

The Service is operated by LTY Enterprises, Inc., 6 Liberty Square, Boston, MA 02109, USA. LTY Enterprises, Inc. is responsible for the personal information described in this Policy.

For privacy questions, requests and legal notices, email support@viageur.com.

2. Who the Service is for

The Service is for adults. You must be at least 18 years old to use it. We do not direct the Service to children and we do not knowingly collect personal information from anyone under 18. When you sign up, we ask you to confirm that you are 18 or older; we do not store that confirmation. If you believe someone under 18 has given us personal information, contact support@viageur.com so we can investigate and take appropriate action, including deleting the information where required and possible.

3. Summary

• We collect the information you give us, such as your email address and the community intel you write. We also collect information created when you use the Service, such as mission progress and favors, location information when you allow it, and limited technical and analytics information.
• We use this information to provide the Service. That includes signing you in, running missions and check-ins, showing community intel, generating city briefings, keeping the Service safe and understanding how it is used.
• We do not sell your personal information, and we do not use it for targeted advertising.
• We use service providers to run the Service, including Supabase, Vercel, Mapbox, Anthropic, Resend and Google Fonts.
• Community intel you submit is visible to other signed-in users. That includes, for intel submitted on the website, the location attached to it.

4. Information we collect

4.1 Account and sign-in information

• Email address. You create an account and sign in with a one-time link sent to your email address.
• Account records. Our authentication provider keeps your account ID, the dates you created your account and signed in, and the session information that keeps you signed in.
• Earlier Google sign-in. The Service does not currently offer sign-in with Google. Some accounts were created with Google sign-in before it was withdrawn. For those accounts, our authentication provider holds the profile information Google provided when the account was created: your email address, name, profile-picture link and Google account identifier.

4.2 Profile information

• Your codename, which the Service generates for you, and your home-base city.
• Information the Service creates about your account: your favor balance, lifetime favors, insider level, and whether the account has administrator rights.

We do not ask you to tell us your race or ethnicity, sexual orientation, gender, disability, relationship status or immigration background, and we do not store such selections.

4.3 Your activity in the Service

• Check-ins. We record that you checked in at a mission checkpoint, how the check-in was cleared and when. Check-in records do not include your location.
• Mission progress. Mission holds, dossier unlocks and clue progress.
• Favors. A record of favors you earn and spend.

4.4 Community intel you submit

When you submit community intel, we store:

• what you write (a headline and text) and the category, city and neighborhood it relates to;
• its location, depending on where you submit it:
  • on the website, the location of your device when you submit, or the location of an address you type. Intel submitted during a mission on the website is tagged with your device's location at the time you submit it;
  • in the app, the city of the mission checkpoint. The app does not attach your device's location to intel;
• the place it relates to, the time you submitted it, and how many other users confirmed it.

If website intel does not match an existing place, the Service may create a new place record at that location. Our records note which account created it. A place becomes visible to everyone once it has been reviewed or confirmed by enough users; we do not show who created it.

Intel you submit is used to generate city briefings (section 6).

Please do not include personal information about yourself or anyone else in intel, such as names, contact details or anything else that could identify someone. Write about places, not people.

4.5 Reports and blocks

• Reports. If you report an item of community intel, we record the item, your account, the reason you chose from a fixed list, and when you reported it. The author is not told who reported their intel.
• Blocks. If you block the creator of an item, we record your account, the blocked account and when you blocked them. The creator is not told.

4.6 Location information

We use your device's location only if you allow it in your browser or device settings.

On the website:

• Map page. While the map page is open, your browser continuously provides your location so the map can show where you are. This location is used in your browser and is not sent to our servers.
• Intel feed. To show intel near you, the website sends your current location to our servers and to Mapbox. Our servers use it to find nearby intel and do not store it with your account, but it can appear in our hosting provider's request logs. Mapbox uses it to look up your neighborhood or city.
• Intel detail pages. Your location is used in your browser to show how far away an item is.
• Submitting intel. Your location is attached to the intel you submit and stored, as described in section 4.4. It is also sent to Mapbox to look up the place name.
• Missions. Your location is used in your browser to check whether you have reached a checkpoint. Check-in records do not store it.

In the app:

The app reads your location only while you are using it, once each time you tap I'M HERE at a mission checkpoint, to confirm you have arrived. The distance is worked out on your device and the location is not sent to us. The app does not use your location in the background and does not show it on the map.

You can turn off location access at any time in your browser or device settings. Features that need location, such as verified check-ins and nearby intel, will not work without it.

4.7 Waitlist

If you join the Viageur waitlist, we store your email address. We send you a welcome email, and we send an internal notification that includes your email address to a Viageur mailbox.

4.8 Emails we send

We send sign-in emails, a welcome email that includes your codename when you complete sign-up on the website, and waitlist emails. These emails are sent through our email provider, Resend.

4.9 Support

If you contact support@viageur.com, we receive your email address and anything you send us.

4.10 Technical, log and analytics information

• Server and security logs. Our hosting provider (Vercel) and our database and authentication provider (Supabase) record requests to run and secure the Service. These logs can include your IP address, browser or device information, the page or feature you requested and the time.
• Earlier product analytics (PostHog). The website previously used PostHog to record a limited set of named product events, such as starting a mission, submitting intel or tapping a booking button. The website no longer sends events to PostHog. Events sent before this change were linked to a random identifier stored in your browser, not to your name, email address or Viageur account, and they may remain with PostHog, in the United States, under PostHog's retention practices. PostHog was set to discard IP addresses from events received from October 7, 2026 onward, after using them to work out an approximate location such as country or city; events received before then may include IP addresses. The next time you load the website, it removes the old PostHog identifier from your browser. The app never used PostHog.
• Website analytics (Vercel Web Analytics). Vercel Web Analytics records page views on the website to give us aggregate statistics: the page, the referring site, approximate location, and browser, operating system and device type. It does not use cookies.
• Fonts. Website pages load some fonts from Google Fonts, so your browser sends Google a request, including your IP address.
• Maps. Map images on the website and in the app are loaded from Mapbox, which receives technical request information. Mapbox's mobile software may also send Mapbox usage and diagnostic information under Mapbox's standard settings.

The app does not contain advertising, analytics, push-notification or crash-reporting software.

4.11 Photos and files

You cannot upload photos or files to the Service. Some intel entries created by Viageur staff show an image through a link. When you view such an entry, your browser loads the image from where it is hosted.

5. How we use information, and our legal bases

If you are in the European Economic Area, the United Kingdom, Switzerland or Brazil, we rely on the legal bases shown below.

Where we rely on legitimate interests, you can object (section 11).

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

6. City briefings and AI

City briefings summarize recent community intel for a city in the voice of a Viageur character. They are generated by an AI model provided by Anthropic.

To generate a briefing, we send Anthropic:

• the city's name; and
• up to 50 recent published intel entries for that city, each with its category and the text users wrote.

We do not send your name, email address, codename or account ID. Because intel is free text, anything a user wrote in an entry may be included.

The generated briefing is stored and shown to every user who views that city's briefing. It is refreshed when enough new intel has been published, or when intel used in it is moderated or deleted.

We also use Anthropic to generate codenames. That request does not include any information about you.

Briefings are generated automatically and may contain mistakes. See our Terms.

7. How we share information

We do not sell your personal information and we do not use it for targeted advertising. We share information only as described below.

Service providers. These companies process information on our behalf to provide the Service:

Other users. Community intel you submit is shown to other signed-in users, with:

• its text, category and when it was submitted;
• for website submissions, its exact location, both on the map and in the intel feed.

We do not show your email address, codename or account ID with your intel.

Places that have been reviewed or confirmed are visible to everyone, without showing who created them.

Booking partners. See section 8.

Legal and safety. We may disclose information when the law requires it, or when reasonably necessary to protect the rights, property or safety of Viageur, our users or others.

Business transfers. If Viageur is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. It will remain subject to this Policy.

8. Booking links

Some dossiers and missions on the website include links to book experiences with third parties. Viageur receives commissions or other compensation for some of these links.

Booking links are fixed links. We do not add your name, email address or account ID to them. When you follow one, you leave Viageur. The third party may learn that you came from Viageur, and handles your information under its own privacy policy.

We do not track which booking links you follow.

9. Cookies and similar technologies

• Needed to run the Service.
  • Website: the website stores your sign-in session in cookies. It also stores your session details in your browser's local storage: your email address, codename, home-base city and favor balance. During account deletion, the website sets a short-lived cookie for up to 10 minutes so the sign-in link returns you to the deletion page.
  • App: the app stores your sign-in session on your device.
• Analytics. Vercel Web Analytics does not use cookies. The website no longer uses PostHog and removes the identifier PostHog stored in your browser's local storage the next time you load the website (section 4.10).
• Requests to third parties. Google Fonts and Mapbox receive requests from your browser or device when content loads.

We do not use advertising cookies or advertising trackers.

10. How long we keep information

We keep personal information only as long as we need it for the purposes in this Policy, unless the law requires us to keep it longer.

11. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that is inaccurate;
• delete your personal information;
• object to or restrict some processing, including processing based on our legitimate interests;
• withdraw consent where we rely on it, for example by turning off location access. This does not affect processing before you withdrew;
• not be treated differently for exercising your rights;
• appeal a decision we make about your request;
• complain to a data protection authority. In the European Economic Area, that is your local data protection authority. In the United Kingdom, it is the Information Commissioner's Office. In Switzerland, it is the Federal Data Protection and Information Commissioner. In Brazil, it is the ANPD.

To make a request or an appeal, email support@viageur.com. We will verify your request, usually by asking you to confirm it from the email address on your Viageur account. We will respond within the time the law requires. Where the law allows, you can use an authorized agent; we may ask for proof that the agent is authorized.

United States residents. In the past 12 months, we have collected the following categories of personal information from the sources described in section 4:

• identifiers, such as email address and account ID;
• internet or other electronic network activity, such as product analytics and logs;
• precise geolocation, from intel submitted on the website and nearby-intel requests;
• approximate location;
• profile information, such as your codename and home-base city;
• the content of community intel you write.

We use and disclose this information for the business purposes in sections 5 to 8. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We use precise geolocation only to provide the features you request.

12. Deleting your account

You can find out how to delete your Viageur account at https://www.viageur.com/account-deletion. The page also explains what happens when deletion is not available or cannot be completed.

When an account is deleted:

• the account, its sign-in records and sessions, its profile and its account-linked activity are deleted;
• community intel submitted from the account is deleted outright, including its text, location and address details, map position and any photo link;
• a waitlist sign-up with the same email address is deleted;
• places added from the account are deleted. The exception is a published, reviewed place that other Viageur content still uses: that place is kept but is no longer linked to the account;
• city briefings based on the deleted intel are cleared.

Some limited records remain after deletion:

• moderation and deletion records in the redacted form described in section 10;
• copies in our providers' backups, logs and email systems until those expire;
• analytics events that are not linked to your account.

Deletion is permanent once it is complete. Deleting the app from your phone does not delete your account.

13. International transfers

Viageur is based in the United States, and our service providers are based in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our providers operate. Those countries' data protection laws may differ from the laws where you live.

14. Security

We use reasonable technical and organizational measures to protect personal information. These include:

• encrypted connections;
• access controls that restrict sensitive operations to our servers and limit what each person can see and do according to their role and the feature they are using;
• restricted server functions for sensitive operations.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy here with a new "Last updated" date. If a change is significant, we will take reasonable steps to let you know, for example in the Service or by email.

16. Contact

LTY Enterprises, Inc.
6 Liberty Square, Boston, MA 02109, USA
support@viageur.com