Privacy Policy

Overview

Reaching Random LLC (“we”, “us”, or “our”) operates the Reaching Random website and tools (collectively, the “Service”). We are committed to minimal data collection and transparency about what we do store.

Information We Collect

We collect and store only the minimum information necessary to provide the Service:

• Google Account ID — used solely as a unique identifier to associate saved tool state with your account. We do not access your Google contacts, Gmail, Drive, or any other Google service data.
• Tool state data — data you enter into our tools (e.g. saved coordinates, POI lists) that you choose to persist across sessions. This data is stored and associated with your Google ID.
• API keys — if you generate one for a tool that offers it, we store it with your account so companion apps you install (such as our Minecraft mods) can read and update that tool’s data on your behalf. Those apps send the same kind of tool state data described above. Generating a new key invalidates the old one.
• Request logs — like most websites, our hosting records basic details of each request (IP address, time, requested URL and browser user agent) for security and troubleshooting. These logs are kept for about 30 days and are not used to profile you.

Shared POI Worlds

A POI Tracker world can be shared with other people. If you share a world or join one:

• Everyone in that world can see its POIs and groups, each member’s role, and which member added or last changed each POI.
• Members are shown to each other by their linked Minecraft name, or until they link an account, by the label the person who invited them typed, such as a first name. We don’t show anyone your Google name or email address.
• Invites — we store each invite’s role, its optional label, who created it, and when it was created, used or revoked. The invite link itself is stored only as a one-way hash, so we can’t show it again.
• Server address — when an admin selects a shared world on a multiplayer server, we store that server’s address with the world so members’ mods can select it. Members of the world can see it.
• The world’s owner and admins decide who has access. If you leave or are removed, you lose access, and the POIs you added stay in that world.

Linked Minecraft Accounts

When you save your API key in the Points of Interest mod (/poi setkey), and when you join a world with an account that isn't linked yet, the mod links that Minecraft account to yours. You can also run /poi link yourself:

• We store the account’s Minecraft UUID and player name, and when it was linked. Members of worlds shared with you see the name of the account you mark as primary.
• To prove the account is yours, the mod asks Mojang’s session server to record a sign-in with a one-time code from us, and we then ask Mojang whether that account signed in with it, the same check a Minecraft server makes. We don’t receive your Minecraft password or access token.
• Because Minecraft names can change, we look up a linked account’s current name from Mojang’s public profile service when ours is more than a day old.
• You can unlink an account at any time from Settings or with /poi unlink, which deletes what we stored about it.

What We Do Not Collect

• We do not use advertising trackers or analytics platforms.
• We do not sell, rent, or share your data with third parties, other than the hosting provider described below.
• We do not store your Google profile name, email address, or profile picture beyond the active session.
• We do not track your browsing behavior across other websites.
• We only set the cookies needed to keep you signed in.

Hosting

The Service runs on Google Cloud (Cloud Run and Firestore) in the us-central1 region (Iowa, United States). Google stores and processes this data only on our behalf, to operate the Service.

Authentication

Authentication is handled via Google OAuth 2.0 through Auth.js. We only request the minimum OAuth scopes necessary to identify you (your unique Google ID). You may revoke access to this application at any time through your Google account permissions.

Data Retention

Tool state data is retained until you delete it within the application or request deletion by contacting us. Deleting your account from Settings permanently removes all of your tool state, API keys and linked Minecraft accounts. Worlds you own are deleted along with their invites, so their members lose access too; you leave every world someone else owns, and the POIs you added there stay in it. If you revoke OAuth access, your data remains stored but becomes inaccessible.

A removed campsite is kept for 30 days so a world admin can restore it, then deleted. Invites stay in a world’s sharing history until the world is deleted.

Contact

If you have any questions about this privacy policy or your data, or want your data deleted, email us at reachingrandom@gmail.com.