Privacy Policy & Media Notice

1. Introduction and scope

SebaHub (“SebaHub,” “we,” “our,” or “us”) respects your privacy and is committed to protecting personal information in accordance with Alberta's Personal Information Protection Act (PIPA) and applicable Canadian privacy laws.

This policy applies to the Tim Lost Something? campaign and explains how we collect, use, disclose, retain, and protect information when you visit the campaign website, create a player account, participate in hunt activities, subscribe to communications, post to the clue board, or submit a private report.

You may read the public story, route overview, rules, official updates, and moderated clue board without an account. You may also submit a private report without an account. Exact directions and participation-only tools require completion of the then-active participation requirements.

2. Information we collect

Account and profile information

When you create an account, our identity provider manages your verified email, password, recovery codes, sessions, and security checks. SebaHub stores the provider account identifier, verified email, account status, name, generated public hunter handle, optional town or general area, interests, discovery source, funnel stage, route progress, communication preferences, and consent history. SebaHub does not store your password or password-reset code.

Supervised minors and waiver receipts

An account holder records whether they are 18 or older or are under 18 and participating with parent or legal guardian permission and supervision. A minor account holder's name, display name, and Hunter handle are never published. A minor account cannot register supervised dependants.

When an adult account holder registers supervised minors, SebaHub collects each minor's full name and birth year only to identify who is covered by the adult's participation-waiver acceptance. We do not collect a supervised minor's email address, phone number, exact birth date, public handle, or separate route-progress record.

After a participation waiver is accepted, SebaHub sends the account holder a transactional legal waiver receipt at the account's verified email through its configured email service provider. This transactional receipt and any deliberate resend are essential legal communications, not marketing consent, and do not grant or change permission for hunt updates or SebaHub marketing.

Account-participation snapshots, supervised-minor snapshots, and waiver-receipt delivery events are restricted legal records. They are never public, never included in player exports, and follow the legal-acceptance retention and deletion rules below.

Reports and optional location

A private report may include its type, name, email, an optional callback phone number, nearest waypoint, location description, details, and submitted images. A find claim requires a photo. Browser location is optional and is requested only after you choose to share it.

Sponsorship inquiries

When you submit a sponsorship inquiry, we collect your contact name, organization, work email, optional callback phone, proposed support type, optional contribution range, and the partnership outcome you describe. We use this information to assess and follow up on the inquiry, maintain a private partnership pipeline, prevent abuse, and document any later agreement.

Submitting an inquiry does not subscribe you to hunt updates or SebaHub marketing, create a sponsorship agreement, or authorize us to publish your organization’s name or logo.

Field Notes and community activity

We collect Field Notes, replies, flags, submitted media, moderation decisions, and the public hunter handle associated with an approved post. Field Notes and their images remain private while awaiting moderation.

Human verification, security, and website information

Public reporting and clue-board submissions may use human verification and privacy-conscious rate limits. Security records may include browser or device details, shortened or transformed network indicators, request identifiers, authentication events, and website performance information. We do not intentionally place identity tokens, passwords, reset codes, raw human-verification tokens, private report evidence, or private coordinates in application logs.

3. Report review and publication

Every submitted find, tip, or safety report is private by default and is reviewed by an authorized SebaHub operator. Nothing is automatically published.

When an operator deliberately approves and publishes a report, the public Updates post may contain only the edited story, waypoint, submitted GPS coordinates, an adult reporter's Hunter handle, and individually selected processed images. Submitted GPS coordinates for an approved report may be public to everyone as part of the game.

Reporter email addresses, callback phone numbers, private account identifiers, internal notes, original uploads, embedded image metadata, ID details, and cash evidence are not included in the public report post. A participant under 18 is attributed only as Young Hunter; the minor's name, display name, and Hunter handle are not published.

Each processed report image has a separate publication control that is off by default. Selecting one image does not authorize another image, and original files are never substituted for the selected metadata-free derivative.

You may ask SebaHub to review, correct, withdraw, or unpublish an approved report contribution. We will assess the request subject to legal, safety, fraud-prevention, dispute, and archival requirements. Operator review, image-selection, publication, withdrawal, and unpublish actions are recorded in a restricted audit trail.

4. How we use information

We use information to create and secure accounts; provide player profiles, route progress, and gated hunt tools; review possible finds and safety concerns; operate and moderate the virtual clue board; publish approved campaign updates; prevent abuse; provide support; measure participation; improve the campaign; maintain audit records; and meet legal or regulatory obligations.

Approved public Field Notes use a generated hunter handle rather than private contact details. Approved public images are re-encoded to remove embedded metadata such as GPS information. Private originals are not substituted into public posts.

5. Marketing communications and consent

Official hunt-email permission and broader SebaHub marketing permission are separate, optional, and unchecked by default. Neither is required to create a player account. You may change or withdraw either permission through your account or by contacting us, and every marketing message will provide the required unsubscribe method.

SebaHub complies with Canada's Anti-Spam Legislation (CASL). Withdrawing marketing permission does not prevent essential account, security, legal, or private-report communications.

6. Information sharing and third-party services

We do not sell personal information. Information may be shared only as reasonably needed with identity, hosting, database, storage, human-verification, email, moderation, security, analytics, or campaign service providers; with authorized SebaHub operators; or with legal and regulatory authorities when required by law. Service providers are expected to maintain appropriate privacy and security standards.

This website may link to maps, social platforms, or other external websites. Their privacy practices are governed by their own policies. Functional cookies or similar storage may be used for account sessions, security, accessibility, and website performance.

7. Safeguards

SebaHub uses reasonable administrative, technical, and physical safeguards intended to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, and destruction. These include provider-managed password handling, verified sessions, role-based operator access, private storage paths, moderation, logging controls, and limited public data projections. No system can guarantee absolute security.

8. Access, correction, withdrawal, and deletion

You may request access to or correction of personal information held by SebaHub. You may update communication preferences, decline optional location, and request account deletion or withdrawal of a permission, subject to legal, safety, fraud-prevention, and audit requirements. We may require identity verification before fulfilling a request.

Withdrawal applies going forward and may not require removal of media already lawfully used in completed print materials, archived records, or published campaign coverage where removal is not reasonably practicable. We will consider specific concerns in good faith.

9. Retention

• Abandoned uploads are scheduled for removal after 24 hours.
• Rejected or withdrawn community submissions and their private originals are scheduled for removal after 30 days.
• Private find evidence may be retained until 90 days after the case is resolved, unless a documented legal, safety, or dispute hold applies.
• Published community content may remain through the campaign and for 90 days afterward, with selected lawful campaign archives retained longer.
• Inactive account, legal-acceptance, security, and audit records may be retained for 12 months or as long as reasonably required to document consent, resolve disputes, enforce agreements, or meet legal obligations.

When information is no longer required, it will be securely deleted or anonymized where practical.

10. Policy changes and legal acceptance

We may update this policy periodically. The active version and effective date will be posted here. If material purposes or media rights change, account holders will be asked to review and actively accept the new version before using affected tools; we will not treat passive continued use as acceptance. Legal-acceptance records include the player subject, document type, version, document hash, action, and timestamp.

11. Photography, video & media notice

SebaHub may capture photography, video, audio, and other digital media during SebaHub-operated hunt activities. Players may also voluntarily submit photos, video, or audio through campaign reporting or community tools.

Where this notice applies and subject to the private-evidence exclusion below, participants grant SebaHub a non-exclusive, royalty-free, perpetual right to use lawfully captured or voluntarily submitted media for legitimate promotional, educational, editorial, advertising, public-relations, social-media, website, print, and archival purposes. Media may be edited, cropped, reformatted, captioned, combined, or published through current and future SebaHub channels.

Nothing in this notice transfers ownership of your likeness, image, voice, or identity. SebaHub will make reasonable efforts to respect concerns communicated before an organized activity and to avoid making an objecting participant the primary subject where reasonably possible.

Private-evidence exclusion: unapproved private report evidence and locations, ID details, cash evidence, private contact information, minor identities, and original report files are excluded from promotional reuse unless SebaHub obtains separate and specific authorization for that material. The report-publication section above governs the narrower approved Updates-page projection.

12. Contact information

Questions about this policy, privacy practices, media concerns, access requests, or correction requests may be directed to:

SebaHub
Email: [email protected]
Website: www.sebahub.com
Seba Beach, Alberta, Canada