Privacy notice — Orbweave (draft v1, pending legal review)

Orbweave is operated by Blackhold Group Pty Ltd (Australia) through its BlackCrystal games arm. This notice explains what Orbweave records, why, and what it never records. A reviewed version from our lawyers will replace this draft; the design principles below will not change.

What Orbweave is

Orbweave is the network behind the local sponsors you see in BlackCrystal's games. Local partners ("Weavers") sign up shops as sponsors and place QR codes. When a player scans a code, installs a game and plays, Orbweave records that the install came through that code, so the Weaver is paid and the sponsor can see that the sponsorship works.

Players: what we record about you

• When you scan a code we record the code, the time, and one-way hashes of your device's user-agent string and network address. We cannot turn those hashes back into your device or address; they exist only to spot abuse.
• When a game tells us an install came through a code, it sends a random install reference — never your name, email, phone or account. Orbweave never receives the content you create in a game.
• When you redeem a sponsor's offer, the game sends a redemption reference and, optionally, a player reference the game chose. Orbweave does not know who you are.
• Orbweave never records your location. Sponsor lists are looked up by the town you are in, on the game's side.

Weavers: what we record about you

• What you give us when you apply and in your console: name, email, phone, home town, country, username, legal name and business number for payouts, and Australian bank details for payouts (BSB and account number).
• Everything you do in the Loom (towns claimed, leads, codes, messages to HQ) and every cent you earn, itemised in Silk.
• Bank details are visible only to you and to HQ's payout run. They are never shown to other Weavers, sponsors or partners.

Sponsors: what we record about you

• Business name, category, address and a contact person, the sponsorship packs you buy, the offer you give players, and each redemption. Payments happen in the game's sponsor console, not in Orbweave; Orbweave keeps the reference and the amount.

What we do with the data

• Pay Weavers correctly and show sponsors that sponsorships work.
• Build town-level statistics (scans, installs, active players, sponsors, redemptions by town and business category). These statistics are aggregates and never identify a player.
• We do not sell personal information. Aggregated town statistics may be shared with partners and sponsors.

Retention

• Scan hashes and install references are kept while the related sponsorship or Weaver relationship is active and for up to 24 months after, then deleted or anonymised.
• Ledger and payout records are kept for 7 years as required by Australian tax law.

Your rights

• Weavers and sponsors can see and correct their details in their console or by contacting HQ. You can ask us to delete your account; ledger records that the law requires us to keep are retained.
• Players who want a scan or install reference removed can contact us with the code and approximate time; we will delete what we can identify.

Security

• All traffic is encrypted (HTTPS). Passwords are hashed with scrypt. Two-factor authentication is available on every account. Access is logged. Backups are encrypted at rest once the encryption key is installed.

Weavers: the phone app and the Top 5

• The Weaver app signs in with your Weaver code and Loom password; your phone holds a per-device token that HQ can revoke. The app shows you only your own numbers.
• Field-log entries and the photos you attach go to HQ only; they are never public and never shown to sponsors or players. Photos are stored on Orbweave's own server.
• Your optional blurb and birthday are used only for the gift-app programme; the birthday is visible to HQ alone and never exported.
• The Top 5 Weavers board ranks Weavers on sponsor payments received; it shows first name and town only. It uses the payment records already in the Loom and nothing about players.

Contact

BlackCrystal / Blackhold Group — jason@blackhold.group (or message HQ from the Loom).