Malmö Street Quest · last updated 1 September 2026
The short version. This is a free walking game. It has no accounts, never asks for your location, runs no analytics or advertising, and takes no payments. What it stores is a team name you invent, which checkpoints you have found, and any message you choose to send the organiser.
Malmö Street Quest is run by Vladimir Kosilko as a private individual, not a company. Under the GDPR I am the data controller.
For anything in this policy, including deleting your data, write to privacy@malmo.quest.
Why: To show your progress back to you, and to label your messages for the organiser.
Kept: 90 days after your last activity.
Why: To tell one team's progress from another's. It is not derived from you, your device, or anything you own.
Kept: 90 days after your last activity.
Why: The game itself. A stamp is proof you read a word printed on a sign, not a record of where your phone was.
Kept: 90 days after your last activity.
Why: So a real person can answer you when something is wrong.
Kept: 90 days after the conversation ends.
Why: A display name, a short note you write, and your stamp count, shown publicly if approved.
Kept: Until you remove it. You can take it down yourself at any time.
Why: Keeping the site up and blocking automated attacks on the organiser login.
Kept: 30 days.
Your progress also lives in your own browser's storage so the quest works offline. That copy is on your device, not mine. Clearing site data for malmo.quest erases it.
You cannot pay for anything here. The quest is free, and there is no checkout, no card form, and no payment code on this site.
There is a link inviting you to buy the organiser a coffee. That link takes you to Buy Me a Coffee, a separate company that is its own data controller. If you donate there, everything about that payment happens on their systems under their privacy policy.
This site receives no card number, no billing address, and no name from them. It is not told whether you donated at all, which is why the wall works on trust rather than verification.
Nothing is sold, rented, or shared with advertisers. There is no advertising relationship of any kind.
Under the GDPR you can ask to see your data, correct it, delete it, restrict or object to its use, or receive a copy. Write to privacy@malmo.quest and I will answer within 30 days.
Because there is no account, please include your team name so the right records can be found.
If you are unhappy with how this is handled, you can complain to the Swedish Authority for Privacy Protection, IMY.
The quest is family friendly and can be walked by anyone. It asks for no personal details, so a child can play it without handing over anything. Please do not enter a real name, a school, or a contact detail in a team name, a message, or a wall entry.
If this policy changes, the date at the top changes with it. There is no mailing list to notify, because there are no email addresses to notify.