Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how DevSutes ("DevSutes," "we," "us," or "our"), operated by Jesse Suter, collects, uses, shares, and protects personal information in connection with our websites and map applications, including our marketing site, the business owner dashboard, and the interactive visitor maps and games we host for agritourism venues (collectively, the "Services").

By using the Services you agree to this Policy. If you do not agree, please do not use the Services.

1. Who we are

DevSutes provides GPS maps, scavenger hunts, and related tools to agritourism venues such as corn mazes and u-pick farms. Depending on the context, DevSutes acts as the data controller for its own account holders and as a service provider/processor on behalf of the venues ("hosts") that use our maps with their visitors.

2. Personal information we collect

Account information (venue operators)

When you create an operator account we collect your name, business name, email address, postal address, and (optionally) your website. Your password is stored only in hashed form. Payment card details are collected and processed by our payment processor, Stripe, and are not stored on our servers; we retain only a Stripe customer identifier.

Information from visitors who use the maps and games

Leaderboard entries. If you submit a result to a venue's leaderboard, we collect the display name and city you enter, and — only if you choose to provide it and affirmatively consent — your email address.
Location data. If you enable location on a map, your device's GPS location is used to show your position and reveal the map as you explore. At venues that turn on location logging, approximate coordinates you visit may be recorded to help the venue improve the accuracy of its map. You can turn location off at any time using the in-app control or your device settings.
Usage, device, and analytics data. We and our analytics providers automatically collect information about how the Services are used, including a randomly-generated visitor identifier, session identifiers, the referring web address, pages and features used, timestamps, and technical information such as IP address, browser type, and device type.

Communications

If you contact us or fill out a form, we collect the information you provide.

3. How we use personal information

To provide, operate, and maintain the Services, including leaderboards and maps;
To display your position and progress when you enable location;
To measure and improve usage, reliability, and the accuracy of venue maps;
To send transactional messages such as email verification and password resets;
To process operator subscriptions and payments through Stripe;
To protect the security and integrity of the Services and prevent abuse;
To share a leaderboard entrant's email with the host they consented to, as described below;
To comply with legal obligations and enforce our terms.

4. Cookies and similar tracking technologies

We use cookies, browser local/session storage, and similar technologies to keep you signed in, remember your progress and preferences, generate the pseudonymous visitor and session identifiers described above, and measure usage. Specifically:

Essential storage: a login token (for operators) and gameplay/progress state stored in your browser.
Analytics: Google Analytics (on our marketing site) and Microsoft Azure Application Insights, which set identifiers and collect usage and device data, including IP address.
Map imagery: loading map tiles and fonts causes your browser to contact third-party providers (see Section 5), which receive your IP address as a technical necessity.

We use first-party, privacy-friendly usage measurement to understand how our website and maps are used — such as which pages are visited and how visitors arrive (aggregate activity tied to a per-visit identifier, not linked across your visits, and processed on our own servers). Optional analytics — Google Analytics and Microsoft Azure Application Insights — are off by default and only run if you turn them on using the control in the site footer. We honor the Global Privacy Control (GPC) and "Do Not Track" browser signals: if your browser sends either, optional analytics stay off. You can change your choice from the footer, control cookies through your browser settings, and opt out of Google Analytics using Google's browser add-on.

5. How we share personal information

We do not sell your personal information for money. We share it only as described here:

With the venue host you chose. If you consent to share your email on a venue's leaderboard, we make your leaderboard entry (name, city, and email) available to that host so they can contact you, for example about prize drawings or their events. The host's own use of your information is governed by the host's practices, not this Policy.
Service providers. We use trusted providers to run the Services, including: Microsoft Azure (hosting, database, Application Insights analytics, and Azure Maps/Bing Maps imagery and Blob storage); Google (Analytics, Google Fonts, and map tiles); the OpenStreetMap Foundation (map tiles); Stripe (payment processing); Microsoft 365 / Outlook (transactional email); and Microsoft Forms (contact form). These providers may process data in the course of providing their services.
Legal and safety. We may disclose information to comply with law, enforce our terms, or protect the rights, property, or safety of DevSutes, our users, or the public.
Business transfers. Information may be transferred as part of a merger, acquisition, financing, or sale of assets.

Some analytics and imagery providers may use cookies or receive your IP address in ways that could be considered a "sale" or "sharing" of personal information under certain state laws. To opt out, adjust your browser settings or contact us at jessesuter@devsutes.com.

6. Your privacy choices and rights

Depending on where you live (including California and other U.S. states with comprehensive privacy laws, and Canada under PIPEDA), you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. You also may:

Turn location tracking on or off at any time using the in-app control or your device settings;
Control cookies and local storage through your browser;
Ask us to access, correct, or delete your account or leaderboard information.

To exercise any of these rights, email us at jessesuter@devsutes.com. We will verify your request before acting on it and will not discriminate against you for exercising your rights. Leaderboard entries are also managed by the venue host; you can ask either the host or us to remove an entry.

7. Children's privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child has provided us personal information, please contact us at jessesuter@devsutes.com and we will take steps to delete it. Parents and guardians may contact us to review or request deletion of a child's information.

8. Data retention

We keep account information until you delete it or ask us to. Leaderboard entries are kept until you or the venue host delete them, or until about eight months after they are submitted, whichever comes first, after which they are deleted automatically. Automatically-collected usage/analytics events are retained for approximately 13 months and then deleted. Some providers (such as our analytics providers) retain data under their own schedules.

9. Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Where your information is processed

We are based in the United States and process personal information there. If you access the Services from Canada or elsewhere, you understand your information will be processed in the United States, which may have different data-protection laws than your jurisdiction.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact us

If you have questions or requests regarding this Policy or your personal information, contact us at:

Jesse Suter
240 E College Ave, Westerville, OH 43081
jessesuter@devsutes.com