🔒 Privacy Policy
Last updated: October 15, 2026
Who we are
3dOkieDrops is a community treasure-hunting game based in Oklahoma, USA. Members hide and find 3D-printed "drops", scan their QR codes, and share their finds. This Privacy Policy explains what information we collect on 3dokiedrops.com, how we use it, and the choices you have. By using the site you agree to this policy.
What we collect
- Account information: username, email address, password (stored only in scrambled/hashed form), and anything you add to your profile, such as your drop name, first and last name, phone number, or mailing address.
- Drop scans: which drops you hide, find, relocate or report, and when.
- GPS location: your device's location at the moment you log a drop find or claim a giveaway win, so we can confirm you are at the drop. We do not track your location at any other time.
- Photos and videos you upload, such as find photos and find videos, and whether you agreed that they may be posted.
- Purchases and memberships: what you bought and when. Card payments are handled by our payment processors (Square and Stripe); we never see or store your full card number.
- Points, rewards and giveaway entries.
- Basic technical data: IP address, browser and device type, and pages visited, used to keep the site secure.
How we use it
- To run the game: show maps, record finds, check that you are near a drop, award points and rewards, run giveaways, and prevent cheating.
- To manage your account and membership and to send messages about your account, orders, Drop Bags and events.
- To post community photos and videos that members agreed to share (see "YouTube API Services" below).
- To keep the site safe, fix problems and improve it.
Who we share it with
We do not sell or rent your personal information. We share it only with services that help us run 3dOkieDrops, and only what they need:
- Our web host (Hostinger).
- Payment processors (Square, Stripe).
- Google / YouTube and Facebook, only for photos and videos the member agreed to post.
- Printing and email services we use to fill orders and send messages.
- Authorities, if the law requires it or to protect someone's safety.
YouTube API Services
3dOkieDrops uses YouTube API Services to post approved community videos to our own YouTube channel (https://www.youtube.com/@3dokiedrops) and to show the list of videos on that channel to our admins.
- By using this feature you agree to the YouTube Terms of Service: https://www.youtube.com/t/terms
- Google's Privacy Policy applies to YouTube: https://policies.google.com/privacy
- You can revoke access any time at https://security.google.com/settings/security/permissions
- What we access and store: one OAuth sign-in token for OUR OWN channel only (stored on our server, outside the public website, readable only by our server account), and an upload history for each video we post: YouTube video ID, title, privacy setting, who uploaded it (the admin), and the date. We do not access viewers' YouTube data, and visitors never sign in to YouTube through our site.
- How this data is deleted: the "Disconnect" button on our YouTube admin page revokes the token at Google and deletes it from our server immediately. If access is revoked another way (for example on the Google permissions page), our daily check detects it and deletes the stored token within 7 days at most (normally within a day). Upload history records are deleted on request — email admin@3dokiedrops.com.
- Names on videos: community videos posted to our channel show the member's display name (their drop name) or "A 3dOkieDrops Seeker", never their username, unless the member ticks the box allowing their username to be shown.
- Videos are only posted when the member ticks that it's OK to post on the 3dOkieDrops YouTube channel, and every video is reviewed by a person first. Videos we don't post are deleted from our server, and posted videos are deleted from our server once YouTube has them.
- People in videos: the member who sends a video must also confirm that everyone recognizable in it agreed to be posted publicly, and that for anyone under 18 a parent or guardian agreed. With each video we keep a consent record: the member's seeker ID, the date and time, the IP address it was sent from, and which version of the consent wording they agreed to.
- Removal for anyone in a video: if you appear in a video we posted (or you are the parent or guardian of a child who does), email admin@3dokiedrops.com with the video link and we will take it down from our website and our YouTube channel, even if you weren't the one who sent it.
How long we keep it
- Account and profile information: while your account is open.
- Game history (finds, points, rewards): while your account is open, so leaderboards and records stay accurate.
- Photos/videos waiting for review: until they are approved or rejected; the server copy is then deleted.
- Video consent records (seeker ID, time, IP address, consent wording version): kept with our records of the video so we can show the consent was given; deleted on request together with the video's upload history.
- Purchase records: as long as tax and accounting laws require.
- YouTube upload history: until you ask us to delete it, or until it is no longer needed.
How to request deletion
Email admin@3dokiedrops.com from the email address on your account (or tell us your username) and ask us to delete your data. We will:
- Delete your account, profile, and contact details.
- Delete or anonymize your finds, points, rewards and giveaway entries.
- Delete any photos or videos you sent that are still on our server, and take down posts of your photos/videos from our website and our YouTube channel if you ask.
- Delete YouTube upload history records about your videos.
We will confirm and complete your request within 30 days. Some records may be kept where the law requires it (for example, purchase records).
Cookies and sessions
We use cookies to keep you signed in (a login session cookie) and to remember simple settings on your device. We do not use advertising or tracking cookies, and we do not sell cookie data. If you block cookies you won't be able to stay signed in.
Children's privacy
3dOkieDrops is a family game. Children under 13 should play with a parent or guardian, and a parent or guardian should create and manage the account. We do not knowingly collect personal information from children under 13 without a parent's permission. If you believe this has happened, email admin@3dokiedrops.com and we will delete it.
Security
We use reasonable safeguards — secure HTTPS connections, hashed passwords, limited admin access, and credentials kept outside the public website — but no website can be 100% secure.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. Using the site after a change means you accept the updated policy.
Contact
3dOkieDrops — Oklahoma, USA
Email: admin@3dokiedrops.com
Website: https://3dokiedrops.com