What we hold about you, who else touches it, and how to get a copy or get rid of it.
Last updated 25 October 2026.
Midpack Hero is made in Wellington by Molehill Creations and Trail Running NZ. Two of us, so the people reading your data are the people answering your mail.
The New Zealand Privacy Act 2020 covers everything here. Questions, or any of the requests at the bottom of this page, go to ping@midpackhero.com or through the contact form.
No age, no location, no phone number and no payment details. The game is free and nothing in it costs real money, so it has no reason to ask.
Your runner, not you. Other players see your runner's name and nickname, level, division, race results, the ground and marks they hold, the notes they've written, and how they're going: load, condition and form. A runner's state is public in the way it would be at a start line.
What they can't see is what your runner is: the qualities and Reputation stay yours. Nobody else ever sees your email address or the name you signed up with.
The ladder and live race pages are public, so anybody can watch a race without an account. Ground you send in is credited to your runner once it's on the board.
Your browser reads the file. You crop it to the stretch you want, and only that stretch is sent: positions and heights, nothing else. The ends you trim off, which is usually where your front door is, never leave your device. Neither do the times in the file.
A person reads every submission before it goes on the board, and once it's on the board its line is public.
The teaser needs no account. We keep each run so its share link works: the choices, the ending, any handle you typed, and which site sent you there.
The teaser mailing list holds an address and nothing else, and is never joined to an account. Every email has a one-click way off. If you leave, we keep the address only so we remember you said no.
The public pages run a visit counter, on our own server. It stops at the login, so nothing past it is counted. It records the page, where you came from, your browser and operating system, whether you're on a phone, and your country. It uses your IP address to work out the country and doesn't keep it. It sets no cookie and doesn't know who you are.
No advertising cookies and no third-party scripts. Every page loads from this site alone.
We don't sell any of it, or share it for advertising. These are the services that handle some of it for us, and exactly what each one gets.
The contact form goes to our own support desk, with the page you were on, your browser, and your account if you're signed in, so we can see what you saw.
There's no Strava connection, no watch sync and no sign-in with anybody else. The only route data we ever hold is a stretch of GPX you chose to send.
It's on your account screen, and it asks for your password. It happens straight away and for good. There's no grace period, and we can't put any of it back.
It removes the account, every runner on it, the log, the feed, your notes, your kit, your push subscriptions and your sign-ins. Ground you sent in stays on the board without your runner's name on it, and so do the marks other runners have set on it. Feed lines in other players' games that mention your runner by name stay in their feeds.
A copy can outlive the deletion in a database backup, until that backup is deleted.
Teaser runs and the mailing list aren't tied to an account, so deleting one doesn't touch them. Ask us and we'll take them off.
Under the Privacy Act you can ask for a copy of what we hold about you, and ask us to correct anything that's wrong. Write to ping@midpackhero.com. There's no button for it, so one of us does it by hand, within 20 working days.
Most of it you can fix yourself on your account screen. If you think we've got something wrong and we can't sort it out, you can complain to the Office of the Privacy Commissioner.