Privacy Policy

MapGuesser ("we", "our") is a daily geography guessing game at mapguesser.gg. This policy explains what personal data we collect, why we collect it, how we use and share it, and the choices you have. It applies to the website and all game modes on it: Daily, Practice, Duels, and Party.

We collect the following categories of data:

• Account data. When you sign in with Google, we receive your name, email address, and profile picture from Google. You can also set a display name and build a custom avatar; we store those choices.
• Gameplay data. Your scores, per-round guesses (map coordinates you place, distances, and points), streaks and streak freezes, hints used, leaderboard entries, duel results, and game history. This is the core of the game: without it we cannot score rounds, keep streaks, or rank leaderboards.
• Social and party data. Friend codes and friend connections you create, party room codes, the display names players enter when joining a party, party guesses and scores, and emotes sent during party games.
• Approximate location. We derive a city-level location from your IP address (city, region, country). We use it for social features such as showing your country flag on leaderboards, and to understand where players are in aggregate. We refresh it at most once per day. We never collect GPS or other precise location data. The only precise coordinates tied to you are the guesses you place on the game map.
• Device and technical data. A random device identifier we generate for anonymous players, your IP address, and basic technical data such as browser type. Our hosting provider also records standard server logs.
• Subscription data. If you buy a MapGuesser Passport subscription, our payment provider Stripe processes your payment. We receive and store your subscription status, plan, and renewal dates. We never see or store your full card number.

If you play without an account, we store only a random device identifier in your browser's local storage plus the gameplay and approximate location data described above. Anonymous scores and streaks work on that device only.

• Run the game. Scoring rounds, tracking streaks, saving progress, syncing your data across devices when you are signed in, and powering leaderboards, duels, parties, and game history.
• Operate your account. Signing you in, keeping you signed in, and linking your anonymous device data to your account when you first sign in.
• Process subscriptions. Activating and managing your Passport subscription and enforcing free-tier limits (such as extra practice rounds per day and party hosting quotas).
• Improve the game. Aggregate, de-identified analytics such as how many games are played per day and which cities are hardest. We also log pseudonymized interaction events, such as which buttons are tapped and how sessions flow, tied only to your random device identifier or account. Raw events are deleted after 30 days; only aggregate counts are kept. We use these to tune difficulty and fix bugs.
• Safety and abuse prevention. Detecting cheating, spam, or abuse of leaderboards and party rooms.

We do not sell your personal data. We do not use your personal data to build advertising profiles.

We share data with the following providers, only as needed to operate the game:

• Supabase hosts our database and handles authentication. It stores your account, gameplay, and location data.
• Vercel hosts the website and provides privacy-friendly analytics (page views and performance, no advertising use).
• Google provides the "Continue with Google" sign-in option and, through Google AdSense, the ads shown on the site. AdSense may set cookies to serve and measure ads, including personalized ads based on your interests unless you opt out. You can manage ad personalization in your Google ad settings.
• Stripe processes Passport subscription payments. Payment details you enter go directly to Stripe under Stripe's privacy policy.

Each provider processes data under its own privacy policy. We do not share your data with data brokers or other third parties.

• Strictly necessary. Sign-in session tokens, security tokens, and load-balancing cookies required for the site to work.
• Preferences and gameplay. Your anonymous device identifier, saved game progress, avatar choices, and free-tier usage counters, stored in browser local storage.
• Analytics. Vercel Analytics collects aggregate page-view and performance data.
• Advertising. Google AdSense may set cookies to serve and measure ads. You can block or delete cookies in your browser settings; the game remains playable, but sign-in sessions and saved progress rely on local storage.

• Account and gameplay data is kept while your account is active and for a reasonable period afterward to support features like all-time leaderboards and game history.
• Anonymous device data persists until you clear your browser storage.
• Raw analytics events are deleted after 30 days; only aggregate daily counts are kept.
• Approximate IP-based location records are refreshed at most daily; older entries are overwritten.
• Server logs are retained for a limited period for security and debugging, then deleted.

We protect your data with encrypted connections (HTTPS), authenticated database access with row-level security, and limited admin access. No method of transmission or storage is completely secure, but we apply industry-standard safeguards appropriate to a game service.

• You can play without an account; anonymous data stays on your device.
• You can sign out at any time from the profile menu.
• You can change your display name and avatar at any time.
• You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated game data by contacting us at the email below. We will confirm once it is removed. Deleting your account removes your scores, streaks, friends, and leaderboard entries.
• You can opt out of personalized ads in your Google ad settings.

MapGuesser is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Our providers (Supabase, Vercel, Google, Stripe) may process and store data in the United States or other countries where they operate. By using MapGuesser, you understand your data may be transferred and processed outside your country of residence.

We may update this policy as the game evolves. Material changes will be noted here with a new "last updated" date. Continued use of MapGuesser after changes take effect means you accept the updated policy.

For privacy questions, data requests, or deletion requests, contact us at support@mapguesser.gg.