Privacy policy

Data controller

The data controller is Paweł Szczabel, a sole trader at ul. Wygonowa 51/2A, 45-402 Opole, Poland, tax number (NIP) 9910361892.

For anything about personal data, write to kontakt@geofides.com.

Playing without an account

On your first visit to the play screen, your browser stores a random player identifier in local storage. It contains nothing about you; it only lets the game remember your answers and your score.

With every answer, our server receives this identifier, the spot you tapped on the globe, your points and the time of the answer. We never link this data to a name, an e-mail address or an IP address, so we cannot tell who you are.

The legal basis is our legitimate interest in providing the game you want to play (Article 6(1)(f) GDPR). Storing the identifier in your browser is strictly necessary for the game to work, so it needs no consent.

We keep results for as long as the game runs, as they feed round summaries and statistics. You can delete the identifier at any time by clearing this site's data in your browser; you will then start from scratch.

Account and GeoFides Pro

You don't need an account for the daily game. If you create one, we store your e-mail address, the date the account was created and your sign-in sessions. The sign-in code is sent through Resend (Resend, Inc., USA) from kontakt@geofides.com; it expires after 15 minutes.

Your round results, including those played earlier as a guest in this browser, and your GeoFides Pro status are linked to the account. The legal basis is the contract, that is providing the service you ask for (Article 6(1)(b) GDPR).

We keep account data for as long as the account exists. We will delete it if you ask at kontakt@geofides.com.

Remembering your language

The site sets a NEXT_LOCALE cookie with the code of the language you are reading it in (e.g. “en”), so that your next visit opens in the same language. It is a functional cookie, strictly necessary for a feature you chose.

The map (Mapbox)

The globe on the play screen comes from Mapbox (Mapbox, Inc., USA). To show the satellite imagery, your browser connects directly to Mapbox servers, which see your IP address and browser details. Mapbox also stores an anonymous identifier in local storage, which it uses to count map loads.

The game cannot work without this connection, so the legal basis is our legitimate interest. There is no map on the home page or the guide pages. Mapbox privacy policy: https://www.mapbox.com/legal/privacy

Statistics (PostHog)

To know how many people play and which questions are hard, we use PostHog (PostHog Inc.) with servers in the European Union. It works without cookies and stores nothing in your browser.

PostHog collects the pages you visit, clicks on page elements, your device and browser type, page errors and the points you score, never the spot you tap on the globe. Your IP address is used only to compute a hash that lets us count unique players, and it is not stored. We do not record sessions.

The legal basis is our legitimate interest in improving the game. PostHog privacy policy: https://posthog.com/privacy

Advertising (Google AdSense)

The game is funded by Google AdSense ads (Google Ireland Limited). On your first visit, Google shows a message where you decide whether Google and its partners may use cookies and similar technologies for advertising. If you do not agree, Google may show limited ads without personalisation.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to this site and other sites on the Internet.

You can opt out of personalised advertising in Google's Ads Settings: https://adssettings.google.com, and out of other vendors' personalised ads at https://www.youronlinechoices.eu. How Google uses data: https://policies.google.com/technologies/partner-sites

The legal basis for advertising is your consent (Article 6(1)(a) GDPR). You can change it at any time. The full list of Google's advertising partners and their privacy policies is in the consent message, under its options.

Hosting and database

The site is served by Vercel Inc. (USA), and game data is stored in a Convex database (Convex, Inc.) on servers in Ireland. Vercel keeps server logs with the IP address, date, requested page and browser type to keep the site running and secure. The logs are deleted automatically after a short time.

Transfers outside the European Union

Mapbox, Vercel, Convex, Resend and Google are US companies or linked to them. Data may be transferred to the USA under the European Commission's decision on the EU–US Data Privacy Framework or under standard contractual clauses approved by the European Commission.

Your rights

You have the right to access, rectify and erase your data, to restrict its processing and to data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time.

The game collects no data that identifies you. To find your results, we may ask for the player identifier stored in your browser (Article 11 GDPR).

You may also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or with the authority in your own country.

Children

The game asks for no personal data, so children can play it too.

Changes

If we change how we process data, we will update this page and the date at the top.