Privacy Policy

What we keep

• Without an account: an anonymous identifier tied to a cookie in your browser, the date of your last visit and your games (map guesses, scores and times).
• With an account, which is optional: your email, if verified, your language, your email preference and your games. If you sign in with Google, also your name and Google identifier.
• Error reports: the reason, the optional comment and the game. We can see the name of whoever reported, if there is one.
• Technical data: IP address and browser details, in sessions and server logs.

The ranking is public and shows only a random alias and the score. Your name and email don't appear.

Why we use it

To provide the game you asked for (saving games, signing in, building the ranking, sending account emails) and, as a legitimate interest, to keep the site secure, prevent abuse, measure visits and send account holders the daily reminder. You can turn off the reminder and report updates at any time in settings or with the link in the email; the sign-in link and deletion confirmation are still sent.

Cookies

We use cookies only to make the game work (session, security, sign-in and tying games to your browser) and to remember theme and language. They last from 2 hours to 400 days. Other preferences stay in your browser only.

Who else receives data

• Cloudflare: all site traffic, with IP and access details.
• Umami: measures visits without cookies. It receives the page visited, including the game's code in the address, browser details and where the visit came from. According to Umami, the IP is used on the spot to estimate location and isn't kept in the analytics records, but it may appear in technical logs. This data stays in the United States.
• OpenFreeMap: delivers the map directly to your browser and receives the IP.
• Resend: sends account emails and the daily reminder, and receives your email.
• Google and Buy Me a Coffee: only if you sign in with Google or click to support.

The site runs on our own server in Portugal. These services have their own policies and may process data outside your country.

How long

Accounts, games and reports are kept while the game exists or until you ask for deletion. Sessions expire after 2 hours of inactivity, sign-in links are deleted a day after they expire and server logs are replaced over time. Umami keeps its data for a limited period. Backups may keep the data for a limited time after deletion.

Your rights

Under the LGPD and the GDPR, you can ask for confirmation that we process your data, access, a copy and portability, correction, anonymization, blocking or deletion, to know who we share it with and how to refuse or withdraw consent, and you can object to certain uses or ask for them to be limited.

Write to [email protected] from your account's email and we reply within 7 days. If the account has no stored email, tell us how to confirm it's yours. Deletion removes the account and the games, which leave the ranking, and can't be undone.

Without an account, we can't find your games from a request. If you clear your cookies, they're no longer tied to you, but they stay on the server.

You can also complain to the ANPD, in Brazil, or to the data protection authority of your country, in Europe.

Children

The game is open to all ages and doesn't check anyone's age. Children should have a parent or guardian with them, especially to create an account, which stores an email address. Parents and guardians can ask for deletion through the same contact.

Changes

When this policy changes, we update the date above.