Effective May 22, 2026

Privacy Policy

Overview

This Privacy Policy explains what information GeoGame collects, with a specific focus on Google user data accessed through Google Sign-In. GeoGame is a browser-based geography guessing game that offers an optional Google account sign-in. You can also play as a guest without signing in.

Google User Data We Access

When you choose to sign in with Google, GeoGame requests only the standard OAuth scopes "openid", "email", and "profile" through Supabase Auth. From these scopes we receive: your Google account email address, your verified email status, your Google account unique identifier (the OpenID "sub" claim), your display name, your locale, and your profile picture URL. GeoGame does not request, access, or read any Google API data beyond these basic sign-in claims. GeoGame never accesses Gmail, Google Drive, Google Calendar, Google Contacts, YouTube, Google Photos, or any other Google service or API.

How We Use Google User Data

The Google user data listed above is used only to: (1) authenticate you and create or sign you into your GeoGame account; (2) display your name and avatar inside the game so you and other players can identify your guesses, scores, and party membership; (3) link gameplay records such as rounds, guesses, scores, and leaderboard entries to your account; and (4) contact you about account-related matters at the email address associated with your Google account. We do not use Google user data for advertising, profiling, training AI or machine learning models, or any purpose unrelated to operating GeoGame.

How We Store and Protect Google User Data

Your Google account identifier, email, display name, and avatar URL are stored in our Supabase Postgres database, which is hosted on infrastructure operated by Supabase. Data is transmitted over HTTPS/TLS. Access to the database is restricted to GeoGame maintainers using authenticated, encrypted connections. Supabase manages your authentication session through short-lived access tokens and refresh tokens that are stored in your browser via secure cookies and local storage. GeoGame does not store your Google password and never sees it.

Sharing of Google User Data

GeoGame does not sell or rent Google user data. GeoGame does not share Google user data with third parties for their own purposes. We use Supabase strictly as our authentication and database service provider, acting on our behalf to process the data described above. Your display name and avatar are visible to other players in shared contexts you choose to enter, such as party games and public leaderboards. We may disclose data when required by law or to protect the safety and integrity of GeoGame and its players.

Data Retention and Deletion

Google account data linked to your GeoGame account is retained while your account exists so you can sign back in and keep your game history. You can request deletion of your GeoGame account and all associated Google user data by emailing [email protected]. We will delete or anonymize your account-linked data within a reasonable period after a verified request, except where retention is required by law or for fraud prevention.

Other Information We Collect

Independent of Google sign-in, GeoGame stores the gameplay data needed to run the game: rounds you start, panorama and target locations served to you, your map guesses, your scores, party membership, and basic timestamps. We may also collect minimal technical data such as request logs and error reports for diagnosing problems and preventing abuse. Guest players are identified only by a temporary anonymous identifier and are not asked for personal information.

Third-Party Services

GeoGame relies on the following service providers: Supabase for authentication and database; Google Identity Services for the Google Sign-In flow; and Google Maps Platform (Maps JavaScript API and Street View) for rendering maps and street-level panoramas. Your interactions with Google Maps and Street View are subject to the Google Privacy Policy at https://policies.google.com/privacy and the Google Maps/Google Earth Additional Terms of Service at https://maps.google.com/help/terms_maps.html.

Cookies and Local Storage

GeoGame uses cookies and browser local storage to keep you signed in, remember local game settings, and run the game. Supabase authentication tokens are stored using secure, SameSite cookies and browser storage. We do not use third-party advertising or cross-site tracking cookies.

Your Choices

You can revoke GeoGame's access to your Google account at any time at https://myaccount.google.com/permissions. You can sign out at any time from within GeoGame. You can play as a guest without granting any Google access. To request a copy or deletion of your data, contact [email protected].

Children's Privacy

GeoGame is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page. Continued use of GeoGame after an update means you accept the revised policy.

Contact

For privacy questions, data access requests, or account deletion requests, contact the GeoGame maintainer at [email protected].