Privacy Policy for OpenGuessr.net

We are staunchly committed to protecting and meticulously safeguarding the privacy, confidentiality, and security of personal information relating to our website visitors and service users. This commitment extends across all our operations, systems, and processes.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for maintaining comprehensive oversight of how your personal information is collected, used, and protected throughout our systems.

We may process usage data (“usage data”), which comprehensively includes browser type, operating system, page views, navigation patterns, timing of visits, device information, and interaction metrics. This information is collected through automated logging systems, cookies, and analytics tools and may include game session duration, locations guessed, accuracy scores. The source of this data is our analytics software and server logs. We process this information for several important purposes, including improving game performance, optimizing user experience, analyzing player patterns, and enhancing service reliability, which enables us to deliver personalized gaming experiences, improve platform functionality, and maintain service quality. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.

We may process account data (“account data”), which comprehensively includes email address, username, password hash, account creation date, subscription status, and payment information. This information is collected through registration forms, account settings, and payment processors and may include preferred game modes, achievement history, and friend connections. The source of this data is the user during account creation and subsequent interactions. We process this information for managing user accounts, processing payments, maintaining game progress, tracking achievements, and facilitating multiplayer functionality, which enables us to provide secure access, personalized experiences, and social features. The legal basis for this processing is the performance of a contract between you and us and our legitimate interests in proper administration.

We may process profile data (“profile data”), which comprehensively includes display name, avatar, biography, location preferences, skill level, and gaming statistics. This information is collected through profile setup forms, gameplay history, and user preferences and may include achievement badges, favorite maps, and social connections. The source of this data is user input and automated game tracking systems. We process this information for personalizing user experience, facilitating community interactions, matching players for multiplayer games, and maintaining leaderboards, which enables us to create engaging social experiences, competitive gameplay, and community features. The legal basis for this processing is our legitimate interests in operating and improving our gaming platform.

User Rights:

Right to Access: You have the right to obtain confirmation about whether we process your personal data and request copies of this data. This includes the ability to view your stored personal information, verify the lawfulness of processing, and understand how your data is being used. To exercise this right, you can submit a formal request through our dedicated data access portal or contact our privacy team directly at [email protected]. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to confirm your identity.

Right to Rectification: You have the right to request correction of inaccurate personal data or complete any incomplete personal data we hold about you. This includes the ability to update profile information, correct account details, and modify gaming preferences. To exercise this right, you can either use our account settings interface or submit a formal correction request to our support team. We will respond within 15 days and may require account credentials, specific details about the information to be corrected, and supporting documentation to process your request.

Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances. This includes the ability to delete your account, remove specific data points, and withdraw previous consent for data processing. To exercise this right, you must submit a formal deletion request through our dedicated privacy portal, specifying the scope of data to be erased. We will respond within 30 days and may require account password verification, email confirmation, and identity verification documents to process your request.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data when certain conditions apply. This includes the ability to limit data usage, pause certain processing activities, and temporarily restrict access to your information. To exercise this right, you can submit a processing restriction request through our privacy settings or contact our data protection team. We will respond within 14 days and may require account verification, specific processing details, and justification for the restriction request.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit this data to another controller. This includes the ability to export your gaming history, transfer account information, and move personal data between services. To exercise this right, you can use our data export tool or submit a portability request through our support system. We will respond within 30 days and may require two-factor authentication, account ownership verification, and specific format preferences for the exported data.Data Processing and Security Measures

We process Service Data which includes account credentials, gameplay history, achievement records, and user profiles. This processing involves collection, storage, analysis, and retrieval, enabling us to provide personalized gaming experiences and track progress. For example, in the context of gaming, this includes maintaining leaderboards, tracking geographical guessing accuracy, and managing multiplayer sessions. The legal basis for this processing is legitimate interest and contract fulfillment, specifically to deliver our core gaming services and improve user experience.

We process Technical Data which includes device information, IP addresses, browser type, and system configurations. This processing involves automated collection, analysis, and storage, enabling us to optimize platform performance and ensure compatibility. For example, in the context of gaming, this includes managing game rendering settings and optimizing map loading speeds. The legal basis for this processing is legitimate interest, specifically to maintain service quality and technical functionality.

We process Communication Data which includes chat messages, forum posts, and support tickets. This processing involves monitoring, storage, and analysis, enabling us to facilitate user interaction and provide support. For example, in the context of gaming, this includes moderating multiplayer chat and addressing technical issues. The legal basis for this processing is legitimate interest and consent, specifically to maintain community standards and provide assistance.

We process Transaction Data which includes purchase history, subscription status, and payment information. This processing involves secure storage, verification, and analysis, enabling us to manage premium features and process payments. For example, in the context of gaming, this includes managing premium map access and custom challenge creation rights. The legal basis for this processing is contract fulfillment and legal obligation, specifically to provide paid services and maintain financial records.

We process Preference Data which includes game settings, display preferences, and customization choices. This processing involves storage and application, enabling us to personalize user experience and maintain session consistency. For example, in the context of gaming, this includes saving map preferences and difficulty settings. The legal basis for this processing is legitimate interest, specifically to enhance user experience and maintain service functionality.

Security Measures

Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.

We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.

Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.

Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.

We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.

All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.

International Data Transfers

We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Privacy Shield certifications, and Binding Corporate Rules. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies

International transfers are protected by GDPR standards, ISO 27001 requirements, and regional data protection regulations, ensuring compliance with local and international laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures

Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees

Data Retention

We maintain specific retention periods for different data categories:

Account Information: Retained for the duration of account activity plus 24 months after account closure to facilitate account reactivation and maintain game progress
Usage Data: Stored for 12 months to analyze platform performance and improve gaming experience
Transaction Records: Kept for 7 years to comply with financial regulations and handle disputes
Communication History: Maintained for 18 months to support user inquiries and resolve community issues
Technical Logs: Preserved for 6 months to investigate security incidents and optimize performance

These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences

Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for OpenGuessr.net

Essential cookies serve critical functions for our gaming platform’s core operations. They process authentication tokens, session identifiers, and security parameters to enable seamless gameplay and user interactions. For example, these cookies maintain your active gaming session while you explore different global locations and track your progress during challenges.

Essential cookies are fundamental to website functionality. These cookies manage user authentication, maintain secure connections, and ensure proper site operations. We use them specifically for:
– User authentication during gameplay sessions
– Security measures to protect user accounts
– Basic site operations including map loading
– Session management for multiplayer games
– Technical stability during location transitions

Functional cookies enhance your experience by remembering your preferences. They enable:
– Language preferences for international players
– Region-specific content delivery
– User interface customization for gaming controls
– Feature optimization for different game modes
– Personalized settings for challenge difficulties

Analytics cookies help us understand user behavior. They collect information about:
– Page interactions during gameplay
– Navigation patterns across different maps
– Feature usage in various game modes
– Session duration for challenges
– User preferences in location selection

Performance cookies assess and improve website operation by:
– Monitoring site speed during location loads
– Identifying technical issues in gameplay
– Optimizing content delivery for map renders
– Analyzing user experience in different regions
– Tracking system performance during peak gaming hours

Cookie Management

You can control cookie preferences through:
– Browser settings
– Cookie consent tools
– Privacy preferences
– Account settings

GDPR Compliance

For EU residents, we ensure:
– Explicit consent mechanisms before gameplay
– Data minimization in score tracking
– Purpose limitation for collected information
– Storage limitations on game history
– Processing transparency in user statistics

CCPA Compliance

California residents have additional rights:
– Right to know about personal information collected during gameplay
– Right to delete personal data including game history
– Right to opt-out of data sales
– Right to non-discrimination in service access
– Right to access collected information about gaming activities

COPPA Compliance

Regarding users under 13:
– Age verification requirements before account creation
– Parental consent procedures for young players
– Limited data collection during gameplay
– Special protection measures for minor accounts
– Parental access rights to account information

Updates and Changes

Policy updates involve:
– Regular review procedures
– User notifications of significant changes
– Consent renewal when required
– Clear change documentation
– Continuous compliance monitoring

Contact Information

For privacy-related inquiries:
– Primary Contact: [email protected]
– Response Time: Within 48 hours
– Verification Required: For data-related requests
– Available Support: Privacy concerns, data requests, rights exercise

This policy was created specifically for openguessr.net and covers all associated services within the gaming industry.