Privacy
In short: Geopoch works without an account, without ads and without cookies. Your score stays in your browser. When the page is requested, our host processes technical access data. We measure how often the site is visited in aggregate with Cloudflare Web Analytics. The leaderboard is optional: only those who join with a nickname transfer a name and a result. A report about a question is also only sent to us when you submit it yourself.
1. Controller
Markus WimböckKelheimer Straße 12
81379 München
Germany
E-mail: markuswimboeck@gmail.com
2. Hosting with Cloudflare
This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare delivers the pages to your browser. When you open a page, the host processes technically necessary access data, in particular your IP address, the date and time of the request, the address requested and details of your browser.
The purpose is to deliver and protect the site. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). We use this data only in aggregate form (for example the number of requests) and to fend off attacks.
Cloudflare acts for us as a processor on the basis of its data processing agreement. Data may also be processed in the USA and in other countries. Cloudflare relies on the EU standard contractual clauses and participates in the EU-US Data Privacy Framework. How long Cloudflare keeps access data is determined by Cloudflare. Details are in Cloudflare’s privacy policy.
3. Cookies
Geopoch sets no cookies.
4. Storage in your browser
So that your streak, your daily result and your settings are kept, the game stores entries in your browser’s local storage (localStorage). This data stays on your device. It is not transferred to us or to third parties, unless you join the leaderboard (section 8) or report a mistake (section 9).
| Entry | Content | Duration |
|---|---|---|
geopoch-v1 | score, streak, a daily round in progress and the daily result of the Classic edition | until you delete it |
geopoch-v1-neue-zeit | score, streak, a daily round in progress and the daily result of the New Era edition | until you delete it |
geopoch-prefs | your settings for distances (kilometres or miles), year notation, time limit and look, and the edition you chose last | until you delete it |
geopoch-player | your nickname and your device key for the leaderboard (only set once you join) | until you delete your entry or the storage |
geopoch-device | random device key for “Report a mistake” (only set once you send a report) | until you delete your reports or the storage |
geopoch-reports | which questions you have already reported, and reports that could not be sent yet without a connection (five at most, seven days at most) | until you delete your reports or the storage |
geopoch-lang | your choice of language (only set once you choose a language) | until you delete it |
If your browser still holds entries from the test phase (ortszeit-v1, ortszeit-v1-neue-zeit), the game reads them once so that your streak is not lost.
The legal basis is § 25 (2) no. 2 TDDDG (German law): the storage is necessary to provide the functions you use when playing. You can delete the entries at any time in your browser settings (delete website data). The game also works without this storage, but then remembers nothing.
5. Audience measurement with Cloudflare Web Analytics
We measure how often Geopoch is visited. For this we use Cloudflare Web Analytics, a service of our host Cloudflare (address in section 2). When a page is opened, your browser loads a small measurement script from static.cloudflareinsights.com. It sends details of the page view to Cloudflare: the address requested, the page you came from, loading times and the type of browser, operating system and device. The country is derived from your IP address.
The script sets no cookies and stores nothing in your browser. According to Cloudflare, no fingerprint of your device is created, and you are not recognised across pages or days. We only see aggregate figures, for example views per day, per country and per page.
The purpose is to understand the use of the game in aggregate form and to find errors. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in audience measurement without profiles). Section 2 applies to the processing by Cloudflare, including in the USA. You can object to the measurement by blocking the script in your browser, for example with a content blocker. The game then works unchanged.
6. No ads, no other services
We use no advertising services and no other analytics services. Fonts, game scripts and map data are stored with our host. Only the measurement script from section 5 is loaded from another server.
7. Sharing your result
When you tap “Copy result”, your browser puts a short text on your clipboard. When you tap “Share”, your device opens its own share dialog with this text. We receive nothing of this. Where you send the text is up to you. The rules of the respective service apply there.
8. Leaderboard (optional)
You can enter your result of the daily round in a public leaderboard. This only happens if you type a nickname yourself and tap “Join”. If you do not, you play without any results being transferred to us.
When you join, we process: the nickname, a random device key (it is created in your browser; we only hold a hash of it), for each daily round your points and your guesses (the pin as coordinates, the year, the number of clues, the time per question) and the time of the entry. Only the nickname, points and streaks are publicly visible. Please choose a name that does not identify you. If you are under 16, please ask your parents before you join.
The data is stored in a database of our host Cloudflare (Cloudflare D1, location Western Europe). Section 2 applies to the processing by Cloudflare. To prevent abuse we count requests per day using a hash of your IP address. We do not store the IP address itself, and we delete the hashes after two days at the latest.
The legal basis is Art. 6 (1) (b) GDPR (providing the leaderboard you request). We delete daily results after 120 days, and a name without results after that as well. You can delete your entry yourself at any time: “Delete my entry” in the leaderboard removes the name and all results. If you have cleared your browser storage and can no longer reach your entry, write to us with the nickname and we will delete it.
We hide names that insult or deceive others. You can report such a name to us via “Report a name” in the leaderboard.
9. Reporting a mistake (optional)
After each question you can tell us via “Report a mistake” that something is wrong with a question. Only what you send yourself is transferred: the question, the kind of mistake you chose, the number of the hint where relevant, your short text (300 characters at most), a link if you give one, and the language, edition and time. Please do not write names, addresses or e-mail addresses in the text. You will not get a reply, because we do not collect any contact details here.
When you send a report for the first time, a random device key (geopoch-device) is created in your browser. We only hold a hash of it. It is used to recognise duplicate reports and to limit abuse (five reports a day at most). It is not derived from characteristics of your device and is not linked to the leaderboard. We do not store your IP address with the report; section 8 applies to the counting of requests. Our server never fetches the link you give.
The reports are stored in the same Cloudflare database as the leaderboard (section 8) and are not public. We use them only to check and improve questions. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in correct questions and in protection against abuse); Section 25 (2) no. 2 TDDDG applies to the device key in your browser. We delete the text and the link no later than 90 days after we have decided on the report, and the whole report after twelve months at the latest. “Delete my reports” in the game menu removes all reports from your device and the device key immediately.
10. When you write to us
If you send us an e-mail, for example to report an error, we process your e-mail address and the content of your message in order to reply and to check the error. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in handling your request). Our mailbox is with Gmail, a service of Google. Your message is therefore also processed by Google. We delete the message as soon as the matter is settled and there is no legal duty to keep it.
If you are under 16, please ask your parents before you write to us.
11. Your rights
You have the right to information about the data stored about you, to rectification, erasure and restriction of processing, to data portability and the right to object to processing based on Art. 6 (1) (f) GDPR. Write to us at markuswimboeck@gmail.com.
You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach, Germany.