GuessCountry

Privacy Policy

Last updated: 28 September 2026

This policy explains what personal data we process when you use GuessCountry (guesscountry.com), why we do it and what rights you have under the EU General Data Protection Regulation (GDPR) and Slovak data protection law. We keep data collection to a minimum: you can play every game without an account.

1. Who is responsible

The controller is TOMY s.r.o., Vodárenská 4610/106, 921 01 Piešťany, Slovakia, Company ID 46028242. For any privacy question or request, contact us at info@guesscountry.com. We have not appointed a data protection officer, as we are not required to.

2. What we process and why

2.1 Game data stored on your device

Your game progress, results, streak, statistics, settings (e.g. sound), a random player ID and your cookie choice are stored in your browser's local storage. This data stays on your device – we do not receive it. It is strictly necessary to provide the games you request (legal basis: Art. 6(1)(b) and (f) GDPR; storage exempt from consent under the Slovak Electronic Communications Act). You can delete it at any time by clearing your browser's site data.

2.2 Technical server logs

When you visit the website, our hosting provider automatically processes technical data such as your IP address, date and time of the request, requested page, browser and device type. We need this to deliver the website and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). Logs are kept only as long as necessary for security and troubleshooting and are then deleted.

2.3 Account and leaderboards (optional)

Registration is voluntary and only needed for leaderboards and friend groups. You sign in either with a one-time code sent to your email address or with “Continue with Google”. We then store:

  • your email address and a technical account ID (with Google sign-in also the basic profile data Google shares with us),
  • your nickname and the date and time you confirmed you are 16 or older,
  • your daily results: game, date, score, number of guesses, time, and the answers you gave (so the score can be checked on our server),
  • friend groups you create or join, and reports of inappropriate names you send.

Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR); checking results and handling reports also serve our legitimate interest in fair leaderboards (Art. 6(1)(f) GDPR). Only your nickname is shown on leaderboards and to members of your groups – never your email. Results you played on this device before signing in are added to your account when you sign in. We keep account data until you delete your account, which you can do at any time on your account page; everything linked to it (results, groups you own, memberships) is then deleted. Reports are kept for up to 12 months.

Minimum age: you must be 16 or older to register. We do not knowingly collect personal data from people under 16: if you tell us you are younger during registration, the sign-in record is deleted immediately and you can keep playing without an account.

2.4 Marketing emails (only with your consent)

If you tick the separate, unticked box to receive news and announcements of new games, we store your email address, nickname, the fact that you consented, the date and time of your consent and the exact wording you agreed to, and – if you unsubscribe – the date of unsubscribing (legal basis: consent, Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by writing to us; we keep the record of your consent for as long as necessary to prove it.

2.5 Analytics (only with your consent)

If you allow analytics cookies, we use Google Analytics 4 and PostHog (EU cloud) to understand how the games are used: pages visited, rounds finished, results shared, returning visits, and basic device and browser information linked to a pseudonymous ID. We do not use session recordings. Legal basis: consent (Art. 6(1)(a) GDPR). Analytics data is kept for no longer than 12 months.

2.6 Advertising (only with your consent, not active yet)

We may show ads in the future (e.g. Google AdSense). Ads will never appear while you are answering a question. Advertising cookies will only be used if you allow them in the cookie settings; otherwise any ads will be non-personalised. Legal basis: consent (Art. 6(1)(a) GDPR).

2.7 Push notifications (only if you turn them on)

If you enable notifications, we store the technical push subscription created by your browser and the date you last finished a daily challenge, so we can send you a daily reminder and a warning when your streak is about to end. Legal basis: consent (Art. 6(1)(a) GDPR). You can switch notifications off at any time in the game or in your browser settings; the subscription is then deleted.

2.8 Contacting us

If you email us, we use your email address and message to answer you (legitimate interest, Art. 6(1)(f) GDPR) and delete the correspondence when it is no longer needed.

3. Service providers (processors)

We only share data with providers who process it on our behalf and under a data processing agreement:

  • Hostinger – website hosting.
  • Supabase – sign-in, database for accounts and leaderboards, hosted in the EU (Frankfurt, Germany).
  • PostHog – analytics (EU cloud), only with your consent.
  • Google Analytics 4 (Google Ireland Ltd.) – visit statistics, only with your consent; IP addresses are not stored.
  • Google – “Continue with Google” sign-in and, in the future, advertising with your consent.
  • Browser push services (operated by your browser vendor, e.g. Google, Mozilla, Apple) – deliver push notifications if you enable them.

Where a provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses. We never sell your personal data.

4. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you,
  • have inaccurate data corrected,
  • have your data erased,
  • restrict processing,
  • object to processing based on legitimate interest,
  • data portability,
  • withdraw your consent at any time (e.g. via Cookie Settings) – this does not affect processing carried out before the withdrawal.

To exercise your rights, email info@guesscountry.com. We will reply within one month. You also have the right to lodge a complaint with the supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava 27, Slovakia, dataprotection.gov.sk.

5. Automated decisions

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

6. Changes

We may update this policy, for example when we launch accounts or ads. The date at the top shows the latest version; important changes will be announced on the website.

7. Contact

TOMY s.r.o., Vodárenská 4610/106, 921 01 Piešťany, Slovakia – info@guesscountry.com