Privacy policy

Controller

Represented by Mustafa Ali. For any privacy question, an email is all it takes.

In short

• Play without an account: a cookie with a random identifier remembers your progress. You only give a name if you join a group or play a duel or live duel.
• Account optional: if you buy GeoFootballer Pro or want your streak, name, groups and favourite club on more than one device, you sign up for free: with your email address, with Apple or with Google.
• Payment via Link (Stripe): we never see your payment details; they go straight to Stripe or Link.
• Analytics only with consent: analytics services (Vercel Web Analytics, PostHog and, on the website, Google Analytics) only run if you agree in the “Cookies & analytics” notice. You can change your choice at any time via “Cookie settings” in the footer. Without your consent, no analytics service runs on the website or in the app; we then only count totals on our own server, without names or identifiers, such as how many live duels are played (more on this). No ads.
• Our social media channels: the footer only has plain links to Instagram, TikTok, YouTube, Facebook, Reddit and Twitch, without plugins. On those platforms we see comments, messages and aggregated statistics, and a bit more as moderators on Reddit (see Our social media channels).

Hosting and server logs

GeoFootballer is hosted by Vercel Inc. (USA). The functions that process game data run in Frankfurt am Main, Germany. Pages are delivered through a worldwide network of servers so that they load quickly.

When you open the site, Vercel processes technically necessary data: IP address, time, the address requested, browser and operating system. This is needed to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). The logs are only kept for a short time. More in Vercel's privacy policy.

Analytics

We want to know which parts of the game get used, where players drop off and how fast the site loads. For that we use analytics services, but only with your consent.

Consent: on your first visit, the “Cookies & analytics” notice asks whether we may use Vercel Web Analytics, PostHog and, on the website, Google Analytics. They only run once you agree. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG, the German Telecommunications Digital Services Data Protection Act). You can withdraw it at any time with effect for the future, via “Cookie settings” in the footer. We remember your choice in the cookie gf_einwilligung; it is needed for this and only contains “yes” or “no”.

Vercel Web Analytics and Speed Insights: with your consent, Vercel counts page views, the referring page, country, device type and browser, plus page load times. This happens without cookies and without storing anything in your browser. Vercel tells visitors apart using a hash of the request that expires after one day; no profile is built up over several days. We strip invite codes and parameters from addresses before they are counted. The same applies in the app. More at Vercel Web Analytics.

PostHog: with your consent, our server sends individual in-game events to PostHog Inc. (USA), with servers in Frankfurt am Main: rounds started and finished, with mode, category and points; rounds left before full time (with mode, question number and the score so far); your rating of a round (with mode and answer); completed daily challenges; badges; choosing and changing your favourite club (noting whether you're signed in); setting up, joining and leaving groups (noting whether you're there with Pro, on a guest place or waiting, and when setting one up, how many you've set up); new competitions; competitions played, noting whether with Pro or as a guest; notices that something needs Pro (for example when all guest places are taken, with the reason); duels created and accepted; challenges accepted; reactions given; starting a daily round from a shared link, a duel or a challenge (noting whether you're new); opening the Pro page and taps on the buttons for the App Store and Google Play (each noting whether you came from a group); starting, abandoning and completing a purchase, with plan and platform; Pro being unlocked on a device (with the number of your groups and whether Pro applies there for the first time); sharing a result; Franz inviting you to create a free account and you tapping “Later” (each with the reason: streak, club or group); and a newly created account (with the reason for the invitation it came from, or “none”). Also: reaching a new level (with its number), duels and live duels set up as a penalty shoot-out, confirmed one-twos, a weekly goal reached in a group (with the goal; counted for the member whose visit detects it) and opening your profile card. With “Play together” on one device, we count the start and end of the round (with the number of players and the type of round, never with your fellow players' names or pins). Also: showing Franz's weekly recap (once a week, noting which prompt was underneath: stats, Pro or none) and a tap on “Get Pro” in it; which week you closed and which has already been counted is only remembered by your device in its local storage. When Franz last invited you and when you chose “Later” is also only remembered by your device in its local storage; if you tap “Create account”, the reason is kept in the cookie gf_anmelde_anlass until you sign in. And once per visit, opening the website or app, with the platform (web, iOS, Android) and whether it's the first time on this device; for this your device remembers in its local storage, without a cookie, that it has been here before, and our server sets the player cookie at that point, which would otherwise be set by your first round. Each event only carries an identifier that we derive from the hash of your player cookie, from which neither the cookie nor you can be worked out. We do not pass on names, email addresses, IP addresses or location, and no PostHog script runs in the browser. The same applies in the app. More in PostHog's privacy policy.

Google Analytics (only with consent)

On the website we also use Google Analytics 4 with your consent (see Analytics). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Only once you agree does your browser load Google's script and set the cookies _ga and _ga_…. They contain a random identifier that lets Google recognise returning visits, and they expire after 13 months. If you decline, nothing is loaded from Google.

Google then learns which pages you open (without parameters and without group invite codes), which page you came from, your device, browser, screen size, approximate location at country and city level, and these events: a round started (with mode), a round finished (with mode and points), a round left before full time (with mode, question number and the score so far), a round rated (with mode and answer) and the Pro page opened. If you click a link to another website, such as our social media channels, Google may also learn the destination address. Google Analytics 4 does not store IP addresses. Advertising features and Google signals are switched off; we do not use your data for advertising and do not link it to your game progress or account.

If you withdraw your consent via “Cookie settings”, we delete Google's cookies from your browser. Google Analytics does not run in the GeoFootballer app. Google processes the data as our processor, including in the USA (see Transfers to third countries). More in Google's privacy policy.

Playing without an account

On your first visit, GeoFootballer sets the cookie gf_spieler. It only contains a random identifier that reveals nothing about you. We only store a hash of this identifier, together with your game progress: your guesses and points, daily tables, streak, completed daily challenges, badges, experience and level, personal bests, groups, competitions, one-two partners, counters for your personal stats and for knowledge and countries and, if you pick one, your favourite club. Without this cookie we couldn't show you your round again after a reload. It is therefore strictly necessary (Section 25(2) no. 2 TDDDG) and serves to provide the game you're using (Art. 6(1)(b) GDPR).

Groups: when you set up or join a group, you give a name. The other members see it together with your points, your streak, your favourite club, your level and, if you have Pro, your die-hard badge. A nickname is best. If they tap your name, they see a short version of your profile card: level, streak, best streak and your personal bests (best daily round, best timed round, closest guess). In the “This week” view they see which days of the current week you played the daily round and how many points you scored, and your daily rounds count towards the group's weekly goal. Under “Settings” you can switch off your profile card in groups (then the others can't see your level either) or hide your level altogether. The die-hard ranking only shows totals per club, no names. In the daily table, members can react to results with set reactions (such as “Fire” or “Respect”), and the other members see how often each reaction was given. We store when you joined a group: that decides who gets the guest places on which members without Pro play competitions. For this we also take into account whether members currently have Pro. Running competitions only list members who can take part; anyone waiting for a guest place only appears once they move up or have Pro. From this and from the die-hard badge, the others can tell who is there with Pro, as a guest or waiting.

One-two: if you offer a member of your group a one-two, they see your name and can accept or decline; the invitation expires after 7 days. If they accept, you become partners (at most 5 per player): each of you sees the other's name and your joint streak, meaning how many days in a row you have both played the daily round. For this we store your partners' identifiers with your player ID. You can end a one-two at any time, and we then delete it for both of you. If you don't play a daily round or open your profile for 400 days, it ends by itself.

Duels: if you challenge friends, anyone with the link sees your name, your points and the colours of your guesses (without locations). Anyone who accepts the duel and plays the daily round appears with name, points and kilometres in the duel table, which anyone with the link can also see. If the challenger chooses a penalty shoot-out, the five questions are five penalties: a guess with an accuracy of 50 or more is a goal. For everyone who accepts, we then store the accuracy per question so the duel can still be seen after the guesses expire. Anyone with the link sees each player's goals and accuracy compared with the challenger.

Live duels: if you open or join a live duel, anyone with the link or code sees your name. The name only applies to that room and doesn't change your name in groups; we remember the one you used last in your player profile so it's already filled in next time. We automatically reject names with common insults or links and reserved names (such as “Admin” or the host's name), and duplicates get a “(2)”. If you've picked a favourite club, everyone with the link sees its colours on your corner flag. After each question, everyone in the room sees your pin on the map, your kilometres and points and the table, and in a two-player penalty shoot-out also the goals. The host can remove players: they disappear from the list and table and can't rejoin that room from the same device. The host can also close the room to new players. If you start a live duel in a group, all members see there and on their home page that you've started one, and after full time the top three in the table. If the host has said they are streaming, this is shown before you join: their viewers see names, pins, points and the table through our overlay. We issue the fixed overlay link to the host's account, without signing in on their device; anyone who knows it sees the host's most recently opened live duel as a viewer would. If we unlock streamer mode for a creator, their account ID goes on an early-access list. In their live duels, the pins of all players except the host are combined into one shared chat pin per question, and in the reveal the overlay shows a map with all pins, but names only for the three closest and the host. We delete the room, names, guesses, who was removed and whether joining was closed after 12 hours.

We check that live duels work using daily totals: live duels opened (of which marked as streamed), started and finished, joins, guesses, players removed, joins turned away because a room was full, names rejected, invite links opened, and how many players finish the daily round within 24 hours of joining. For that last figure we remember for 24 hours, with your player ID, that you joined a live duel; if you play the daily round in that time, we add one to the count and delete the marker. The counters contain no names or identifiers, and we delete them after 60 days. The legal basis is our legitimate interest in improving live duels (Art. 6(1)(f) GDPR).

Challenges: if you share the result of a Pro round, we create a challenge for it: the round's questions, your points and kilometres and the colours of your guesses. Anyone with the link sees your name, your points and the colours (without locations). Anyone who accepts the challenge and finishes the round appears with name, points and kilometres in its table, which anyone with the link can also see.

Reminders in the app: if you switch them on, the app schedules notifications about the new daily round and your streak directly on your device. Only the app stores the settings for this; nothing is sent to us or anyone else. You can switch them off at any time under “Profile” → “Reminders” or in your device settings.

“How was that round?” After a round you can rate it “Too easy”, “Just right” or “Too hard”. We count your answer on our server as a total per question and per mode and day, without names or identifiers. So that each round only gets one vote, we remember the round's ID with your player ID, not your answer: for 7 days, or for a competition until 30 days after it ends. If there are only very few votes on a given day, this marker or other game data (such as who played that day) could still reveal how you voted. We don't analyse the data that way. If you've agreed to analytics, the answer and mode are also sent as an event to PostHog and Google Analytics (see above). The legal basis is our legitimate interest in improving the choice of questions (Art. 6(1)(f) GDPR), and for the events your consent (Art. 6(1)(a) GDPR).

Game data is stored in a database run by Upstash, Inc. (USA), located in Frankfurt am Main (privacy at Upstash).

Favourite club, die-hard ranking, stats and archive

Favourite club on your account: if you're signed in and have picked a favourite club, we store the club with your account (your user ID at Clerk) and the day from which it applies, so you have the same club on all your devices. The basis is providing the game you're using (Art. 6(1)(b) GDPR). If you delete your account, we delete the club entry immediately.

Die-hard ranking: if you have Pro, we store with your account which favourite club you back and until when your subscription is paid. From this we count how many active subscriptions each club has. Only these totals are public. Your player profile also records until when you have Pro, so the die-hard badge appears next to your name, and which symbol, which home page layout and which decades (“Your football era”) you've chosen.

Stats and archive: for your personal stats, we add up category, region, accuracy and distance for each guess and store the points of your daily rounds. If you replay a past matchday from the archive, we store your first result. In both cases the legal basis is providing the game and your subscription (Art. 6(1)(b) GDPR).

Play together: if several of you play on one device, only your pin goes to our server, where it is scored and stored like in any round. Your fellow players' names and pins stay in the browser: we score them there using the answer our server sends for your guess, and we don't store them. So you don't have to type the names every time, only your device remembers the most recently entered names in its local storage (gf_couch_namen); you can delete them via your browser's site data.

Experience, level and profile card: every finished free daily round and timed round earns experience, as does every completed daily challenge; Pro rounds don't. Your experience is stored in your player profile, and from it we work out your level (such as “Main Stand”). If you played before this existed, it is worked out once from the history of your daily rounds. As personal bests we store your best timed round and your closest guess in kilometres. From the first guesses in the free daily and timed rounds, we also count per category how many guesses you made and how accurate they were, per country how many guesses with an accuracy of 50 or more you had on questions from that country, and your direct hits. We determine the country from the location of the question, not from yours. This feeds your profile card, knowledge titles and away map; anything not yet visible is already being counted. We switch new features on for individual accounts first (an early-access list with account IDs) and then for everyone. Under “Settings” you can hide your level; we then don't show it anywhere, not even to you. The legal basis is providing the game (Art. 6(1)(b) GDPR).

Account

For GeoFootballer Pro, and so that your streak, name, groups and favourite club apply on all your devices, you create a free account. You sign in either with your email address, confirming it with a code we email you, or with “Sign in with Apple” or your Google account. Sign-in is run for us by Clerk, Inc. (USA). Clerk processes your email address, sign-in times, IP address and browser details to protect your account against misuse, and sets its own cookies that are needed for signing in. The legal basis is providing the game and, where applicable, your subscription (Art. 6(1)(b) GDPR). More in Clerk's privacy policy.

Your progress on every device: with an account, your progress (streak, name, groups, stats) applies on every device where you're signed in. For this we store with your account (your user ID at Clerk) which random identifier from the cookie gf_spieler belongs to you, and set this cookie on every device you sign in on. If the device already had its own progress, we merge it with your account's (only once any round in progress on the device is finished): streak and today's round count, groups and the history of your daily rounds are added, and in the same group the higher score counts; name, favourite club and badge symbol come from whichever progress has more daily rounds played. The counters for your personal stats and the knowledge and country counters are added together, for personal bests and experience from timed rounds the higher value applies, experience from daily rounds is recalculated from the combined history, and one-two partners are added (at most 5). If you hid your level or profile card on one of the devices, they stay hidden. For this we also store the identifiers of the merged devices. If you sign out yourself, the device starts afresh with a new identifier and without your progress, so nobody on a shared device carries on playing under your name; if your sign-in just expires briefly, everything stays as it is. A cookie gf_konto_tag remembers for two days when the link was last renewed. If you delete your account, we delete these links immediately; the rest of the progress then stays on the devices with no connection to the account (what else we delete is under How long we keep data). The legal basis is providing the game (Art. 6(1)(b) GDPR).

If you sign in with Apple, Apple sends Clerk an identifier for your Apple Account and your email address. If you choose “Hide My Email” at Apple, this is a forwarding address from Apple. In the browser, Apple can also send your name if you wish. If you sign in with Apple in the iPhone app, we also store a token from Apple that we use to revoke the sign-in with Apple if you delete your account. Apple asks for your name in the app, but it stays on your iPhone and isn't sent to us. If you sign in with Google, Google sends Clerk an identifier for your Google account, your email address, your name and your profile picture. What data Apple and Google process themselves is set out in their privacy policies (Apple, Google). Which route you take is up to you; here too the legal basis is providing the game (Art. 6(1)(b) GDPR).

We send the email with the sign-in code through Resend, Inc. (USA), with servers in the EU (Ireland). For this Resend receives your email address and the content of the email, and keeps delivery logs for a short time (Art. 6(1)(b) GDPR, privacy at Resend).

Buying and subscribing to Pro

In the browser, Sold through Link, LLC (USA, Stripe group, “Link”) handles the purchase as merchant of record; Stripe processes the payment. You enter your name, email address, country and payment details directly in Stripe's checkout window. Link and Stripe process them under their own responsibility, including to meet legal obligations such as taxes and invoices and to prevent fraud. See Link's privacy policy and Stripe's privacy policy.

If you buy in the app, Apple (App Store) or Google (Google Play) handles the purchase under their own responsibility; you enter your payment details there, not with us. We only learn that a subscription was bought, and which one.

RevenueCat, Inc. (USA) manages for us whether your subscription is active. For this RevenueCat receives your account identifier and details of the purchase, term and cancellation, but no payment details (Art. 6(1)(b) GDPR, privacy at RevenueCat).

Map and fonts

The world map in the overview and the font for country names come from our own server. When the map zooms in closer, for example for a question or its answer, it loads the more detailed map tiles (and characters outside the Latin alphabet) from OpenFreeMap (openfreemap.org). OpenFreeMap receives your IP address, without which the map tiles can't be delivered. We have a legitimate interest in showing the map, without which the game doesn't work (Art. 6(1)(f) GDPR).

The fonts are on our own server. There is no connection to Google Fonts.

Sharing and external links

“Share result” opens your device's share menu, or we copy the text to the clipboard. “WhatsApp” opens WhatsApp with the text ready to go. The same goes for duels and challenges. Where you send the text is up to you, and the terms of that service apply there. The text contains your points and the colours of your guesses, depending on the round also your position, your streak, your favourite club or the name of the group, and a link. It contains no locations. For a group, the link is the invitation to the group; for a Pro round it leads to your challenge, where anyone with the link sees your name (see Challenges).

When you follow links to sources such as Wikipedia, you leave GeoFootballer, and the provider's own privacy policy applies. What applies to the links to our channels is set out under Our social media channels.

Our social media channels

In the footer we link to our channels, which are currently run in German: Instagram @geofussball, TikTok @geofussball.app, YouTube @geofussball, the Facebook page “GeoFußball”, our subreddit r/GeoFussball and Twitch. These are plain links: just because they are on the page, the platforms learn nothing about you and set no cookies. There are no plugins, embedded videos or pixels from the platforms on GeoFootballer. Only when you click a link does the platform open in a new tab, in the GeoFootballer app in your browser or in the platform's app, and its privacy policy applies there. Your browser does not pass on which GeoFootballer page you came from.

If you open GeoFootballer from within Instagram, Facebook, TikTok, Reddit or Twitch, the page often runs in that app's built-in browser. What the app records there is out of our hands. You can use the app's menu to open the page in your own browser.

We run these channels to make our game better known and to talk to players and football fans. We publish videos and image posts there, moderate our subreddit, read and reply to comments and messages, and look at the platforms' statistics to see how our posts are doing. The legal basis is our legitimate interest in public relations, in talking to our players, in moderating our subreddit under its rules and Reddit's, and in evaluating and improving the reach of our posts (Art. 6(1)(f) GDPR). If you message us about your account, your subscription or before buying Pro, we also answer in order to perform or prepare a contract (Art. 6(1)(b) GDPR).

What we see: if you comment on our posts or send us a message, we see the content along with your name or username, your profile picture and whatever your profile shows publicly (on Reddit sometimes more, see below). Comments under our posts are usually visible to everyone. The statistics (Insights or Analytics) show us aggregated figures, such as views, interactions and breakdowns by country, age group and gender. What else a platform shows us, such as who follows us, depends on its features and your settings there.

Facebook: the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). For the statistics on our page “GeoFußball” (Page Insights) we are joint controllers with Meta (Art. 26 GDPR). For this, Meta records, for example, when someone views the page, a post or a video, follows it, likes it, comments on it, shares it or starts a Messenger conversation with the page. Meta stores the time, country and city (from the IP address or the profile), language, the previously visited website, whether a computer or a mobile device is used, and for signed-in users the Facebook user ID as well as age group and gender group. Meta recognises whether you are signed in through cookies. Meta alone decides which events are recorded. We only see aggregated figures from this. Exception: if you have liked our page and made your likes public, Meta may show us your profile picture in that context. What we have agreed with Meta is set out in the Page Insights Controller Addendum, with the essentials in the Information about Page Insights. Under it, Meta informs you about this processing, enables you to exercise your rights and ensures the security of the data. The lead supervisory authority is the Irish Data Protection Commission. Everything else on Facebook is processed by Meta under its own responsibility; see Meta's privacy policy.

Instagram: the provider is also Meta. We see comments, messages and public profile details as described above. Insights show us aggregated figures, such as views, interactions and new followers; details on countries, cities, age groups and gender are only available above 100 accounts. The Page Insights Controller Addendum only applies to Facebook pages. Meta has not published a joint controller agreement for Instagram. Under Meta's privacy policy for Instagram, Meta is responsible for the data on Instagram. Whether we are nevertheless joint controllers with Meta for Instagram Insights is not legally settled. Insofar as we are, you can exercise your rights with Meta and with us.

TikTok: the provider for users in the EEA is TikTok Technology Limited (Ireland). It is responsible for your data jointly with TikTok Information Technologies UK Limited, 4 Lindsey Street, London, EC1A 9HP, United Kingdom (together “TikTok”). Postal address for users in the EEA: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. For the statistics on our account (TikTok Analytics) we are joint controllers with TikTok (Art. 26 GDPR). This only covers two steps: TikTok records how users interact with our account, such as views, watch time, likes, comments, shares and clicks on our profile, together with details such as time, country and city, age group and gender group, interests and device. From this TikTok compiles the statistics for us. TikTok alone decides which events are recorded. We only see aggregated figures. We do not use the “Profile views” feature, which lets accounts see who has visited their profile. The responsibilities are set out in the TikTok Analytics Joint Controller Addendum, and TikTok summarises the essentials in Information about TikTok Analytics. Under it, TikTok informs you about this processing, enables you to exercise your rights and ensures the security of the data. The lead supervisory authority is the Irish Data Protection Commission. Everything else on TikTok is processed by TikTok under its own responsibility; see TikTok's privacy policy.

YouTube: the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We see comments on our videos with name and profile picture, and subscribers who have made their subscriptions public. YouTube Analytics shows us aggregated figures, such as views and breakdowns by age and gender of signed-in viewers; if the numbers are too small, YouTube withholds details. Google has not published a joint controller agreement for YouTube channels. Under Google's privacy policy, which also applies to YouTube, Google is responsible for the data on YouTube. Whether we are nevertheless joint controllers with Google for YouTube Analytics is not legally settled. Insofar as we are, you can exercise your rights with Google and with us.

Reddit: the provider for users in the EEA is Reddit Netherlands B.V., Looiersgracht 43, 1016 VR Amsterdam, Netherlands (“Reddit”). Our subreddit r/GeoFussball is moderated only by us; we don't use third-party apps or bots there. As moderators, we see the posts and comments in our subreddit with usernames. If we click on your username or you send us modmail, Reddit shows us a user panel: your karma with us, previous bans, mutes and removed posts in our subreddit, previous modmails and notes from our moderation team, an overview of your public posts, comments and karma across all communities over the last six months, and a summary of your recent activity generated by Reddit. If you post, comment or edit something with us or send us modmail, Reddit also shows us all your public posts and comments on Reddit, even if you've hidden them on your profile, for up to 28 days after your last such action. If a post breaks our rules or Reddit's, we can remove it and mute or ban you. Reddit records these steps in a moderation log that only moderators can see, and we can add notes to it. We cannot see who has joined our subreddit, who has voted or reported something, or your IP address. We do not use Reddit's ban evasion filter. What Reddit only shows us for moderation, we only use for moderation.

Reddit's Mod Insights show us aggregated figures, such as views, visits by platform, new members and leavers, and the number of posts and comments published, reported and removed. For each post Reddit also shows post insights with figures such as views, shares and crossposts, in the app partly by country. Under Reddit's privacy policy Reddit is responsible for running Reddit; we are responsible for what we ourselves do as moderators. Reddit has not published a joint controller agreement for the statistics. Whether we are nevertheless joint controllers with Reddit for them is not legally settled. Insofar as we are, you can exercise your rights with Reddit and with us.

Twitch: the provider is Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA (“Twitch”). On our channel twitch.tv/geofussball we see chat messages during our streams with usernames, the list of our followers and aggregated figures in the Creator Dashboard, such as viewers, followers and chat activity. Within Twitch's rules, we can delete chat messages and time out or ban users. Under Twitch's privacy notice Twitch is responsible for running Twitch; it also explains whether and how Twitch uses content for its own services such as AI features. We are responsible for what we ourselves do as channel owner. Whether we are joint controllers with Twitch for the statistics is not legally settled. Insofar as we are, you can exercise your rights with Twitch and with us.

Your rights regarding our channels: you can exercise the rights listed below under “Your rights” with us, including for statistics for which we are joint controllers with a provider (Art. 26(3) GDPR). Under the agreements, however, Meta and TikTok are responsible for Page Insights and TikTok Analytics, because only they hold the data behind the figures. The easiest way is therefore to contact them directly: Meta via the options in the Information about Page Insights, TikTok via TikTok's privacy request form, Reddit via dpo@reddit.com. If you write to us, we forward your request to Meta or TikTok without delay, within seven days at the latest. You can also see and control what the platforms store about you in your account settings there. If you'd rather not message us through a platform, you can reach us by email at mustafa.ali@na4mc.de. You can complain to any supervisory authority, for example in the country where you live (see Your rights).

Storage: we only transfer data from our channels to our own systems where this is needed for your request, for example to find your account when you ask about your account or subscription. We do not export comments, messages or follower lists. Comments and messages stay on the platform until you or we delete them (if we delete a conversation, it usually only disappears on our side) or the account in question is deleted. On Reddit, we can only remove other people's posts and comments from our subreddit, not delete them, and can only archive modmail; it stays visible to all moderators of our subreddit, including future ones. Notes on users stay until we delete them. If you delete your Reddit account, your posts, comments and messages remain visible without your username unless you delete them yourself first. How long the platforms themselves keep data is set out in their privacy policies linked above. Which data they transfer to third countries is set out under Transfers to third countries.

If you write to us

If you send us an email, we only use your address and what you write to reply to you (Art. 6(1)(b) GDPR, otherwise point (f)). We delete the message once the matter is dealt with, unless a legal retention obligation requires otherwise.

Transfers to third countries

The provider of GeoFootballer is based in the USA, as are Vercel, Upstash, Clerk, Resend, PostHog, RevenueCat, Stripe and Link; Google Ireland may transfer data to Google LLC in the USA, and Apple Inc. (USA) is involved when you sign in with Apple. We base transfers to the USA on the European Commission's adequacy decision for the EU-US Data Privacy Framework, where the recipient is certified under it, and otherwise on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

Our social media channels: the providers of our channels also transfer data to third countries. Meta transfers data from Facebook and Instagram to Meta Platforms, Inc. in the USA and, according to Meta, bases this on the EU-US Data Privacy Framework, under which Meta Platforms, Inc. is certified, and otherwise on standard contractual clauses or statutory exceptions. For YouTube, what is said above about Google applies. According to Reddit, it processes and stores data on servers in the USA and bases transfers there on the EU-US Data Privacy Framework, under which Reddit, Inc. is certified, and otherwise on standard contractual clauses. Twitch is based in the USA and, according to Twitch, bases transfers there on the European Commission's standard contractual clauses. For TikTok, TikTok Information Technologies UK Limited is based in the United Kingdom. According to TikTok, it stores data of users in the EEA on servers in the USA, Malaysia and Singapore and bases this on standard contractual clauses. TikTok group companies also have limited remote access: from Australia, Brazil, China, Malaysia, the Philippines, Singapore and the USA on the basis of standard contractual clauses, and from Israel, Japan, Canada, South Korea and the United Kingdom on the basis of adequacy decisions. That is what TikTok's list of transferee countries says.

How long we keep data

If you delete your cookies, the link to your game progress is cut immediately, and the data then expires automatically after the periods above. You can delete your account yourself under “Profile” → “Settings & account” → “Delete account” (in the app and at geofootballer.com/settings), or we can do it for you on request. We then immediately delete the email address, the stored Pro status, your favourite club on the account, the die-hard entry for your club, the history of questions you've already had, and the fixed overlay link including the pointer to your last live duel, plus, for your account and all devices merged with it, the knowledge and country counters, personal bests, your one-twos (we also remove you from your partners' side) and open one-two invitations to you, and we revoke any Sign in with Apple at Apple. At RevenueCat only the purchase history remains, under a random identifier without an email address; the legal retention obligations of Link or Stripe and Apple for invoices are not affected. A running subscription does not end with the account: cancel it first with Apple or Google Play, or in the browser in your account at link.com.

Your rights

You have the right at any time to

• access your data (Art. 15 GDPR),
• rectification (Art. 16) and erasure (Art. 17),
• restriction of processing (Art. 18) and data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21), on grounds relating to your particular situation,
• lodge a complaint with a data protection supervisory authority, for example in the country where you live (Art. 77).

Users in the United Kingdom have the same rights under the UK GDPR and the Data Protection Act 2018. You can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom, ico.org.uk, in addition to the options above.

To exercise your rights, write to us at mustafa.ali@na4mc.de. If you play without an account, your name from a group helps us find your game progress.

You don't have to provide any data to play GeoFootballer. We do not make automated decisions within the meaning of Art. 22 GDPR.