Privacy Policy

1. Information We Process

Depending on how you use PlayMapLoc, we may process:

Account information

• email address;
• username;
• account identifier;
• login provider information;
• account creation and authentication records.

Gameplay information

• quiz and game results;
• XP and Level;
• Gems and Gem transactions;
• Achievements;
• streak activity;
• Country Knowledge and learning progress;
• Daily Challenge activity;
• multiplayer results and lobby participation.

Technical and security information

We may process technical information needed to operate and secure the service, such as:

• IP address;
• browser and device information;
• timestamps;
• request and security logs;
• error information.

Analytics information

PlayMapLoc currently collects product analytics, such as:

• pages visited;
• games started and completed;
• feature usage;
• subscription-related interactions;
• aggregate usage patterns.

2. Why We Process Your Information

We process personal data to:

• create and maintain user accounts;
• provide gameplay and progression;
• save results, Achievements and virtual balances;
• operate multiplayer;
• provide Premium features;
• prevent cheating, fraud and abuse;
• maintain security and reliability;
• provide support;
• understand and improve the service;
• comply with legal obligations.

3. Legal Bases

Depending on the processing activity, we may rely on:

Performance of a contract

for providing account-based PlayMapLoc services and Premium features.

Legitimate interests

for service security, fraud prevention, system reliability and necessary product operations, where those interests are not overridden by your rights.

Consent

for optional analytics or similar technologies where consent is required.

Legal obligation

where processing is required by applicable law.

4. Service Providers

We use third-party providers to operate PlayMapLoc.

Supabase

Supabase provides backend infrastructure including database and authentication services.

PostHog

PostHog is used for product analytics. An analytics-consent interface is not yet available in this version.

Paddle

Paddle is the intended Merchant of Record for paid subscriptions. Payment integration is currently in sandbox/test mode.

Paddle may independently process buyer and payment-related information under its own privacy terms.

PlayMapLoc does not receive or store complete payment-card details processed by Paddle.

5. Analytics and Cookies

Necessary technologies may be used to:

• keep users signed in;
• secure sessions;
• remember essential application state;
• provide requested functionality.

This version does not yet provide an analytics-consent interface or Cookie Settings. These controls must be finalized before public launch where consent is required.

6. Data Sharing

We do not sell personal data.

We may disclose information to:

• service providers acting on our behalf;
• payment providers;
• professional advisers;
• authorities where legally required;
• parties involved in detecting fraud or security incidents where necessary.

7. International Data Transfers

Some service providers may process data in countries outside your country of residence.

Where required, appropriate transfer safeguards are used according to applicable data-protection law.

8. Retention

We keep information only for as long as reasonably necessary for the purposes described in this Policy.

Retention may vary depending on the data.

For example:

• account and progression data may be retained while your account remains active;
• security logs may be retained for a limited period;
• payment and accounting information may be retained where required by law or by Paddle;
• deleted-account data may be removed or anonymized unless continued retention is legally required.

A more detailed retention schedule may be published as the service develops.

9. Account Deletion

A self-service account deletion control and privacy contact are not yet available in this version. The request process will be added before public launch.

Deleting your PlayMapLoc account does not necessarily delete records independently retained by Paddle or other parties where they have legal obligations to retain them.

10. Your Rights

Subject to applicable law, you may have rights including:

• access to your personal data;
• correction;
• deletion;
• restriction of processing;
• data portability;
• objection to certain processing;
• withdrawal of consent.

You also have the right to lodge a complaint with your relevant data protection supervisory authority.

11. Children

PlayMapLoc is not currently designed to knowingly collect consent-based personal data from children below the minimum age permitted by applicable law without appropriate parental authorization.

For the initial account system, PlayMapLoc may require users to be at least 16 years old, unless an approved parental-consent mechanism is introduced.

Age eligibility and any parental-consent process are still being finalized before public launch.

12. Security

We use reasonable technical and organizational measures intended to protect personal data.

These include, where applicable:

• authentication controls;
• database access controls;
• server-side authorization;
• restricted secrets;
• encrypted transport;
• transaction and abuse monitoring.

No online service can guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy as PlayMapLoc or applicable law changes.

Material changes will be communicated where appropriate.

14. Contact

Privacy questions or requests:

Privacy contact details will be added before public launch.