About GeoExplorer

Last updated: 29 October 2026

This Privacy Policy explains how GeoExplorer collects, uses, stores, and protects personal data when you visit or use geoexplorer.dev . It is intended to comply with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Czech data protection law.

1. Who is responsible for your data?

The data controller is Kryštof Polák, operating the GeoExplorer project as an individual in the Czech Republic.

For questions about this Privacy Policy or requests concerning your personal data, contact [email protected] . You can also visit the Contact page .

2. What personal data do we collect?

The data we process depends on how you use GeoExplorer. It may include the following categories:

• Account information: username, email address, password hash, account identifier, account creation date, and authentication-related information.
• Google sign-in information: your Google account identifier and the account information made available through Google sign-in, such as your email address, name, or profile picture, where provided and used by the application.
• Profile and preferences: profile information, avatar settings, preferences, and maps you save as favourites.
• Gameplay information: game results, scores, statistics, achievements, quest progress, game settings, and information needed to operate multiplayer sessions.
• Community content: maps and locations you submit, including panorama identifiers, geographic coordinates, and optional location metadata.
• Security and technical information: IP address and request metadata where processed by the hosting, network, authentication, or security infrastructure; authentication events; and application error or security logs.
• Communications: information you provide when contacting us for assistance, reporting a problem, or making a privacy request.

We do not intentionally request sensitive personal data for ordinary gameplay. Please do not include sensitive personal information in usernames, profile content, community submissions, or support messages.

3. Why do we process your data?

We process personal data for the following purposes:

• To create accounts, authenticate users, and maintain account security.
• To provide gameplay, multiplayer sessions, leaderboards, statistics, quests, achievements, and other available game functionality.
• To save profiles, preferences, and favourite maps.
• To receive, validate, store, and display community-submitted maps and locations.
• To prevent abuse, investigate security incidents, detect suspicious activity, and protect the service and its users.
• To diagnose errors, maintain the service, and improve reliability.
• To respond to support requests and exercise or defend legal claims when necessary.
• To comply with applicable legal obligations.

4. Legal bases for processing

We process personal data only where an applicable legal basis under Article 6 GDPR permits it. Depending on the purpose, the legal basis may be:

• Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR): providing requested account functionality, authentication, gameplay, multiplayer features, and saved progress.
• Legitimate interests (Article 6(1)(f) GDPR): maintaining service security, preventing abuse, troubleshooting technical problems, and protecting the rights and legitimate interests of the operator and users, where those interests are not overridden by your rights and freedoms.
• Legal obligation (Article 6(1)(c) GDPR): retaining or disclosing information where applicable law requires it.
• Consent (Article 6(1)(a) GDPR): where a particular processing activity requires and relies on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where processing is necessary to provide a requested account or game feature, refusing to provide the required information may prevent that feature from working. Where processing relies on consent, providing the relevant data is voluntary.

5. Cookies, authentication, and local storage

GeoExplorer uses a first-party, HTTP-only authentication cookie to maintain authenticated sessions. The cookie is configured with security attributes intended to restrict access and reduce the risk of misuse.

The application may also use browser storage or similar technologies for functionality and preferences, depending on the feature being used. Your browser and the infrastructure serving the website may process technical information required to deliver and secure the service.

Third-party services, including Google services, may use their own cookies or similar technologies when you interact with their components. Their processing is governed by their respective privacy policies.

6. Google services and maps

GeoExplorer supports Google sign-in and uses Google Maps-related functionality for geographic gameplay and location-related features.

When you choose Google sign-in, Google processes information according to its own privacy policy and returns information required for authentication. GeoExplorer uses the information made available to identify and authenticate your account.

When Google Maps or related third-party map content is loaded, your browser may communicate directly with Google. Depending on the service and request, Google may receive your IP address, browser and device information, and information about the requested map content or your interaction with it.

Google processes data under its own terms and privacy practices. For more information, see Google's Privacy Policy and Google's Terms of Service .

7. Multiplayer and public information

GeoExplorer processes game-session information to provide multiplayer gameplay, synchronize game state, display player markers, calculate results, and maintain leaderboards and statistics.

Depending on the game mode and feature, other participants may see your username, avatar, score, guesses, position or marker within the game, and other information needed to participate in the same session.

Community maps and locations you submit may be made available to other users. Do not include personal information in community content unless you intend to share it.

8. Who can receive your personal data?

We do not sell personal data. Data may be disclosed only as necessary for the purposes described in this policy, including to the following categories of recipients:

• Hosting and network infrastructure: Cloudflare and the infrastructure used to deliver, route, and protect requests to the website.
• Database and infrastructure providers: providers used to store application data, operate the service, and maintain its availability.
• Google: where you use Google sign-in or Google Maps-related functionality.
• Authorities and legal advisers: where disclosure is required by law or is necessary to establish, exercise, or defend legal claims.

Service providers may process personal data on our behalf under applicable contractual and data protection requirements, or process certain information independently under their own terms. The information shared with each provider depends on the service being used.

9. International data transfers

Some third-party providers may process personal data outside the European Economic Area (EEA). Where a transfer is subject to GDPR Chapter V, it must be supported by an applicable transfer mechanism, such as an adequacy decision or appropriate safeguards, as required by law.

Information about the applicable safeguards can be requested using the contact details in this policy.

10. How long do we retain your data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking account of applicable legal requirements, security needs, and the nature of the information.

• Account and profile data: retained while your account remains active and until deletion, except for information that must or may lawfully be retained for a separate purpose.
• Gameplay records and statistics: retained while needed to provide game functionality and maintain saved progress or rankings, subject to account deletion and applicable retention requirements.
• Community content: retained while needed to provide the relevant community-map features, subject to removal, account deletion, and any applicable legal requirements.
• Security and technical logs: retained for the period necessary to investigate errors, protect the service, detect abuse, and address security incidents.
• Support communications: retained for the time needed to resolve the request and maintain any necessary records of the matter.

Data may remain in protected backups for a limited period after deletion from active systems. Where data must be retained to comply with a legal obligation or to establish, exercise, or defend legal claims, access and use will be restricted to that purpose.

11. How we protect your data

We use technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, and destruction. These measures include access controls, protected authentication mechanisms, encrypted connections where supported, and security measures for the application and its infrastructure.

No internet service or storage system can be guaranteed to be completely secure. We work to address security issues and take appropriate action when incidents occur.

12. Your data protection rights

Subject to the conditions and exceptions set out in applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request erasure of personal data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive certain personal data in a structured, commonly used, machine-readable format and request its transfer where the right to data portability applies.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, email [email protected] . We may need to verify your identity before acting on a request. We will respond within the time limits prescribed by applicable law.

You can also use the account-management features available on GeoExplorer to download an available JSON export of your application records or request account deletion. An export may not include every item of personal data held by infrastructure providers or in technical logs.

Account deletion does not necessarily erase information that must be retained by law or information that remains temporarily in protected backups. Such information will be handled in accordance with applicable legal requirements.

13. Right to complain

If you believe that your personal data have been processed unlawfully, you may contact us first or lodge a complaint with the competent supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů) .

14. Automated decision-making

GeoExplorer uses automated calculations and application rules to operate game mechanics, calculate scores, update statistics, and maintain rankings. These are used to provide the game and are not intended to make decisions producing legal effects or similarly significant effects on you within the meaning of Article 22 GDPR.

15. Changes to this policy

This Privacy Policy may be updated when the service, its data-processing practices, or applicable legal requirements change. The current version will be published on this page with its latest update date.