Back to Home

Privacy Policy

Last updated: June 15, 2026

This privacy policy applies to geotrivia.com and the Geotrivia mobile apps. It explains, in plain terms, which personal data we process, why we use it, and which rights you have.

Controller: Philipp Levent Förster, Bahnhofsplatz 2, 65428 Rüsselsheim am Main, Germany. You can contact us at contact@geotrivia.com.

Service Delivery, Security, and Logs

When you open the website or app, we process technically necessary data such as IP address, request URL, date and time, browser, device and operating-system information, referrer, error events, and security events. We need this to deliver Geotrivia, prevent abuse, debug errors, and keep the service stable.

Accounts, Login, and Sessions

You can use Geotrivia anonymously or sign in with Google or Apple. If you sign in, we store, depending on the provider, your name, email address, profile image, provider ID, linked account data, and session data. Sessions also include IP address and user agent and generally expire after 90 days.

Google and Apple receive data when you use their login and are responsible for their own processing.

Game Progress, Statistics, and Friends

For signed-in and anonymous sessions, we store game type, date, score, total, optional game data such as answers or metadata, category ratings, and suggestions. For friend features, we store friendships, friend codes, and visible profile data such as name and profile image.

We use this data to provide progress, leaderboards, statistics, friend lists, and product improvements.

Contact and Support

If you contact us through the form or by email, we process your name, email address, subject, message, technical sending data, and the IP address used for rate limiting. The form is sent to contact@geotrivia.com through Resend.

We delete support requests once they are resolved unless legal duties or possible legal claims require longer retention.

Cookies, Local Storage, and App Permissions

  • Necessary: login and session data, timezone, game progress, settings, language, and already shown notices.
  • Optional: consent, analytics, and advertising storage where you consent or where legally permitted.
  • Mobile app: authentication, game progress, settings, language, and reminders are stored locally on your device.
  • Notifications: daily reminders are scheduled locally; we do not send a push token to our server for them.
  • Tracking permission: on iOS, the app may ask for tracking permission in connection with advertising.

Analytics and Advertising

On the website, we use Simple Analytics for anonymous usage statistics and, in production, Google Analytics 4 for page views and usage patterns. The website also loads ads through Snigel and its advertising partners; the mobile apps use Google AdMob for banner and interstitial ads.

Depending on the service, this may process cookies, online identifiers, IP address, device/browser data, referrer, approximate location data, usage events, ad events, consent information, and advertising IDs.

Legal Bases

  • Art. 6(1)(b) GDPR: account, login, game progress, friends, and support where required for the service or your request.
  • Art. 6(1)(f) GDPR: security, debugging, abuse prevention, quality assurance, and aggregated analysis.
  • Art. 6(1)(a) GDPR and Section 25(1) TDDDG: optional analytics, advertising, consent, and tracking technologies.
  • Section 25(2) TDDDG: strictly necessary cookies and storage access.

Retention and Deletion

We store account data until you delete your account or we no longer need it for the service. Account deletion generally deletes linked game progress, friendship data, ratings, and suggestions. Anonymous data may be tied to an anonymous session ID and may be linked to your account if you later sign in.

Local app and browser data stays on your device until you delete it in the app, browser, by signing out/resetting, or by uninstalling. Statutory retention duties and legitimate evidence needs, for example legal defense, remain unaffected.

Recipients and International Transfers

Recipients may include hosting, database, email, login, analytics, and advertising providers, in particular Cloudflare, PlanetScale, Resend, Google, Apple, Simple Analytics, and Snigel. Some providers may process data outside the EU/EEA; where required, we rely on adequacy decisions or EU Standard Contractual Clauses.

Your Rights

Under the GDPR, you have rights to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent for the future. You may also complain to a competent data protection supervisory authority. To use these rights or ask questions, email contact@geotrivia.com.

Voluntary Provision

You do not have to provide data. Without technically necessary data, Geotrivia will not work; without account data, support data, or consent, you cannot use the respective optional features.