This policy covers both the GeoPin website at geopin.co and the GeoPin app for Android.
GeoPin ("the game", "we", "us") is developed by SDSparkle. You can reach us at captain@geopin.co.
You can play the whole game without an account. In that case we collect no personal information: your scores, coin balance, cosmetic unlocks and settings stay on your device and are never sent to us. Nothing is uploaded until you choose to do something that needs an account — joining the leaderboard, sending a challenge, or submitting a question.
If you join the leaderboard, send a challenge, or submit a question, GeoPin creates an anonymous account for you. This needs no email and no password — it is an identifier generated by our auth provider so your progress can be tied to something. You choose a username, which is public wherever you appear.
You can optionally attach an email and password so your progress survives reinstalling or switching devices. Then we also hold:
With an account (anonymous or email), the following is stored on our servers and linked to your account:
Our hosting provider (Netlify), backend provider (Supabase) and the public CDNs that serve the 3D libraries and fonts (cdnjs, jsDelivr, Google Fonts) receive standard request data including IP address and user-agent, as any web request does. We do not use this for analytics, profiling or advertising.
GeoPin keeps a small table of daily totals — such as how many games were played across all players. These are counters only. They contain no usernames, no account identifiers and nothing that identifies you.
We do not use your data for advertising, profiling, or selling to third parties. We do not show ads.
Account data (anonymous identifier, optional email, username, progress, leaderboard entries, challenges, submissions and promo redemptions) is stored with Supabase (privacy policy), on cloud infrastructure protected by row-level security. The website is hosted on Netlify (privacy policy). The Android app is distributed through Google Play (privacy policy).
The 3D engine, loaders and web fonts are served from public CDNs (cdnjs, jsDelivr and Google Fonts). Requesting a file from a CDN reveals your IP address to that CDN, as with any website. No account data is sent to them. The globe's map textures ship inside the app itself.
GeoPin stores the following on your device, in browser localStorage or the app's local storage:
If you are playing as a guest, this data stays on your device and is never sent to us. You can clear it at any time by clearing site data for geopin.co, or by uninstalling the app.
If you have an account, a copy of this data is uploaded to your account so your progress can be restored on another device, and is kept in sync as you play. It is linked to your account identifier. Deleting your account removes it.
GeoPin lets you write your own trivia question and drop a pin for its answer. If you submit one, we store the question text, the answer, the coordinates you pinned, the category you chose, and your account identifier so we can credit the GeoCoin reward.
Submissions are reviewed before publication. If yours is approved, the question text and its location become part of the game and are visible to every player. Your username is not attached to the question. Do not put personal information into a question — treat anything you submit as public and permanent, since approved questions ship inside the app and cannot be recalled from copies already installed.
You can ask us to withdraw a submitted question at any time by emailing captain@geopin.co; it will be removed from future updates.
The Android app can send you a daily reminder to play, and a notification when someone answers your challenge. These are scheduled on your device — we do not run a push service and do not collect a push token. Android asks your permission before the first notification, and you can turn reminders off in GeoPin's Settings or in your system settings at any time.
The app also uses Google Play's in-app review prompt after you have played a number of games. That interaction is handled entirely by Google Play; we do not see who reviewed or what was written.
GeoPin is intended for general audiences. We do not knowingly collect personal information from children under 13. If you are under 13, please play as a guest (no account required). If you believe a child has provided us personal information, contact us at captain@geopin.co and we will delete it promptly.
You may at any time:
Residents of the EU/EEA have additional rights under GDPR (access, rectification, erasure, portability, restriction). Contact us to exercise these rights.
We keep your account data for as long as the account exists. Scores stay on the leaderboard until you delete your account. If an account has not been used for 2 years we may delete it, along with its progress and leaderboard entries.
Approved questions are an exception: once published they are part of the game's content and remain after your account is gone, because they ship inside app versions already installed on other people's devices. They carry no username or account identifier.
We use industry-standard security measures including HTTPS, hashed passwords, and row-level security on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
We may update this policy occasionally. If we make significant changes, we'll update the "Last updated" date above. Continued use of GeoPin after changes constitutes acceptance of the new policy.
Questions? Email us at captain@geopin.co.
← Play GeoPin