Privacy

The operator of GeoLooker is the controller responsible for your information. You can reach the operator at contact@petery.live.

Account information includes your email address, display name, sign-in method, verification status, and security activity such as session times and device/browser details. Network (IP) addresses are used only in one-way hashed, short-lived form for rate limiting and abuse prevention; they are not stored with your account or in GeoLooker's application logs, although hosting and network providers may process them to deliver the service. Passwords, session credentials, room credentials, and security links are stored using one-way hashes rather than in plaintext.

Game information includes rooms you host or join, player names, map pins, guesses, results, clue use, connection events, and the activity needed to keep a shared game synchronized. Guests receive an essential browser credential so they can return to rooms they joined.

We also process support messages and limited operational logs needed to diagnose errors, prevent abuse, and protect the service.

We process account and game information to provide the service you request, authenticate users, run multiplayer rooms, restore interrupted games, calculate results, and administer hunts. We use limited security and diagnostic information for our legitimate interests in preventing fraud and abuse, maintaining availability, and improving reliability. We may also process information to meet legal obligations or establish and defend legal claims.

GeoLooker does not sell personal information, build advertising profiles, or use game guesses for advertising. It does not make decisions that have legal or similarly significant effects using automated processing.

GeoLooker uses essential, secure browser cookies to keep signed-in users and guests connected to their sessions and rooms. These credentials are not advertising cookies. Account sessions last no more than 30 days and expire after 24 hours without activity; room access is separately revoked or expires server-side.

The Google Maps JavaScript library loads automatically when a game opens with Google Maps configured, so Google receives ordinary network and browser information and may receive map interaction data. Pinpoint depends on Google Maps and has no non-Google map mode. Photo Match can continue with its regular MapLibre map if Google is unavailable. Street View is optional in both experiences. Google processes this information under the Google Privacy Policy and the Google Maps terms.

When Photo Match uses the regular MapLibre map, your browser requests map styles and tiles from the map provider configured by the operator. GeoLooker uses OpenFreeMap by default, so that provider receives ordinary request information such as your IP address, browser details, and the requested map area. An operator may instead configure a same-origin map service.

Google account sign-in is optional. The Google sign-in library loads automatically when you open the sign-in, registration, or account pages, even if you do not use it, so Google receives ordinary network and browser information and may read or set its own cookies under the Google Privacy Policy. If you choose Google sign-in, we receive the account identifier, email address, name, and verification information Google returns for authentication.

We use contracted providers for application hosting, PostgreSQL and Redis data services, object storage and image delivery, email delivery, monitoring, and Google services. They process information only for providing those services, subject to their agreements and applicable law. Where information is transferred internationally, the operator must use a lawful transfer mechanism, such as an adequacy decision or approved standard contractual clauses, as applicable.

Account sessions expire within the periods above. Email-verification links expire after 8 hours; password-reset and email-change links expire after 30 minutes. Open lobbies expire after 24 hours. Guest names, credentials, and precise guest-linked game activity from completed or abandoned rooms become due for revocation, deletion, or pseudonymization after 30 days and are normally processed by the next hourly cleanup run.

Account data remains until you delete the account or it is no longer needed. Deletion removes access and personal account details; shared hunts and aggregate game records may remain without your identity. Backups age out under the operator's documented backup schedule, while narrowly retained security or audit records may be kept longer when necessary for legal claims, abuse prevention, or a legal obligation.

Depending on where you live, you may request access, correction, deletion, restriction, or portability of your information, or object to processing based on legitimate interests. You may withdraw consent where consent is the basis, without affecting earlier processing. Account settings let you update your details, download a copy of your data, sign out other devices, and delete your account; you can also contact us.

You may complain to the data-protection or privacy authority where you live or work. We may need to verify your identity before fulfilling a request, and legal exceptions can apply.

GeoLooker is not directed to children under 16. Anyone below the age at which they can consent to online services in their country may use it only with permission from a parent or legal guardian. A guardian can contact us to request deletion.

For privacy questions or rights requests, contact contact@petery.live.