Policies

The short version

You can play without telling us anything about yourself. We give your browser a random identifier. That is how we score your round and show you your own history.

If you choose a callsign for the leaderboard, that callsign is public. We never ask for your email address, a password or your real name.

We run no analytics and no tracking pixels. No third-party script runs on this site.

Who we are

Write to privacy@tapwhere.com about anything on this page.

What stays in your browser

Your player identifier. Your callsign. The country board you picked. Whether you want to confirm before locking in a guess. Sound on or off. Miles or kilometres. Your language. The results of the rounds you have played.

All of that sits in your browser's local storage, not in a cookie. We set one cookie, and only if you change language. The cookie document below explains it.

Clearing your browser data removes all of it. Unless you have saved a recovery code first, that is permanent.

What we keep on our servers

• Your player identifier, your callsign and a two-letter country code.
• If you never pick a country, we use the country our hosting provider works out from your IP address and adds to the request. We store that two-letter code. We do not store the IP address it came from.
• Every guess in a daily round: the point you tapped on the map, how far it was from the answer, the score, and how long you took. This is a record of what you did in a quiz. It is not a record of where you were.
• The same record for practice rounds and archive rounds. Those are never shown to anyone else.
• Your daily score. It goes on the public leaderboard once you choose a callsign.
• If you join a private group or a class: the group name, its code, who owns it, and who is in it. Everyone in a group, and the teacher of a class, can see the callsigns and daily scores of the other members.
• If you create a challenge link: its title, the five questions in it, and your score.
• Your recovery code, so that typing it on another device restores your profile. We store it as written rather than scrambled, because we have to be able to show it to you again.
• If you buy Pro: your Stripe customer identifier, your subscription identifier, your plan, and when it runs out. Card details never reach us.
• Anything you send through the feedback box: your message, the optional contact field, your player identifier, the question you reported, the page you were on, the version of the app, and the identification text your browser sends with every request.

What we do not keep

No email address. No password. No real name. No date of birth.

We do not store IP addresses. When a request arrives we hold the address in memory for a few seconds, so that one person cannot flood the server. We never write it to our database or to a log file, and it is gone when the server restarts.

Your IP address still reaches our hosting provider, because every request on the web carries it. That is how the page gets to you. What we decide is what we store, and we store none of it.

Who else sees anything

Our hosting provider and our database provider handle this data for us and on our instructions.

Stripe handles payment on its own pages. We send Stripe your player identifier, so that a payment can be matched to your profile. Stripe asks you for your card details. We never see them.

The map is the part worth knowing about. Your browser loads the satellite imagery from Esri, and the map data and map labels from OpenFreeMap. Those requests go straight from your browser to them, so both companies receive your IP address and can see which parts of the map you looked at. We never receive any of it, and we cannot prevent it while the map is on screen.

Your rights

Your own profile page shows your rounds, your callsign and your country. Ask us for anything else we hold about you and we will send it to you.

To have it deleted, send us your recovery code or your player identifier. We will delete every row attached to it.

Where you live may also give you the right to correct your data, to receive a copy of it, or to object to what we do with it. Ask us, and we will do it.

Children

The game suits children and is built to be used in classrooms. That is exactly why it asks for nothing: no account, no email, and no name unless a player invents one.

Please do not type a real name into the callsign box. Please never put another person's details into the feedback box.

Using the game means you accept these terms. If you do not accept them, please do not use the game.

The game is free

The daily round is free, and we intend to keep it free.

Pro adds extra modes. While advertising is running, Pro removes it. Pro never changes how anyone is scored, and it never takes the daily round away from anyone who does not pay.

Your profile

There is no account and no password. Your profile lives in your browser and is identified by a random code.

Your recovery code is the only way to move your profile to another device. Anyone who has that code can open your profile, so treat it like a key.

If you lose the code and clear your browser, your history is gone. We cannot get it back for you.

Fair play

Please do not:

• Use scripts, bots or automation to play, or to collect our questions.
• Try to read answers before you have guessed, or interfere with scoring.
• Choose a callsign, a group name or a class name that is abusive, that pretends to be somebody else, or that contains a real person's details.
• Put another person's personal information into the feedback box.

We may remove a callsign, a group name or a leaderboard entry that breaks these rules. We may block access to anyone who is attacking the service.

What belongs to whom

The questions, the writing, the design and the code are ours.

The map imagery and the map data belong to their providers. We use them under their own terms and credit them on the map.

Your callsign and your scores are yours. Entering a leaderboard asks us to show them publicly. Tell us to stop and we will stop.

We can still be wrong

We check every coordinate and write every fact ourselves. We will still get things wrong.

If you spot a mistake, the report link on any reveal sends it straight to us.

Please do not rely on this game for anything that matters, such as finding your way.

Availability

This is a small operation. The game may go offline for maintenance. It may change. It may one day stop. If you are paying when that happens, we will refund the part of your subscription you have not used.

Liability

We provide the game as it is.

Nothing in these terms limits our liability for death or personal injury caused by our negligence, for fraud, or for anything else that the law does not allow us to limit.

Nothing here affects your rights as a consumer.

Law

Governing law: Morocco.

If you are a consumer, you keep the protection of the law of the country you live in, and you can bring a claim in your local courts.

One cookie

We set one cookie, and only when you choose a language. It is named gt_locale and it holds a language code, such as “en”. It holds nothing else.

The server reads it so that a plain link takes you back to the language you were reading. It lasts a year. Deleting your site data removes it.

We set no cookie for analytics, no cookie for advertising, and no cookie for signing in. There is nothing to sign in to.

What we use instead

Everything else the game remembers sits in your browser's local storage. Local storage is not a cookie. It is never sent with a request on its own, and no other website can read it.

• Your player identifier. A random code, so the server knows which rounds are yours. Without it the game cannot keep score.
• Your callsign and country. So you do not have to retype them, and so the leaderboard row is yours.
• Your rounds. So the results page works and your streak survives a refresh.
• Four preferences. Sound on or off. Miles or kilometres. Whether to confirm before locking in a guess. Your language.

All of it is there so the game works the way you asked. None of it follows you to other websites.

How to clear it

Clearing site data in your browser removes the cookie and everything in local storage. Unless you have saved your recovery code first, that is permanent. Save the code if you want your streak back.

If we add advertising

We intend to pay for the game with advertising. Advertising networks set their own cookies. Before any advertising goes live this page will change, and where the law requires it we will ask you first. No advertising script will run until you agree to it. We will not switch it on quietly.

The map

The satellite imagery comes from Esri. The map data and the map labels come from OpenFreeMap. Your browser fetches all of it directly from them. Those are ordinary requests for files rather than cookies, but they do mean both providers can see your IP address.

Cancelling

You can cancel at any time, yourself, from the cancellation page linked at the bottom of every page. It does not ask you to sign in, and it shows you the exact time your cancellation was received. You can also write to privacy@tapwhere.com if you would rather we did it.

Cancelling stops the next payment. You keep Pro until the end of the period you have already paid for. There is no cancellation fee and no notice period.

Changing your mind

If you are a consumer in the UK or the EU, the law gives you fourteen days to withdraw from a subscription.

Pro starts the moment you pay. Asking for it to start straight away means giving up that right once you have begun using it. The Pro page says so beside the button you press to pay, so the choice is yours to make knowingly.

In practice we do not stand on that. Write to us within fourteen days and we will refund you, whether or not you have played.

If something is wrong

If Pro does not work, or a feature we described is missing or broken, that is our problem and not yours. Tell us. We will fix it or refund you.

Nothing on this page affects the rights the law gives you when a service is not as described.

If we stop

If the game closes, or we stop offering Pro, we refund the part of your subscription you have not used. You should not have to ask for that one.

What we do not refund

We do not refund a subscription period that you have used and that has already ended, unless the law gives you that right.

We do not refund a profile that we blocked for cheating or abuse. Your rights under the law still stand.

How to ask

Write to privacy@tapwhere.com. Send your recovery code, or the email address on your payment, and tell us what happened. We aim to reply within a few days. A refund goes back to the payment method you used.