Privacy Policy

Last Updated: November 9, 2026

🔒 Privacy First Approach

TL;DR: We collect what we need to run your account and improve the extension: your email, your plan, how many hacks you've used, product analytics and a recording of the extension's side panel. A round's location is read in your browser and never sent to our servers. We never sell your data.

1. Introduction

Welcome to GeoGuesser Hacker ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our browser extension (for Chrome, Edge and Firefox) and website.

By using GeoGuesser Hacker, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

  • Email Address: When you sign in with Google or a one-time email code. Google sign-in also gives us your name; we use your first name to greet you in emails
  • Subscription Status: Your plan (Free, Monthly, Yearly or Lifetime) and whether its payments are up to date, from Stripe, or from ExtensionPay for subscriptions bought before version 3.0
  • Payment Information: Entered on Stripe's checkout page (or ExtensionPay's for older subscriptions). We never see or store your card number; Stripe tells us your email, billing country and what you bought

2.2 Usage Data

  • Usage Statistics: How many hacks you've used and when your free hacks reset, stored on our servers (Google Firebase)
  • Product Analytics: Events such as opening the panel, pressing Hack and whether it worked (and on which game site), settings you change, signing in, and opening the upgrade or checkout pages, with the extension version and browser. They're sent to PostHog and, once you sign in, linked to your email address. They never include a round's location
  • Error Logs: Technical issues for debugging and service improvement

2.3 Side Panel Recordings

The Chrome and Edge versions record a replay of the extension's side panel to help us find bugs and confusing screens:

  • Only the side panel — never the game pages or any other website, with one exception: during the first-run tutorial, the OpenGuessr tab the tutorial opens is recorded too (the page and the tutorial cards, not the Street View image), and that stops when the tutorial ends
  • What's recorded: clicks, mouse movement, scrolling and what the panel shows
  • Masked before it leaves your browser: anything you type (such as your email or sign-in code) and the signed-in email shown in the panel
  • Sent to PostHog, our analytics provider. The Firefox version records no analytics or replays

2.4 Location Data Processing

Important: GeoGuesser Hacker finds the round's location in the game's own network responses, in your browser, on GeoGuessr, OpenGuessr and (if you allow it) WorldGuessr — no image analysis or AI processing is performed. The round's coordinates are:

  • Never sent to our servers and never saved by us
  • Never included in analytics or recordings
  • Sent to OpenStreetMap's Nominatim service to look up the place name shown in the panel, and to Google Maps to draw the map if you turn on the Legacy map setting
  • Used solely for showing you the spot and placing your pin within the game

2.5 Smart Zoom

Client-Side Only: Smart Zoom operates entirely within your browser. It simulates map interactions (zoom, pan, regional exploration) before pin placement to mimic natural player behaviour. Smart Zoom does not send any data to external servers — all logic runs locally in the extension.

2.6 Our Website

  • Analytics: geoguessrhack.com uses PostHog to count visits and clicks: the pages you view, where you came from, your approximate location from your IP address, and a random identifier stored in your browser. The home page also records how you use the page (typed text masked)
  • Linking to the extension: Right after you install the extension, it opens a page on our website once, which connects your website visits to the extension's analytics, so we can see which pages lead to installs and upgrades
  • Uninstall Feedback: If you fill in the optional form after uninstalling, we store what you write

2.7 Information We Do NOT Collect

  • Web browsing activity - The extension only works on the supported game sites; it doesn't track the other websites you visit
  • Website content - We do not read other websites' content
  • Your location - We do not access your device's real location (GPS)
  • Card numbers - Payments are handled entirely by Stripe

3. How We Use Your Information

🔒 Chrome Web Store Limited Use Compliance

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

We limit our use of user data to providing our single purpose: finding the round's location and placing your pin on GeoGuessr, OpenGuessr and WorldGuessr.

3.1 Service Provision (Our Single Purpose)

  • Find the round's location in the game's network responses (in your browser)
  • Show you the spot on a map and place your pin automatically
  • Run your account and your weekly free hacks
  • Check your subscription status

3.2 Limited Service Improvement

  • Fix bugs and confusing parts of the panel (using analytics and side panel recordings)
  • Improve extension performance
  • Compare versions of a screen, such as which plan the upgrade card shows first

3.3 Essential Communications

  • Respond to support requests
  • Send critical service notifications
  • Notify about subscription status changes

3.4 Product Updates and Offers by Email

If you have a GeoGuesser Hacker account, we may email you about new versions and features, tips for using the extension, and offers for GeoGuesser Hacker Pro (for example, when a checkout wasn't finished or after a plan ends).

  • These emails come from mail.geoguessrhack.com and news.geoguessrhack.com and are sent through our email provider, Resend, which tells us whether each email was delivered and opened
  • Every one has a one-click unsubscribe link, and replying to tell us also works
  • Unsubscribing stops these emails; sign-in codes, receipts and notices about an active subscription still arrive
  • We never sell or share your email address for anyone else's marketing

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers (Limited Use Compliance)

We only share information with essential service providers for our single purpose:

  • Google Firebase: Sign-in, accounts and hack counts
  • Stripe: Payments, subscriptions and the billing page where you manage your plan; we never see your card details
  • ExtensionPay: Billing for subscriptions bought before version 3.0
  • PostHog: Product analytics and side panel recordings (extension and website)
  • Resend: Delivers sign-in codes and the emails described in section 3.4 (receives your email address only)
  • OpenStreetMap Nominatim: Turns a round's coordinates into a place name (receives the coordinates only)
  • Google Maps: Draws the map when the Legacy map setting is on (receives the coordinates only)

No Third-Party Data Transfers: We do not transfer user data to advertising platforms, data brokers, or information resellers. All data sharing is strictly limited to providing and improving the extension.

4.3 Legal Requirements

We may disclose information if required by law or to protect our rights, property, or safety.

5. Data Security

5.1 Security Measures

  • Encryption: All data is encrypted in transit and at rest
  • Access Controls: Limited access to personal data on a need-to-know basis
  • Secure Infrastructure: Enterprise-grade cloud security (Google Firebase)

5.2 Data Retention

  • Account Data and Usage Statistics: Retained while your account exists
  • Analytics and Side Panel Recordings: Kept for PostHog's retention period, then deleted automatically
  • Payment Records: Kept as long as tax and accounting rules require
  • Support Communications: Retained for reasonable period for service quality

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update or correct inaccurate information
  • Delete: Request deletion of your account and data
  • Export: Receive your data in a portable format
  • Restrict: Limit how we process your information

6.2 Account Deletion

To delete your account, email support@geoguessrhack.com from the address you sign in with. Within 30 days:

  • Your account, usage data and analytics will be permanently deleted
  • Any active subscription will be cancelled
  • We may retain some data as required by law or for legitimate business purposes, such as payment records

7. Browser Extension Permissions

7.1 Minimal Permissions Requested

Our extension requests only the narrowest permissions necessary for functionality:

  • storage: To save your settings, sign-in and free-hack count on your device
  • sidePanel: To display our extension interface
  • scripting: To place your pin on the game's map
  • identity: To sign in with Google
  • Site access: geoguessr.com and openguessr.com (to read the round's location and place your pin), worldguessr.com only if you allow it, our own server, ExtensionPay (older subscriptions) and OpenStreetMap Nominatim (place names)
  • tabs (Firefox only): To find your game tab

7.2 Website Interaction

On the supported game sites, the extension reads the game's network responses to find the round's location and, with Auto Place, moves the game's map and places your pin. It does NOT:

  • Run on, read or modify any other website
  • Track your browsing activity
  • Access website login information
  • Store website data

7.3 External Services

Each service provider in section 4.2 handles the data it receives under its own privacy policy.

8. Children's Privacy

GeoGuesser Hacker is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending an email notification (for significant changes)
  • Showing a notification in the extension

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@geoguessrhack.com

Website: geoguessrhack.com

Contact Page: geoguessrhack.com/contact

12. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis: We process your data based on consent and legitimate interests
  • Data Protection Officer: Contact privacy@geoguessrhack.com
  • Supervisory Authority: You have the right to file a complaint with your local data protection authority
  • Data Portability: Request your data in a machine-readable format

13. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information is collected about you
  • Delete personal information we have collected
  • Opt-out of the sale of personal information (we don't sell data)
  • Non-discrimination for exercising your privacy rights

This Privacy Policy is effective as of the date stated above and will remain in effect except with respect to any changes in its provisions in the future.