Privacy Policy

Last updated: 12 September 2026 · This is the one policy for all our games: PictoRiddle, PlaceGuess, EvoGuess and NationGuess.

Who we are

Guessing Time (guessingtime.com) is a small family of daily guessing games run by an independent developer based in Denmark. For anything privacy-related, such as questions, access requests or deletion, contact contact@guessingtime.com.

Playing without an account

Every game is fully playable without signing up. The games do not create a player id or play record just because you visit; Cloudflare counts page visits as described below. The first time you submit a guess, your browser is given an anonymous player id: a random code with no name or contact details. It lets the games store play records without asking who you are. Progress may also be kept only in your browser.

Accounts

PlaceGuess optionally lets you create an account to keep your scores and streaks across devices and appear on leaderboards. If you do, we store:

• Email address and password, used for signing in. The password is stored only as a secure hash; we never see it. If you sign in with Google instead, we receive your name and email address from Google and use nothing else from your Google account.
• Username, shown on public leaderboards together with your scores, so pick one that doesn't identify you if you prefer. Games you played anonymously before signing up become part of your account history.

The account is managed for the Guessing Time family, which is why Google's sign-in screen says “Guessing Time”. PlaceGuess is currently the only game with login. PictoRiddle offered account sign-in until 12 September 2026; its login and account-based progress have been retired, but existing PictoRiddle account records remain covered by the access and deletion rights below. Deleting your account deletes the profiles and play history tied to it in all of our games at once.

What the games store when you play

Play records describe the puzzle, not you or your device: which puzzle you played, your answers and choices in it (including guesses you type), your score, and when you played. PlaceGuess map guesses are clicks on a world map; the game never asks for or accesses your device's location. In PictoRiddle every guess you type is stored as text, together with the puzzle it was for, whether it was right and how many hints you had used. That is how we tune the answer matching and the difficulty. Please don't type personal details into the guess box; if you do, write to us and we will delete them.

Visitor statistics

All our sites use Cloudflare Web Analytics, a privacy-first page-view counter. It sets no cookies, stores no identifier on your device, and cannot follow you across other sites. For each page view it records the page, the referring site, and your approximate country, browser, operating system and device type. We use no advertising trackers, build no profiles, and never sell data.

Cookies and local storage

The games set no cookies. They do keep a few items in your browser's local storage, a similar mechanism that stays on your device: your player id or session key, language and display preferences, and your progress through today's puzzles in case you reload mid-round. There is no consent banner because one is only required for storage that isn't strictly necessary, such as tracking; everything here is strictly necessary to run the game, and none of it is used for tracking.

IP addresses

We do not store your IP address alongside your game results. Two unavoidable exceptions, both standard infrastructure logging: our hosting provider keeps short-lived server logs, and when an account or anonymous player id is created our database provider records that sign-in, including the IP address it came from, in a security audit log.

Why we collect it

We use this data solely to run the games: saving your scores and streaks, keeping you signed in, and showing PlaceGuess leaderboards (performance of our contract with you), plus abuse prevention and aggregate statistics about which puzzles are too hard or too easy (our legitimate interest). We never sell data or use it for advertising.

Who processes it

Your data is stored and processed by these service providers on our behalf, under their GDPR data-processing agreements:

• Supabase: database for all games and account sign-in for PlaceGuess (accounts, anonymous ids, play records), hosted in the United Kingdom (AWS London, eu-west-2), a country the EU recognises as providing adequate data protection
• Cloudflare: hosts every site, serves the game images, and provides the visitor statistics described above
• Google: only if you choose “Sign in with Google” in PlaceGuess
• Resend: sends PlaceGuess account emails such as password resets; it sees the address the mail goes to
• Forward Email and Cloudflare Email Routing: forward mail sent to our domains, so they handle anything you write to us

Where these providers process data outside the EU, transfers are covered by the EU–US Data Privacy Framework, the EU's adequacy decisions, or standard contractual clauses.

How long we keep it

Account data and game results are kept until you delete your account. Records from anonymous play carry no identifier that ties them to you; we keep them to measure and improve the games, and you can clear your browser storage at any time to sever the link to your past plays.

Your rights

Under the GDPR you can ask for access to, correction of, a copy of, or deletion of your personal data. To delete your account and everything tied to it in all Guessing Time games, email contact@guessingtime.com from the address you signed up with; we will delete it within 30 days.

For anonymous play, note that because those records carry no identifier that ties them to you, we usually cannot single out one person's records on request (GDPR Art. 11). If you can help us identify relevant data, we will act on it within 30 days.

You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

Changes

If this policy changes in a way that matters, we will update this page and the date at the top.