Privacy Policy

Last updated: June 7, 2026

This Privacy Policy explains how Name the City (the "Application") processes information when you use the app or the web version at namethe.city.

• Data controller: Jakub Ignalewski, operator of Name the City
• Contact: ignalewski@gmail.com
• Location: Poland, European Union

This policy is written for users in the European Economic Area (EEA), but the same privacy-first approach applies to all users.

Name the City is designed to collect as little information as possible. The Application does not require an account and does not ask for your name, email address, phone number, payment details, precise device location, photos, contacts, or similar sensitive information.

However, some limited information is processed so the game can work, remember your progress, show maps, and help us understand whether the Application is functioning correctly.

1. Information We Process

A. Local Player ID

When you first play a game, the Application generates a random UUID on your device (the "Player ID").

• What it is: A randomly generated identifier, for example 550e8400-e29b-41d4-a716-446655440000.
• What it is not: It is not your name, email address, phone number, advertising ID, IMEI, MAC address, or precise location.
• Where it is stored: The Player ID is stored locally on your device using app preferences/storage.
• Why we use it: We send the Player ID to our backend so we can restore your active game, save your guesses, calculate daily statistics, and maintain streaks.

Under EU data protection law, a persistent Player ID can still be treated as pseudonymous personal data because it can be linked to your game history. We therefore handle it as personal data even though we do not know your real-world identity.

B. Game Data

When you play, our backend processes game-related information, including:

• Player ID;
• game ID;
• selected game mode and difficulty;
• selected app language;
• target city for the game;
• submitted city guesses;
• guess coordinates selected from the in-app city list;
• whether guesses were correct;
• approximate distance and direction feedback;
• game status, such as active, won, or gave up;
• timestamps for game creation, updates, guesses, and completion.

We use this data to operate the game, restore unfinished games, calculate results, show your daily statistics, and prevent duplicate daily sessions.

C. Local Preferences

The Application stores some preferences locally on your device, including:

• selected language;
• selected distance unit;
• whether the welcome dialog has already been shown.

These preferences are used to make the Application work consistently for you. They are not used to identify you directly.

D. Analytics Events

We use Umami analytics to understand basic product usage and diagnose problems.

Analytics events may include:

• app open;
• welcome flow shown or completed;
• settings opened;
• language or distance unit changed;
• daily or practice game started;
• game loaded or failed to load;
• guess submitted or failed;
• game won;
• give-up action confirmed or failed;
• event properties such as game mode, difficulty, game status, guess count, and wrong guess count.

For the web version, analytics payloads may also include standard browser metadata such as page path, hostname, referrer, browser language, and screen size. For native/mobile builds, analytics payloads include the configured app hostname, app language, and a simple app URL value.

We send the local Player ID to Umami analytics as a pseudonymous event property so we can connect analytics events to a single device-local player profile. Analytics are not used for advertising and are not used to track you across unrelated apps or websites. We chose Umami because it is self-hosted and does not rely on third-party tracking networks.

E. Server Logs and Network Metadata

When your device communicates with our backend, map services, or analytics endpoint, technical network metadata may be processed automatically. This can include your IP address, request time, requested URL, user agent, and similar connection information.

This information is used for security, abuse prevention, debugging, service operation, and delivery of requested content.

F. Map Data

The Application displays maps using:

• our backend for game-specific vector map tiles.

When map tiles are loaded from our backend, technical request information such as your IP address and browser or app user agent may be processed as part of normal service delivery and security logging.

2. Information We Do Not Collect

Name the City does not intentionally collect:

• real names;
• email addresses, unless you contact us directly;
• account passwords;
• phone numbers;
• payment information;
• advertising identifiers;
• precise GPS location from your device;
• contacts;
• photos, videos, or camera data;
• health, biometric, or other special-category data;
• data for third-party advertising.

The Application does not sell user data.

3. Purposes and Legal Bases

For users in the EEA, we rely on the following legal bases under the GDPR:

Where local law requires consent for a particular analytics or storage activity, we will rely on consent instead.

4. Processors and Third Parties

We do not sell, rent, or trade user data.

We use service providers only where needed to operate the Application:

• Backend and database hosting: Our backend and game session database are hosted on servers in Warsaw, Poland by OVHcloud.
• Analytics: Umami, self-hosted on our infrastructure in Warsaw, Poland by OVHcloud.
• Map tiles: Our backend serves game-specific vector map tiles.

These providers may process technical metadata, such as IP addresses, as necessary to deliver their services.

5. International Transfers

We aim to host and process personal data in the EEA where reasonably possible.

If any provider processes personal data outside the EEA, we will rely on an appropriate legal mechanism, such as an adequacy decision, Standard Contractual Clauses, or another transfer safeguard required by GDPR.

6. Data Retention

We keep data only for as long as reasonably needed for the purposes described in this policy.

• Player ID on your device: Stored until you clear the Application's storage/cache, reset browser storage, or uninstall the Application.
• Game data on our backend: Stored while needed to operate active games, restore daily games, maintain daily statistics and streaks, and provide the game service.
• Server logs: Retained for 90 days as needed for security, debugging, and operational reliability.
• Analytics data: Retained indefinitely in an aggregate form for product trend analysis and service improvement.
• Support/privacy requests: Retained as long as needed to respond and keep legally required records.

If you clear local storage or uninstall the Application, the Player ID stored on your device will be removed. This may prevent the Application from linking future requests to your previous game history, but it does not automatically delete backend records that were already stored.

7. Your Rights

If GDPR applies to you, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local data protection authority.

Because Name the City does not use accounts, we may need information that lets us locate the relevant records, such as your Player ID or other details you provide about your game session. If we cannot reasonably verify or locate the data, we may be unable to fulfill parts of a request.

To exercise your rights, contact us at: ignalewski@gmail.com.

8. Deleting Local Data

You can remove locally stored data by:

• clearing the Application's storage/cache in your device or browser settings; or
• uninstalling the Application.

This removes locally stored preferences and the locally stored Player ID. If you later use the Application again, a new Player ID may be generated.

For deletion of backend game records linked to a Player ID, contact us at: ignalewski@gmail.com.

9. Children's Privacy

Name the City is intended for a general audience and is not directed to children under 13. In the EEA, where consent-based processing of children's data is relevant, the applicable age may be up to 16 depending on the country.

We do not knowingly collect real-world identity information from children. If you believe a child has provided personal data to us, please contact us so we can review and delete it where appropriate.

10. Security

We use reasonable technical and organizational measures to protect the limited data we process. These measures may include HTTPS, access controls, server security practices, and limiting the data collected to what is necessary.

No internet service can guarantee absolute security, but we aim to keep the data processed by Name the City minimal and low risk.

11. Automated Decision-Making

Name the City does not use your data for automated decision-making that produces legal or similarly significant effects. Game results are calculated automatically as part of the gameplay you request.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date above.

Material changes will be communicated in a reasonable way, such as by updating this in-app policy or the policy page on our website.

13. Contact

For privacy questions or requests, contact:

ignalewski@gmail.com