Privacy Policy

Last updated: 17 March 2026

Overview

GaffGuessr is a property price guessing game. We collect only the data necessary to run the game and manage your account. We do not sell your personal data to third parties.

Data we collect

Account information

When you create an account we store your email address, a username you choose, and a hashed password. We use this to authenticate you and display your name on leaderboards.

Game data

We store your guesses, scores, streaks, and game history so we can show you stats and populate leaderboards.

Payment information

If you subscribe to GaffGuessr Pro, payment is processed by Stripe (on the web) or Apple/Google (in the mobile apps). We store a customer identifier to link your subscription to your account. We never see or store your full card details.

Push notification tokens

If you allow push notifications on the mobile app, we store a device token to send you notifications (e.g. daily challenge reminders). You can revoke this at any time in your device settings.

Location reports

If you report an incorrect or inappropriate Street View location, we store the report along with your user ID so we can review and remove bad data.

Third-party services

  • Supabase — database and authentication hosting (EU region).
  • Google Maps Platform — provides Street View imagery and geocoding. Subject to the Google Privacy Policy.
  • Stripe — payment processing for web subscriptions. Subject to the Stripe Privacy Policy.
  • Apple / Google — in-app purchase processing on mobile. Subject to their respective privacy policies.
  • RevenueCat — subscription management for mobile in-app purchases. Subject to the RevenueCat Privacy Policy.

Property data sources

Property sale prices displayed in the game come from publicly available government data:

  • England & Wales: HM Land Registry Price Paid Data, published under the Open Government Licence v3.0.
  • Ireland: PSRA Property Price Register, publicly available data.

Data retention

Your account data and game history are retained for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised, aggregated game statistics may be retained indefinitely.

Legal basis for processing (GDPR)

GaffGuessr operates under the UK General Data Protection Regulation (UK GDPR) and the Irish Data Protection Act 2018. We process your personal data on the following lawful bases:

  • Contract — account data, game data, and subscription data are necessary to provide you with the service.
  • Consent — push notifications and optional leaderboard visibility. You may withdraw consent at any time.
  • Legitimate interest — anonymised, aggregated analytics to improve the game.

Your rights

Under UK GDPR and the Irish Data Protection Act, you have the following rights:

  • Access — view your data via the Account page, or request a copy by emailing us
  • Rectification — update your username, email, or password at any time from your Account page
  • Erasure — delete your account and all associated data from the Account page. Deletion is immediate and permanent.
  • Data portability — request an export of your data by emailing us at the address below
  • Restrict processing — you may hide your profile from leaderboards via Account settings
  • Withdraw consent — revoke push notification permissions in your device settings at any time
  • Complaint — you have the right to lodge a complaint with the ICO (UK) or the Data Protection Commission (Ireland)

Cookies

We use essential cookies for authentication (session tokens). We do not use advertising or tracking cookies.

Children

GaffGuessr is not directed at children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy from time to time. Material changes will be communicated via the app or email.

Contact

Questions about this policy? Email us at privacy@gaffguessr.com.