Privacy Policy

The short version

We collect the absolute minimum to deliver and protect the product: your email address, a hashed device fingerprint, and the payment metadata we need from Stripe to honor your license. We do not log your GeoGuessr gameplay. We do not analyze your moves. We do not sell anything to anyone. If you want it all gone, email us.

Who we are

GeoGhost is operated by a small team reachable at support@geoghost.gg (the "Team"). For the purposes of the EU General Data Protection Regulation, the Team is the data controller for the information described below.

What we collect

When you buy

The checkout is handled by Sellauth (our merchant of record) and Stripe (the payment processor). They collect what is required to take your money: card details, billing address, country, and your email. We receive from them a transaction reference, your email, and the variant you bought. We do not see your card.

When you activate

When you activate a license key in the app, we store: your email, a salted hash of your password, the key you redeemed, the expiry date, and a one-way hash of your device fingerprint. The fingerprint is derived from non-personal hardware identifiers and only ever leaves your computer in hashed form, so it cannot be reversed back into anything that identifies you. We also generate a session token that pairs your installed app with your account.

While you use the app

The app sends a heartbeat to our license server every few minutes to confirm your access is still valid. The heartbeat carries the session token and nothing else. We log the timestamp of the heartbeat so we can detect abandoned sessions and revoke them. Aside from this, no gameplay data ever reaches our servers.

Third-party lookup we cannot avoid

When a round starts, GeoGhost reads the round's coordinates from the GeoGuessr round and sends them, and only them, to a public geocoding service to translate the coordinates into a road name, postcode and region. This request is anonymous: it carries no account, no email, no session token, no identifier of any kind. We do not run the service and we do not see the request. If you want to know exactly which provider we use today, email support@geoghost.gg and we will tell you.

What we do not collect

• Your GeoGuessr account credentials. The app never sees them.
• Your gameplay on our side. Guesses, scores, round results. None of that reaches us.
• Telemetry. There are no behavior trackers, no analytics SDKs.
• Bug reports. If you send one, it is opt-in and contains only what you choose to include.

About your IP address

We log the IP address attached to two specific actions: logging in and redeeming a key. Both are security-relevant events where an audit trail matters if a key is shared or an account is misused. The heartbeat the app sends while you play does not log your IP. We do not store an IP per round, per guess, or per session beyond those two events.

Where it lives

The license database runs on Cloudflare's infrastructure. Payments run through Stripe and Sellauth. Email replies, when we exchange them, sit in our support inbox.

Cookies

This website uses no analytics cookies and no advertising cookies. The Sellauth checkout modal sets cookies required to keep your cart and complete payment. Those cookies are described in Sellauth's privacy policy and are not under our control.

Your rights

If you are in the European Economic Area or another jurisdiction with comparable rules, you have the right to: access the information we hold about you, correct it, delete it, port it elsewhere, and object to or restrict our processing. To exercise any of these, email support@geoghost.gg from the address associated with your account. We will respond within thirty days.

Deleting your account permanently invalidates any active key. If you want to delete your data while keeping your access, we cannot help. The data is the access.

Retention

Account records are kept while the account exists. Closed accounts are erased after ninety days, except where retention is required by tax, accounting, or fraud-prevention obligations. Payment metadata is retained per the legal retention period imposed on Stripe and Sellauth.

Changes

Material changes to this policy will be communicated by updating the date at the top of this page and, where appropriate, by email to active users.

Contact

Email support@geoghost.gg. We read every message.