Privacy Notice

This notice explains how GuessPlane (based in Sweden) handles your personal data when you use GTP – Guess the Plane. GuessPlane is the data controller, which means it decides why and how your personal data is used.

Data we collect and why

• Account data (email address, login details, username): to create and run your account and show your username on the leaderboard. Legal basis: performance of a contract.
• Game data (daily answers, streaks and scores): to run the game and the leaderboard. Legal basis: performance of a contract.
• Technical data (IP address, device and browser information, logs): to keep the Service secure, prevent fraud and cheating, and fix problems. Legal basis: legitimate interests.
• Support messages: to answer your questions. Legal basis: legitimate interests.

Who we share data with

• Service providers that host and run the app and its database and sign-in system.
• Professional advisers (such as legal or accounting), when needed.
• Authorities, where the law requires it.

The leaderboard shows only your username and game stats. We never sell your personal data.

International transfers

Some of our service providers may process data outside the UK/EEA. When that happens, we rely on safeguards such as the EU Standard Contractual Clauses or adequacy decisions.

How long we keep data

We keep account and game data for as long as you have an account. When it's no longer needed, or when you ask us to delete your account, we delete or anonymise it.

Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have it corrected or erased;
• restrict or object to how we process it;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent;
• complain to a supervisory authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY).

We answer requests within one month. To make a request, reply to any email you've received from GTP.

Security

We protect your data with appropriate technical and organisational measures, such as encrypted connections, access controls and limiting who can access stored data.

Cookies and local storage

GTP only uses essential storage in your browser: it keeps you signed in. We don't use analytics or marketing cookies.

Changes

We may update this notice. The date at the top shows the latest version.