Privacy policy

Last updated 29 September 2026

This policy explains what personal data we handle when you use the Placehit app, visit placehit.app or buy the board game in our shop — why we handle it, who else sees it, and what you can ask of us.

The short version

• You can play without an account. If you sign in, we store your email, the name you choose and your game results.
• Usage statistics are off until you say yes in the app. There is no advertising ID and no ads.
• We never use your phone's GPS. A pin is a guess, not where you are.
• We don't sell your data.
• You can delete your account in the app at any time.

1. The app

Playing without an account

When you open the app, it gets a random account ID so your results can be saved. It is not linked to your name or email. Your pins, distances and points are stored under that ID.

Signing in with Apple or Google

Starting or joining a table asks you to sign in. We then store:

• your email address (or Apple's Hide My Email relay address) and which sign-in you used,
• the name you type in the app, and the avatar the app draws for you (you can shuffle it). The app may suggest your first name from Apple or Google, but that suggestion stays on your phone,
• your phone's country and language setting and its time zone, so the week's clock and the country league work.

We never receive your Apple or Google password.

Game data

The cards you play, your pins, distances, points, flags and the tables you are in.

• People in your tables see your name, avatar and pins.
• Everyone else who has played the same card sees your pin only as an anonymous pin with the flag of the country you play from. Tapping it shows that country and how far off the pin was — never your name or avatar.
• The country league uses your weekly points as part of your country's median. Other players never see your own score there.

Searching for a place

When you search for a city to place your pin, the text you type is sent to Google Maps to find the place, and the map itself comes from Google Maps.

Notifications

If you allow notifications, we store a token for your phone so we can send them. You can turn them off in your phone's settings.

Usage statistics (only if you say yes)

The app asks whether you want to share anonymous usage statistics (Google Analytics for Firebase). Until you answer yes, nothing is collected. It records things like when a round starts and ends, plus device model, app version and approximate region. You can change your answer any time in the app's settings. We don't use an advertising ID.

Crash reports

If the app crashes, it sends a crash report (Firebase Crashlytics) with the device model, system version and what went wrong. It contains no name or email. We use it to fix faults.

Music

Placehit doesn't play music. Songs open in the Spotify app, under the Spotify account on that phone. Spotify handles that under its own privacy policy, and we get nothing about your listening from Spotify.

2. The website and the shop

placehit.app shows the game and sets no cookies of its own. Our hosting providers keep short technical logs (like IP address and browser) to deliver the pages and keep them secure.

When you buy the board game, the checkout is run by Shopify. You enter your name, delivery address, email, phone number (if you want delivery updates) and payment details there. We receive what we need to deliver and support your order; we never see your full card number. The shop uses cookies — see the Cookie notice.

Shopify also uses some data for its own purposes (such as fraud prevention and its Shop features) as a separate controller. Read Shopify's privacy policy.

If you email us, we use what you write to answer you.

3. Why we use your data, and on what legal basis

• Running the game — saving results, tables, flags, the country league. Basis: our agreement with you (GDPR art. 6.1 b).
• Selling and delivering the board game, returns and support. Basis: our agreement with you (art. 6.1 b), and the Swedish Bookkeeping Act for order and invoice records (art. 6.1 c).
• Crash reports, security and stopping abuse. Basis: our legitimate interest in a working, safe game (art. 6.1 f).
• Usage statistics. Basis: your consent (art. 6.1 a), which you can withdraw any time.
• News about Placehit by email — only if you have asked for it. Basis: your consent (art. 6.1 a). Every email has an unsubscribe link.

4. Who else handles your data

Only providers that help us run Placehit, and only what they need:

• Google (Firebase, Google Cloud, Google Maps, Google sign-in) — storing game data, running the service, crash reports, statistics if you allow them, notifications, maps and place search.
• Apple — Sign in with Apple, notifications and app distribution.
• Shopify — the shop, checkout and orders, and the payment and delivery partners the checkout uses.
• Netlify — hosting this privacy site.

We may also share data if the law requires it, or to defend a legal claim. We don't sell personal data.

5. Transfers outside the EU

Some of these providers are based in the United States or use sub-processors there. Transfers are covered by the EU–US Data Privacy Framework where the provider is certified, and otherwise by the European Commission's standard contractual clauses.

6. How long we keep it

• Account and game data — as long as your account exists. When you delete your account, it is deleted right away, and from backups within 30 days.
• Anonymous totals (like "how the world guessed") — kept, because they contain nothing that points back to you.
• Crash reports and statistics — deleted automatically within 14 months.
• Orders and invoices — seven years, as the Swedish Bookkeeping Act requires.
• Emails to us — until the matter is settled, then deleted within a year.

7. Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and get it in a format you can take elsewhere. Write to privacy@placehit.app — we answer within a month.

Delete your account: in the app (You › Delete account), or see privacy.placehit.app/delete-account. If you never signed in, deleting the app removes the link between you and your results; email us if you want them removed too.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, imy.se, or to the authority in your own country.

8. Age

Placehit is for players aged 16 and over. We don't knowingly collect data from children. If you think a child has given us data, tell us and we'll delete it.

9. Changes

If we change how we handle personal data, we update this page and the date at the top, and tell you in the app about important changes.