Privacy Policy

Last updated: 11 November 2026

GeoClash is a free browser geography strategy game. This policy explains what personal data we collect when you use the website and the game, why, who we share it with, how long we keep it and your rights. We collect as little as we can to run the game.

Who is responsible for your data

GeoClash is run by the GeoClash developer (“we”, “us”), based in the country where the operator is based, who is the data controller for the personal data described here. Contact: machimilahbusiness@gmail.com.

What we collect

• Account details. If you create an account, our sign-in provider Clerk processes your email address, your password (we never see it) and, if you use one, the basic profile from a social login such as Google. We receive your Clerk user ID, email address and name.
• Guest profiles. If you play as a guest, your random guest name, settings, saved games and Dice Arena record are kept only in your browser’s local storage. We do not store guest profiles on our servers. If you later create an account, they are copied into it.
• Profile and game data. Display name, the country and look assigned to your profile, saved games, game settings and, for online matches, results and statistics.
• Dice Arena results. When you finish a Dice Arena or Leaders1v1 game, we save the nation you played, whether you won, the number of turns, countries taken and held, land area, lives left and game length, so you can see your record.
• Multiplayer data. While you are in an online match, other players see your display name, country and score. Match rooms are deleted within hours of a match ending.
• Anonymous usage statistics. Which pages are visited, which game modes are started and finished, how long a visit lasts, whether the device is a phone or a computer, the website that linked to us and an approximate country supplied by our hosting provider. These use a random number that exists only while the page is open: no cookies or stored identifiers, no IP address, and they are not linked to your profile. You can turn them off on the Cookies page, and we do not collect them if your browser sends a Global Privacy Control or Do Not Track signal.
• Advertising data. The home page shows ads from Google AdSense. Google and its partners may use cookies and similar identifiers, your IP address and device information to show ads, limit how often you see them, measure them and prevent ad fraud. See the Advertising section below.
• Technical data. When you load the site, our hosting provider processes your IP address, browser type and request details to deliver it and protect it from abuse.

We do not collect special categories of data, we never give your profile, email or game data to advertisers, and we do not make decisions about you by automated means that have legal or similarly significant effects.

Why we use it and our legal basis

• To provide the game you ask for: your profile, sign-in, saves, settings, results and multiplayer. Legal basis: performance of our contract with you (our Terms).
• To keep the game secure and fair: preventing abuse, cheating and attacks. Legal basis: our legitimate interest in running a safe service.
• To understand, in aggregate, how the game is played and improve it, using the anonymous statistics. Legal basis: our legitimate interest in improving the game, with the opt-outs described above.
• To show ads that keep the game free. Legal basis: in the EEA, the UK and Switzerland, your consent for personalised ads and for ad cookies where consent is required; elsewhere, our legitimate interest in funding the game.
• To meet legal obligations and respond to lawful requests. Legal basis: legal obligation.

Cookies and storage on your device

We use strictly necessary cookies (to keep you signed in) and your browser’s local storage (to keep game progress and settings). Our own statistics use no cookies. Google’s advertising cookies are used only as described in the Advertising section, and in the EEA, the UK and Switzerland only after you consent. The full list is on our Cookies page.

Advertising

The home page shows ads served by Google AdSense (Google Ireland Limited in the EEA and Switzerland, Google LLC elsewhere). Google is an independent controller of the data it collects through its ads. In the EEA, the UK and Switzerland, Google’s consent message (a certified consent management platform) asks before any personalised ads or ad cookies are used. You can refuse, and you then see limited or non-personalised ads. You can change your choice at any time with the Privacy choices link on the home page. Learn more in how Google uses information from sites that use its services, and manage Google’s personalised ads at My Ad Center.

Who we share it with

We do not sell your profile, email or game data. We use these service providers, who process data on our behalf under their data processing terms:

• Vercel Inc. (United States): website hosting, server functions and cookie-free Web Analytics. Web Analytics measures page views, referrers, approximate location and browser/device information without linking it to your game profile. We remove query strings and fragments from page URLs before sending them. The statistics opt-out on the Cookies page, Global Privacy Control and Do Not Track also apply to Web Analytics. See Vercel's analytics privacy information.
• Clerk Inc. (United States): sign-in and account security. If you choose “Continue with Google”, Google also processes your sign-in under its own privacy policy.
• Supabase Inc.: database hosting. Our database is stored in London, United Kingdom, on Amazon Web Services.

Google receives advertising data as described in the Advertising section. The game’s fonts are hosted on our own site, so loading a page does not contact Google Fonts. If you follow the “Support us” link, Buy Me a Coffee handles any payment as an independent service under its own terms and privacy policy. We may disclose data if the law requires it or to protect our rights and our players.

International transfers

Some providers process data in the United States. Where data from the European Economic Area, the United Kingdom or Switzerland goes to a country without an adequacy decision, the transfer relies on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Accounts: until you delete your account, when they are erased from our database straight away.
• Guest profiles: we do not keep them. They stay in your browser until you leave the guest profile or clear your browser data. Guest profiles that earlier versions of GeoClash stored on our servers are moved to your browser on your next visit and deleted from our database; those not visited within 30 days are deleted.
• Sign-in sessions: up to 30 days.
• Anonymous usage statistics: about 13 months.
• Multiplayer rooms: deleted within hours of a match ending.
• Hosting logs: a short period set by our hosting provider, for security.

Your rights

Depending on where you live (including under the EU and UK GDPR), you have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to how we use it, and withdraw consent where we rely on it. You can delete your account at any time in the game: open your profile and choose Delete account. This erases your profile, saves and results, and your Clerk sign-in account. For any other request, email machimilahbusiness@gmail.com; we reply within one month. You also have the right to complain to your local data protection authority.

California and other US states. You can ask to know, delete or correct the personal information we hold about you, and we will not discriminate against you for doing so. Personalised ads from Google may count as “sharing” for cross-context behavioural advertising, or as targeted advertising. You can opt out with the Privacy choices link on the home page, and we honour Global Privacy Control signals as an opt-out. We do not otherwise sell personal information.

Children

GeoClash is not directed at children under 13, and you must meet the age rules in our Terms to create an account. We do not knowingly collect personal data from children under 13. If you believe a child has given us data, contact us and we will delete it.

Security

Connections are encrypted (HTTPS). Session cookies are HttpOnly, so page scripts cannot read them. Only our server can reach the game database, and passwords are handled by Clerk, never by us. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

Changes

We will update this policy if our practices change and revise the date at the top. We will announce significant changes in the game.

Contact

the GeoClash developer · machimilahbusiness@gmail.com