StreetGuessrPrivacy policy
Last updated: 15 October 2026
This is a translation for information purposes. In case of discrepancy, the Spanish version prevails.
1. Data controller
Controller: Marcos Martinez Lanchares · Tax ID: 16632188Z
Address: Plaza del Mercado, 15, 26001 Logroño (La Rioja), Spain · Email: contacto@streetguessr.com
2. What data we process
| Data | What for | Legal basis |
|---|---|---|
| Email and password (encrypted by Google Firebase), or your Google account | Creating your account, signing in, verifying your email and resetting your password | Performance of the contract (terms of use) |
| Player name, avatar and town | Showing your profile and the rankings. They are public: other players can see them | Performance of the contract |
| Age (optional) | Only you can see it in your profile | Consent (you can delete it at any time) |
| Games, scores, coins, items, friends and 1 vs 1 games | Making the game work, rankings and cheat prevention | Performance of the contract and legitimate interest |
| Previous purchases, if any: product, amount and date | Handling previous purchases and meeting tax obligations. New purchases are disabled | Performance of the contract and legal obligation |
| IP address and technical browser signals | Protecting the service against bots and abuse (Cloudflare Turnstile and Firebase App Check) | Legitimate interest in security |
| Advertising identifiers | Showing ads (Google AdSense). Personalised ads only if you give your consent | Consent |
3. Who we share data with
Only with providers that deliver the service for us, as data processors:
- Google (Firebase): accounts and sign-in (Firebase Authentication, which stores account data in the US) and the game database (Cloud Firestore, with servers in the European Union). The Firebase code is downloaded from Google's servers.
- Cloudflare: website hosting, game server and bot protection.
- Stripe: handling previous payments, if any. New purchases are disabled.
- Google (AdSense): advertising.
- Maps: aerial photos are loaded from the official mapping services of each country (IGN of Spain and of France, PDOK, basemap.at, swisstopo and GUGiK) and the map of other countries from OpenFreeMap. They receive your IP address when serving you the images.
- Mapillary (Meta): the street-level view of the street of the day. It only loads if you reach that clue; Mapillary receives your IP address and technical browser data when serving you the images.
Some of these providers may process data outside the European Economic Area (for example, in the US). In those cases the transfer is covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
The rest of the website (fonts, map engine and game code) is served from our own domain, without going through other servers.
We do not sell your data to anyone.
4. How long we keep it
For as long as you have an account. If you delete it, we erase your data within 30 days at most, except purchase records, which are kept for as long as tax law requires (up to 6 years).
5. Your rights
You can request access, rectification, erasure (including deleting your account), objection, restriction of processing and portability of your data by writing to contacto@streetguessr.com from your account's email address. You can withdraw your consent at any time. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD) or to the data protection authority of your country.
6. Minors
You must be at least 14 to create an account: StreetGuessr is not aimed at children under that age and, if we learn that an account belongs to someone under 14, we delete it. Purchases with real money require being of legal age or having the authorisation of a parent or guardian.
7. Security
Communications are encrypted (HTTPS). Passwords are managed by Google Firebase and we never see them. Access to the database is restricted by security rules.