Geopunk Privacy Policy

Last updated · August 16, 2026

This policy explains what data Geopunk collects, why, and the choices you have. Geopunk is published by Disco Volante Labs ("we", "us", "our"). Geopunk is a single-player country-guessing game; it has no user accounts, no login, and never asks for your name, email, address, phone number, contacts, photos, or precise location.

This policy covers both the iOS app and the Android app. Where the two platforms genuinely differ — Apple and Google expose different advertising identifiers and different opt-out controls — the difference is called out explicitly.

If you only read one paragraph, read this one:

1. Information you give us directly

None. Geopunk has no account system. You do not create a profile, sign in, or submit any personal details to use the app.

2. Information collected automatically

When you use Geopunk, the following data may be collected by the app or by the third-party SDKs it embeds:

2.1 Device identifiers

On iOS:

• IDFA (Identifier for Advertisers). Used by Google AdMob to attribute ad impressions to a non-identifying device pseudonym. The IDFA is only accessible if you grant permission in the App Tracking Transparency prompt (the "Allow Tracking" / "Ask App Not to Track" dialog iOS shows the first time you open Geopunk). If you ask Geopunk not to track, AdMob serves non-personalised ads keyed off contextual signals only.
• IDFV (Identifier for Vendor). A device-scoped pseudonym used by Firebase Analytics and Crashlytics to deduplicate sessions and crashes from the same install. The IDFV is not the IDFA — it cannot be used to identify you across apps from other publishers.

On Android:

• Google Advertising ID (AAID). Android's equivalent of the IDFA — a resettable, non-identifying device pseudonym used by Google AdMob to attribute ad impressions. Android has no App Tracking Transparency prompt; instead, the Advertising ID is available to apps by default and you control it at the system level. You can reset it, or delete it entirely, in Settings → Privacy → Ads (the exact path varies by manufacturer and Android version). Deleting it causes AdMob to serve non-personalised, contextual-only ads. Whether the app may use it for personalised advertising in the EU, UK and EEA is additionally governed by the consent form described in §6.
• Firebase installation ID / app instance ID. A device-scoped pseudonym used by Firebase Analytics and Crashlytics to deduplicate sessions and crashes from the same install. It is not the Advertising ID and cannot be used to identify you across apps from other publishers.

2.2 Usage and product analytics

Geopunk uses Google Firebase Analytics to log anonymous, aggregated gameplay events such as:

• Game started, completed, won, lost (with the puzzle mode and number of guesses)
• Screen views (which app screens you visit)
• Settings changes (e.g. theme switched, daily-reminder toggled — recorded as the kind of change, not personal preference data)
• Ads requested and shown (counts only)

The event names and parameters are identical on iOS and Android, so both platforms report into the same anonymous, aggregated stream. These events contain no name, email, address, location, or other personally identifying information.

2.3 Diagnostics

Google Firebase Crashlytics records crash reports when the app unexpectedly quits. A crash report contains the device model, the operating-system version (iOS or Android), the app version, and a stack trace. It does not contain your gameplay data, contacts, or any personal content.

2.4 Advertising data

Google AdMob shows interstitial ads roughly once per three games. To request an ad, AdMob sends Google's ad-tech servers:

• the advertising identifier for your platform — the IDFA on iOS (only if you have granted App Tracking Transparency permission), or the Google Advertising ID on Android (unless you have deleted it, and subject to your consent choices in the EU, UK and EEA);
• a coarse country signal derived from your IP address;
• the AdMob ad-unit identifier;
• your operating-system version.

AdMob does not receive your gameplay data or any account information from Geopunk.

2.5 What we do not collect

• We do not ask for or read your name, email, phone number, address, contacts, calendar, photos, microphone input, or camera.
• We do not collect precise or coarse location data ourselves. Geopunk never requests a location permission on either platform. AdMob may infer your country from your IP address as part of ad delivery.
• We do not have user accounts and we do not sync any data off-device.
• When you tap SAVE on a share card, the image is written to your device's photo library or gallery. Geopunk only ever writes that one image; it never reads, lists, or uploads anything already in your library.

3. Data stored only on your device

The following stay on your phone or tablet and are never sent to us or to any third party:

• Your stats (current streak, best streak, total plays, win percentage, guess distribution, history of recent daily drops), kept separately for the SHAPE, FLAG and CAPITAL modes
• Your settings (theme, app icon, language, units, hard mode, scanlines, daily-reminder preference)
• Your in-progress daily-puzzle state
• The ad-cadence counter used to decide when the next interstitial is shown

On iOS this is held in the app's sandboxed container; on Android in the app's private storage. In both cases, deleting Geopunk removes all of it from your device.

4. How we use the data we do collect

• To run the app: display ads at the configured cadence, decide which daily puzzle to show, schedule the optional daily reminder notification.
• To improve the app: understand which features players use, which bugs are biting, and which countries are too easy or too hard.
• To debug crashes: Crashlytics reports let us identify and fix bugs in the next release.

We do not use the data for advertising profiling, retargeting, or any purpose unrelated to running and improving Geopunk.

5. Who we share data with

We do not sell, rent, or trade your data. The third-party services listed below process the limited data described in §2 on our behalf:

• Google Firebase (Analytics + Crashlytics) — Google LLC. Privacy policy: https://policies.google.com/privacy.
• Google AdMob — Google LLC. Privacy policy: https://policies.google.com/privacy. AdMob ad partners' policies are listed at https://support.google.com/admob/answer/9012903.

The same two vendors are used on both platforms. They operate under their own privacy policies, and under Apple's Data-Sharing rules and Google Play's User Data policy respectively. We do not authorise them to use Geopunk-derived data for any purpose other than providing the analytics, crash-reporting, and ad-serving services we contract them for.

We will only otherwise disclose data if required to do so by a valid legal process (e.g. subpoena, court order) and only the data we have access to.

6. Consent and tracking controls

6.1 Google's consent form (iOS and Android)

On both platforms, Geopunk uses Google's User Messaging Platform (UMP) to obtain and record the consent required by the EU/UK GDPR and by Google's own EU User Consent Policy. If you are in a region where consent is required, a consent form appears the first time you open Geopunk, asking whether Google and its ad partners may use your data for personalised advertising.

Your choice is stored on the device and passed to AdMob on every ad request. You can reopen the form and change your answer at any time from Geopunk → Settings → privacy options, in any region where the form is offered.

6.2 App Tracking Transparency — iOS only

In addition to the consent form above, the first time you open Geopunk on iOS you will see an Apple-system prompt asking whether you allow Geopunk and its partners to track your activity across apps and websites owned by other companies. This is Apple's App Tracking Transparency mechanism, and it exists only on iOS. Your choice:

• Allow — AdMob may use your IDFA to serve personalised ads. We still don't see the IDFA ourselves.
• Ask app not to track — AdMob serves non-personalised (contextual-only) ads. The rest of Geopunk works identically.

You can change your decision any time in iOS Settings → Privacy & Security → Tracking → Geopunk.

6.3 The Android equivalent

Android has no App Tracking Transparency prompt. The equivalent controls are the UMP privacy options form described in §6.1, plus Android's own system-level advertising controls described in §2.1 — resetting or deleting your Advertising ID in Settings → Privacy → Ads. Deleting the Advertising ID has the same practical effect as "Ask app not to track" on iOS: AdMob falls back to non-personalised, contextual-only ads and the rest of Geopunk works identically.

7. Your choices and controls

8. Children's privacy

Geopunk is rated 4+ in the App Store and Everyone / PEGI 3 on Google Play, meaning it contains no objectionable content. It is not directed to children under 13, it is not listed in Google Play's Designed for Families programme, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child has provided us with personal information, please contact us at the address below and we will delete it.

For California residents under 16 and EU/UK residents under 16 (or the local age of digital consent, where higher), the same applies — we do not knowingly collect data from this group without verified parental consent.

Geopunk is not directed to children and does not attempt to identify children among its users. We do configure Google AdMob on both platforms to request only ads rated PG ("parental guidance") or lower, so the advertising shown is suitable for a general audience.

9. International users and data transfers

Geopunk is published from the United States. The third-party services listed in §5 are operated by Google LLC and may process data on servers located in the United States and other countries. By using Geopunk, you acknowledge that limited data described in §2 may be transferred to, stored, and processed in jurisdictions other than your own. Google maintains its own Standard Contractual Clauses and Data Processing Addendum covering EU/UK personal-data transfers.

10. Rights of EU, UK, and EEA users (GDPR)

If you are in the EU, UK, or European Economic Area, you have the following rights under the General Data Protection Regulation (and its UK equivalent):

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction / objection — limit how we process your data, or object to processing carried out under our legitimate interest.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — for any processing you previously consented to. In Geopunk this is done by reopening the privacy options form (§6.1) and changing your answer.
• Lodge a complaint with your local Data Protection Authority.

Because Geopunk does not require an account, the data we process is limited to the device-pseudonymous identifiers described in §2. To exercise the above rights, email us at the contact address below; we will respond within 30 days.

Legal bases for processing: (i) your consent, as captured by the Google UMP consent form on both platforms and, on iOS, by the App Tracking Transparency prompt; (ii) our legitimate interest in running and improving the app and in showing ads to support development.

11. Rights of California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell.
• Request deletion of personal information we hold about you.
• Opt out of the "sale" or "sharing" of personal information.
• Not be discriminated against for exercising these rights.

We do not sell personal information. AdMob's use of an advertising identifier may be considered "sharing" under California's CPRA. You can opt out on iOS by selecting "Ask App Not to Track" at the ATT prompt or by disabling tracking in iOS Settings, and on Android by deleting your Advertising ID in Settings → Privacy → Ads (see §6).

To submit a CCPA/CPRA request, email us at the contact address below.

12. Data retention

• Firebase Analytics events: retained for the period configured in our Firebase project (currently 14 months) before automatic deletion.
• Crashlytics crash reports: retained for 90 days before automatic deletion.
• AdMob impression data: governed by Google's retention policy (https://policies.google.com/privacy).
• Device-local data (stats, settings, history): retained until you reset stats in Settings or delete the app.

13. Security

We rely on the operating system's app sandbox and on-device encryption — Apple's on iOS, Google's on Android — and on the in-transit encryption (TLS) provided by Google's SDKs for the analytics and ad traffic Geopunk sends. All data Geopunk transmits is encrypted in transit. No system is perfectly secure; please keep your device on an up-to-date OS version to benefit from the latest platform protections.

14. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, surface a notice in the app on next launch. Continued use of Geopunk after a change means you accept the updated policy.

15. Contact

Questions, complaints, or data-rights requests:

Email: support@discovolantelabs.com

This policy applies to the Geopunk iOS app (bundle identifier com.discovolantelabs.geopunk) and the Geopunk Android app (package name com.discovolantelabs.geopunk), both published by Disco Volante Labs. It does not apply to any third-party websites or apps linked from Geopunk.