This page covers FinGuessr and FinGuessr 2 at finguessr.com. You can play both without an account and without telling us who you are. We keep only what the games need, we never sell it, and you can delete it any time. Last updated 16 October 2026.
Contact
Email privacy@finguessr.com with any question or request about your data. It is our single point of contact.
What we keep
- A random player id. Made when you first play, with its sign-in keys kept in this browser. It links your scores to you without a name or email.
- Your plays. Answers, scores, times, the day and the edition, so we can score and rank you, keep your streak and stop cheating.
- A display name, if you pick one. It is public on the boards and on links you share. Please do not use your full real name.
- Your Google details, if you sign in with Google. Your email, name, picture link and Google id, used only to keep your scores on every device. Other players never see them and we do not email you.
- Reports you send, such as a reported name or a problem with a round, and when you sent them.
- Your IP address and browser details, which our hosting and database providers process to run the site and keep it secure.
Share texts, notes and challenge links carry your scores and the date, never your id.
Cookies, analytics and bot checks
There are no advertising or tracking cookies, so there is no cookie banner. This browser keeps your sign-in keys, your settings and one cookie that remembers which game you last played. Cloudflare Turnstile checks that a real browser is starting a game and may set a security cookie; Cloudflare also uses those signals to improve bot detection, as its Turnstile privacy addendum explains.
We count page views and game events without cookies, drop the IP address and never send a name, email or player id. Error reports carry technical details so we can fix bugs. Turn analytics off in Settings; a Global Privacy Control signal counts as off.
Who helps us
- Supabase: database and sign-in, stored in Frankfurt, Germany.
- Vercel: hosting, with server code in Frankfurt.
- PostHog (EU cloud) for analytics and Sentry (EU region) for error reports.
- Cloudflare for the bot check, and GitHub for encrypted nightly backups.
- Google, only if you sign in with Google, under its own privacy policy.
Some are US companies whose staff may reach data from there, under the EU-US Data Privacy Framework or standard contractual clauses. We do not sell your data, share it for advertising or profile you.
Why we may use it
Where the GDPR or UK GDPR applies: to give you the games you ask for (contract); to keep them fair, secure and working, with bot checks, anti-cheat, logs, error reports and cookieless analytics (legitimate interests, which you can object to); and to meet legal duties. We make no automated decisions with legal or similar effects on you.
How long we keep it
- Guest accounts with no play in either game for 60 days are deleted, with their scores.
- Signed-in accounts, and the round reports you send, stay until you delete them. Name reports go once reviewed.
- Analytics up to one year, error reports about 30 days, backups 30 days, provider logs briefly.
Your rights
Delete my data in Settings deletes your account and everything tied to it in both games, straight away. Use it in the browser you play in if you are a guest. You can also email privacy@finguessr.com to see, correct, export or delete your data, or to object, and we reply within one month.
- EU, UK and Switzerland: you can also restrict or move your data and complain to your data protection authority.
- United States: we do not sell or share personal information or use it for targeted ads, and asking will never change how we treat you.
- India: under the DPDP Act 2023 you can nominate someone to act for you. Send grievances to privacy@finguessr.com, and you can complain to the Data Protection Board of India.
Children
The site is for ages 13 and over. Under 18, ask a parent or guardian before you sign in or pick a name; in India their consent is needed. If a child has used the site, email privacy@finguessr.com and we will delete the data.
Security and changes
Data travels encrypted and players cannot read each other's data. If a breach puts your data at risk, we will tell the authorities and, where required, you. If this page changes in a way that matters, we update the date and say what changed. The terms of use cover the rules for playing and for names.