Privacy Policy
Last updated: 9 October 2026
This policy explains what data Dovedale GeoGuesser collects and how it is used.
What we collect
- Discord account data: username, display name, and avatar URL obtained via Discord OAuth when you log in.
- Game scores: solo scores, daily scores, and duel results linked to your account.
- Uploaded screenshots: images you submit for new locations or suggestions.
- Session cookie: a secure HTTP-only cookie used to keep you logged in (30-day expiry).
- Browser fingerprint hash: a one-way hash used solely to detect ban evasion. It is never sold or used for advertising.
- Support ticket content: messages you send to our moderation team.
How we use it
- To display your username, avatar, and stats on leaderboards and your profile page.
- To run the daily challenge, streak tracking, and duel matchmaking.
- To enforce our moderation rules and prevent ban evasion.
Who can see your data
- Your username, avatar, and scores are publicly visible by default. You can make your profile private in Settings.
- Moderators and operators can see your account information and submitted content for moderation purposes.
- We do not sell, share, or otherwise disclose your data to third parties.
Data retention
Your data is stored as long as your account exists. You can delete your account and all personal data from your Settings page, which removes your username, avatar, and all scores. Moderation actions (bans) are retained without personal identifiers for safety.
Cookies
We use a single session cookie (HttpOnly, Secure, SameSite=Lax) to authenticate you. No third-party tracking cookies are used.
Third parties
- Discord: Login is handled via Discord OAuth. Avatar images are served from Discord's CDN. We do not control Discord's own data practices.
- Google Fonts: This site loads fonts (Inter, Material Symbols) from Google's CDN (
fonts.googleapis.com). This means your browser sends a request to Google when you visit, which may include your IP address. See Google's privacy policy for details.
Your rights (GDPR)
If you are in the EU or UK, you have the following rights regarding your personal data:
- Right of access: Export all data we hold about you via Settings.
- Right to erasure: Delete your account and personal data at any time via Settings. Moderation records are retained without personal identifiers.
- Right to rectification: Your display name and avatar are synced from Discord on each login. To change them, update your Discord account.
- Right to restrict processing: You can make your profile private in Settings so your scores are not publicly visible.
To exercise any of these rights, use the tools in Settings or submit a support ticket. If your request cannot be handled through the ticket system (for example, if you are unable to log in), you may contact the site operator directly at sectly.online. General game support sent there will not be answered.
Lawful basis
We process your data under legitimate interests to operate the game and prevent abuse, and under contract performance to provide the service you signed up for.
Changes to this policy
We may update this Privacy Policy at any time and without prior notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after any change constitutes your acceptance.
Contact
Questions or data requests? Submit a support ticket. The direct operator contact at sectly.online is only for matters that cannot be handled through the ticket system. General support sent there will not be answered.