Privacy policy

Last updated: 16 October 2026

This page explains which personal data GlobeTap processes, why, and what rights you have. GlobeTap works without an account and we collect as little data as possible. Advertising cookies are only used if you agree to them (section 6).

1. Who is responsible

Flakon Selimi
Graz, Austria
Email: [email protected]

We are not required to appoint a data protection officer. For any privacy question, write to the address above.

2. Data stored in your browser

The game saves the following in your browser's local storage (not as cookies):

your game progress and answers for the current round, and your statistics (rounds played, score, streak),
a random player ID that is created on your first visit (it contains no information about you),
the display name you enter if you play a challenge, and the last game mode you chose.

Purpose and legal basis: without this storage the daily game cannot work: it remembers that you already played today and keeps your statistics. This storage is strictly necessary to provide the game you asked for, so no consent is needed (§ 165(3) Austrian Telecommunications Act 2021 (TKG 2021); Art. 6(1)(b) GDPR).

Storage period: until you delete it. You can do so at any time by clearing the site data for globetap.app in your browser settings. Your statistics are then lost.

3. Hosting and server logs (Cloudflare)

The website and its server functions are hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Whenever you open the site, your browser sends technically necessary data to Cloudflare: your IP address, date and time, the requested address, and browser and device type (user agent).

Purpose and legal basis: delivering the website and protecting it against attacks and misuse. Our legitimate interest is a secure and working website (Art. 6(1)(f) GDPR).

Recipient and transfer to the USA: Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU–US Data Privacy Framework, so the transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR).

Storage period: we do not keep our own server logs. Cloudflare keeps technical logs only for a short time, as described in Cloudflare's privacy policy.

4. Game server and database (Upstash)

Some features need a server. These send your random player ID (see section 2) to our server:

Premium check: each time you open the game, it asks the server whether Premium is active for your player ID. Nothing is saved for this unless you have Premium.
Premium: if you get Premium, we store your player ID together with a restore code, your plan, and its start and end dates. With the restore code you can unlock Premium on other devices.
Challenges: when you create or play a challenge, we store the display name you enter, your points for each question, and the time. Everyone who has the challenge link can see your display name and score on the leaderboard. Use a nickname if you don't want to show your real name.

Purpose and legal basis: providing the features you use, i.e. Premium and challenges (Art. 6(1)(b) GDPR).

Storage period: challenges and their leaderboards are deleted automatically after 30 days. Premium data is kept for as long as your Premium is valid. Once it has expired, you can ask us to delete it at any time.

Processor: the database is run by Upstash, Inc. (USA) on our behalf, under a data processing agreement (Art. 28 GDPR). The data is stored on servers in Frankfurt, Germany (AWS region eu-central-1). Because Upstash is a US company, access from the USA (e.g. for support) cannot be ruled out. Such transfers are covered by the EU Standard Contractual Clauses in Upstash's data processing agreement (Art. 46(2)(c) GDPR).

5. Map images

The satellite images on the globe come from NASA (Blue Marble, public domain), but your browser loads them only from globetap.app, i.e. through Cloudflare (section 3). For very close zoom levels our server fetches the image from NASA itself. NASA only ever sees Cloudflare, never your IP address or any other data about you.

6. Advertising (Google AdSense)

To keep GlobeTap free, we show ads on the start page and the result screen, never while you answer a question. The ads are provided by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When an ad is loaded, your browser connects to Google's servers and transmits your IP address, browser and device information, the page you are on, and the time. With your consent, Google also stores and reads cookies or similar identifiers on your device to show you personalised ads, limit how often you see the same ad, prevent ad fraud and measure how ads perform. Without consent, Google may still show non-personalised ads, which are based on the page content and your approximate location and use technical data only to the extent permitted by law.

Consent: when you first visit from the EEA, the UK or Switzerland, a consent message by Google (a certified consent management platform) asks whether you agree. You can change or withdraw your choice at any time using the privacy settings link that the consent message places on the page; withdrawing does not affect the lawfulness of processing before you withdrew.

Legal basis: your consent for storing and reading information on your device and for personalised ads (§ 165(3) TKG 2021; Art. 6(1)(a) GDPR). For non-personalised ads, our legitimate interest in funding the free game (Art. 6(1)(f) GDPR).

Recipient and transfer to the USA: Google and its partners act as independent controllers for ad serving. Data may be transferred to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework (Art. 45 GDPR). Details, including how long Google keeps data, are in how Google uses information from sites that use its services and in Google's privacy policy. You can turn off personalised ads from Google in your Google ad settings.

7. Cookies and tracking

GlobeTap itself sets no cookies and uses no analytics or tracking tools. The only cookies are those set by Google for advertising as described in section 6. The game loads no fonts, scripts or other content from third parties other than those named on this page.

8. Links to other websites

The share buttons and the source links under each fact are ordinary links. No data is sent to WhatsApp, X, Facebook, Wikipedia or other sites unless you click a link. After that, that site's own privacy policy applies.

9. No obligation, no automated decisions

You are not obliged to provide any data. Without the data in section 3 the website cannot be shown. Without a display name you cannot join a challenge leaderboard. We do not make automated decisions or create profiles about you (Art. 22 GDPR). Personalised ads are chosen automatically by Google, but have no legal or similarly significant effect on you.

10. Your rights

Under the GDPR you have the right to:

access the data we hold about you (Art. 15),
have it corrected (Art. 16) or deleted (Art. 17),
restrict its processing (Art. 18),
receive it in a portable format (Art. 20),
object to processing based on our legitimate interests (Art. 21),
withdraw your consent at any time (Art. 7(3)).

Because we don't know who you are, please include your player ID, restore code or challenge link in your request so we can find your data. You can see your player ID in your browser's local storage as laenderraten:player. Write to [email protected].

You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

11. Changes

We update this page when the game changes, for example when payments are added. The date at the top shows the latest version.