PRIVACY POLICY

The controller responsible for the processing of personal data described in this policy is:

Lukas Selch
Email: admin@dupeguessr.com

This website can be used without creating an account and without providing any personal information such as name, email address or other contact details. The game itself works without cookies used for tracking and without third-party advertising trackers.

The operator measures anonymised, aggregate usage of the website through a self-hosted analytics service; the details are described in section 9. The website also displays advertising served by Google AdSense, which involves the processing described in section 8; depending on your location and your privacy choices, this may include the setting of cookies and the personalization of advertisements.

On your first visit, a technically necessary cookie (aipg_sid) is set containing a randomly generated session identifier. The sole purpose of this cookie is to provide the core functionality of the game: enforcing the limit of one attempt per day for the daily challenge, enabling mid-game reloads, and attributing results for the daily leaderboard. The session identifier is not linked to your identity; the operator has no means of determining who a session belongs to.

In connection with this session identifier, the following data is stored: the images you select during a round, whether your selection was correct, the game mode, and the date and time of your entries. This data is processed exclusively to provide the service you are using and is never shared with or sold to third parties.

The website is hosted on self-managed infrastructure behind a reverse proxy (Traefik). For reasons of network security and error diagnosis, the reverse proxy may process request metadata, including IP addresses, in the form of access logs. These logs are used exclusively for technical purposes, are not merged with game data, and are deleted after a short retention period. To protect against misuse, IP addresses are additionally checked against short-lived rate limits; these checks happen transiently in server memory and are not persisted.

Game data associated with a session is automatically and irreversibly deleted no later than six months after the last recorded activity of that session. Aggregated, fully anonymous statistics and the daily challenges themselves are retained for the duration of the service, as they do not constitute personal data.

You have the right to access your personal data, to have incorrect data rectified, to request the erasure of your data, to restrict processing, to receive your data in a portable format, and to object to the processing of your data.

Because sessions are anonymous, deleting the aipg_sid cookie in your browser effectively terminates any linkability of your game data. Should you nevertheless wish to exercise any of the rights listed above, please contact admin@dupeguessr.com. You also have the right to lodge a complaint with a supervisory authority.

The photographs used in the game are sourced from Wikimedia Commons and attributed within the game interface. Image generation is performed using the OpenAI API. Neither service receives any personal data from this website; only the photographs themselves and textual descriptions derived from them are transmitted.

This website displays advertising provided by Google Ireland Limited (“Google”) through the AdSense product. To deliver ads, the website loads a script from Google’s servers (pagead2.googlesyndication.com), which transmits your IP address and device information to Google. Google may set cookies or read device identifiers to measure ad performance and, where permitted, to personalize the ads you see.

For visitors in the European Economic Area, the United Kingdom and Switzerland, a consent notice provided by Google is displayed before advertising cookies are set or personalized ads are shown. You can accept or reject personalized and non-personalized advertising in that notice, and you can change your choices at any time via the advertising settings at adssettings.google.com. Where you decline, Google serves non-personalized ads or no ads.

For visitors from other regions, advertising is delivered under Google’s own terms and privacy policy, which you can review at policies.google.com/technologies/ads. Personalized advertising can be disabled in Google’s ad settings regardless of region.

The operator of this website does not share your game data with Google. The operator cannot access the data Google processes in this context; queries about that processing should be directed to Google.

To understand how the website is used, the operator runs the open-source analytics software Umami, hosted on the operator's own infrastructure (umami.selch.dev). When you open a page, your browser transmits the visited page address, the referring page, and general technical characteristics of your device — browser type, operating system, device type and screen size — to that service. The country you are visiting from is derived from your IP address; the IP address itself is not stored.

Umami uses no cookies and no browser storage for tracking purposes, does not create advertising profiles, and does not track you across other websites. The statistics are aggregated and do not identify individual visitors. The data is processed solely to measure the overall usage of this website's own pages, is not shared with third parties, and is stored only on the operator's own server until the operator deletes it.