geosize

Privacy policy

Last updated 4 November 2026

Geosize is a daily geography game at geosize.app. This policy explains what information Geosize collects, why, who it's shared with, how long it's kept, and the choices and rights you have.

You can play without an account. Your games are saved on your own device.
Signing in with Google is optional. It keeps a copy of your games in the cloud so they follow you.
Geosize uses analytics to see how the game is played. In the EU, the UK and Switzerland it asks first, and anyone can turn it off.
Geosize has no ads and never sells your information.
You can delete your account, and everything saved in it, at any time.

Who runs Geosize

Geosize is run by Harrison Enyeart, an individual based in North Carolina, USA (“Geosize”, “we” or “us”). We're responsible for your information (the “controller”, in the language of data protection laws like the GDPR). You can reach us at hello@geosize.app.

What we collect and why

Games saved on your device

Your games, streak, stats and analytics choice are saved in your browser's storage, so you can pick up where you left off. If you don't sign in, they never leave your device. This storage is needed for the game to work.

If you sign in

Signing in is optional. If you sign in with Google, we receive and store:

your name, email address, profile picture link and Google account ID
your games: which daily puzzles and practice games you played, the countries in them, your guesses and scores, and when you played
security records of when you signed in and from which IP address

We never receive your Google password or anything else in your Google account. We use this information to provide the account you asked for, so your streak and stats are the same on every device.

Analytics

To learn how people play and make the game better, Geosize uses PostHog for analytics. It records:

which pages you view and the buttons you press
each round you play: the countries, your guess, your score and how long you took
when you finish a game, share a result or sign in
errors the game runs into, and how quickly pages load
your device type, browser, screen size and the site or link that sent you
your IP address, and your approximate location (country or city) worked out from it

With full analytics on, PostHog also:

stores an ID in your browser (a cookie and local storage), so it can tell when you come back
records how you use the site, such as where you tap, move and scroll, and what's on the screen, to spot confusing parts of the game. Geosize has no forms to type into, so recordings never include anything you type.
links your analytics to your account ID if you're signed in, but not to your name or email

Anonymous counting. If you haven't allowed full analytics, or you turn it off, PostHog only counts visits anonymously. Nothing is stored on your device and nothing is recorded. Instead, PostHog turns your IP address and browser details into a code that changes every day, so a day's visits can be counted together without being linked to your visits on other days.

Your choice. In the EU, the UK and Switzerland, Geosize asks before turning full analytics on. Elsewhere it's on unless you turn it off. Browsers that send a Global Privacy Control signal are treated as having turned it off. To change it at any time, open Your stats and use Analytics.

Emails

If you email us, your message is forwarded by Cloudflare to our Gmail inbox, provided by Google. We use it to reply to you.

Hosting

The site is delivered by Cloudflare. Like any web host, it processes your IP address and browser details to deliver pages and to protect the site from attacks. Geosize's fonts are served by Geosize itself, so loading a page doesn't contact any other font or advertising service.

Legal bases

Where laws like the GDPR apply, we rely on these legal bases:

Providing the game and your account: games saved on your device, and your account if you sign in.
Your consent: full analytics for visitors in the EU, the UK and Switzerland. You can withdraw it at any time; this doesn't affect what was collected before.
Our legitimate interests in understanding and improving the game, fixing errors and keeping it secure: anonymous counting, full analytics elsewhere, security records and hosting.

We share information only with these providers, who handle it on our behalf to run Geosize:

Cloudflare: hosting, security and email forwarding
Supabase: sign-in and saved games, stored in the eastern United States
Google: Sign in with Google, and our email inbox
PostHog: analytics, stored in the United States

We don't sell or rent your information, share it for advertising, or show ads. We may disclose information if the law requires it, to protect people's safety or our rights, or as part of transferring Geosize to a new owner, who would have to keep to this policy.

International transfers

Geosize's information is stored and processed in the United States. If you're in the EU, the UK or Switzerland, these transfers rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses, or the EU–US Data Privacy Framework where a provider is certified under it.

How long we keep it

On your device: until you clear this site's data, or sign out.
Your account and games: until you delete your account, when they're deleted straight away.
Security records: for a limited time, as Supabase keeps them.
Session recordings: about one month.
Other analytics: around one year.
Emails: for as long as we need them to deal with your message.

Your choices and rights

Analytics: open Your stats and turn it on or off.
Your account: open Your stats and choose Delete account. That permanently deletes your account and every game saved in it.
This device: sign out, or clear this site's data in your browser settings.

You can also ask us for a copy of your information, or to correct it, delete it, limit how we use it or send it to you in a portable format, and you can object to how we use it. Email hello@geosize.app, ideally from the address on your account so we can confirm it's you. We'll reply within one month.

If you're in the EU, the UK or Switzerland, you can also complain to your local data protection authority. If you live in a US state with a privacy law, such as California, you have the right to know what we collect, and to access, correct and delete it. We don't sell your information or share it for targeted advertising, and we won't treat you differently for using any of these rights.

Cookies and browser storage

Geosize uses no advertising cookies. It stores only these in your browser:

geosize:progress:v1: Your games, streak and stats. Always, since the game needs it.
geosize:analytics: Your analytics choice, once you make one.
sb-…-auth-token: Keeps you signed in. Only if you sign in.
ph_…_posthog and other PostHog items: Your analytics ID and the current visit. Only with full analytics on.
__ph_opt_in_out_…: PostHog's record of your analytics choice, once you make one.

Children

Geosize is for a general audience and isn't aimed at children under 13. Children under 13 shouldn't create an account. If you believe a child under 13 has signed in, email us and we'll delete the account.

Security

Geosize is only served over encrypted connections. Each account can only read and change its own games, the database limits what a saved game can hold, and our own accounts with every provider use two-factor sign-in. No system is perfectly secure, but if a breach ever affects your information, we'll tell you as the law requires.

Changes

If this policy changes, the date at the top will change with it. For significant changes, we'll post a notice on the site before they take effect.

Contact

Harrison Enyeart, North Carolina, USA
hello@geosize.app