Privacy policy

Effective 30 September 2026. This page explains what Same Latitude does and doesn’t collect.

What we store

Same Latitude has no accounts. Your progress on today’s puzzles, your streak, and your stats are written only to your own browser’s local storage. They never leave your device unless you’re a Pro member (below), and we can’t restore them if you clear your browser’s site data for this domain.

Pro subscriptions

Pro is sold through Stripe. Stripe collects your payment details and email address to process the subscription; we never see or store your card. From Stripe we keep your Stripe customer ID and your subscription’s status, plan and renewal date, so we know whether Pro is active. Your browser keeps a “Pro key” that links it to that customer ID. See Stripe’s privacy policy for how Stripe handles your data.

Pro members’ finished daily games are sent to our server for the Pro leaderboard: the cities you guessed, the resulting score, and the display name you choose (or a generated one like “Explorer 4F2A”). Leaderboard entries are deleted automatically after 45 days. Email us to have your name or subscription record removed sooner.

Sharing

When you share a result, the link and image contain only the score, guess colours, puzzle number and streak, never your name, location or the day’s city. Where it goes after that is up to the network you share it to.

Cookies and advertising

A full list of what’s stored in your browser, and every third party involved, is on the cookies & storage page.

This site may show ads served by Google AdSense. When ads are running, Google and its advertising partners may use cookies or similar technologies to serve ads based on your prior visits to this or other websites. You can review how Google uses this data and opt out of personalized advertising at policies.google.com/technologies/ads and manage your ad settings at adssettings.google.com. Third-party vendors, including Google, may also use cookies to serve ads based on your past visits to this website or others. The Digital Advertising Alliance’s opt-out page at aboutads.info/choices covers most major ad networks in one place.

Analytics

We use Vercel Web Analytics to count visits and see which pages are used. It sets no cookies and doesn’t track you across sites or build a profile of you; it records page views along with your country, browser and device type, using a short-lived anonymous hash rather than anything that identifies you. See Vercel’s analytics privacy notes. We run no other analytics.

Technical data and security

When you use the site, our hosting provider receives the usual technical details of every request (your IP address, browser type and the page requested) and keeps them in server logs for a limited time. We use them to run the site and to spot abuse. To limit abuse we also count requests per IP address over a short window (kept for about two minutes), and we record security events such as repeated failed requests along with the IP address that caused them. We don’t use this data to identify, profile or advertise to you.

Who handles your data

We use a small number of service providers, each only for what it’s needed for: Vercel (hosting and analytics), Upstash (the database that holds Pro status and the leaderboard), Stripe (payments), and Google (advertising). They process data on our behalf or, in Stripe’s and Google’s case, under their own privacy policies. We don’t sell your personal information. These providers operate mainly in the United States, so your data may be processed outside the country you live in.

How long we keep it

Leaderboard entries: 45 days. Rate-limit counters: minutes. Server logs: as set by our hosting provider, typically a few days to weeks. Your Pro subscription record (Stripe customer ID, plan, status and renewal date): for as long as you’re a member, then until you ask for it to be removed or the law lets us delete it. Stripe keeps payment records as the law requires.

Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or California law), you can ask to see the personal data we hold about you, have it corrected or deleted, object to or restrict how it’s used, or receive a copy. We don’t make automated decisions about you, and we don’t sell or share personal information for cross-context advertising ourselves. Advertising choices sit with Google and are covered above and on the cookies page. To make a request, email us using the address below; we’ll reply within 30 days. If you’re in the EU or UK you can also complain to your local data protection authority.

Changes to this policy

If we change how we handle data, we’ll update this page and the date at the top. Material changes will be noted on the site before they take effect.

Children’s privacy

Same Latitude is not directed at children under 13, and we do not knowingly collect personal information from anyone in that age group. Pro subscriptions require a payment method and are intended for adults. If you believe a child has provided us information, contact us below and we’ll remove it.

Contact

Questions about this policy, or about the site generally, can go to tyyobs@riffroster.app.