Privacy Policy

Guessor is a photo-location guessing game operated by Xiaoyao Systems. This policy explains what information Guessor uses, why it is needed, and the choices you have. It is written for how Guessor works today — not as generic boilerplate.

Depending on how you use Guessor, you may provide:

• Photos you upload to create a challenge
• Challenge titles and creator display names
• Guesses, including the geographic coordinates you place on the map
• Player/display names used when guessing
• Account information from optional Google sign-in (such as your name, email address, and profile image), if you choose to sign in

To operate Guessor securely, we may use cookies or similar session identifiers needed for authentication, challenge ownership, and protecting requests (for example CSRF protection). We may also process basic request information that is typically available when you use a website, such as security-related signals and general device/browser/request metadata needed to deliver and protect the service.

Guessor is a location game. Challenge photos represent a geographic place. Creators establish the correct location for a challenge, and guesses include geographic coordinates selected by players on a map. That game location information is required for Guessor to score guesses and show results.

This is not continuous device or GPS tracking of where you are in the physical world. Guessor does not continuously track your device location as you move around.

Uploaded images are stored and processed so challenges can be created, shared, and played. Before an image is used in Guessor, it is processed in the browser to remove EXIF metadata (including embedded location tags where present) and prepared for display.

Uploaded challenge images may also be processed by a service provider for safety and moderation screening before challenges become broadly discoverable. Human moderators may review flagged or unresolved cases. Please avoid uploading photos that contain sensitive or private information you do not intend to share with people who can access the challenge.

Guessor can be used without an account. Optional Google authentication is available if you want to sign in. When you choose Google sign-in, Google provides account details needed to create or maintain your Guessor session. Xiaoyao Systems does not receive your Google password.

Guessor uses Vercel Web Analytics to understand aggregate product usage (for example page views) and help keep the service reliable. This is the analytics integration currently included in the Guessor frontend.

We use information to:

• Operate Guessor and provide its core features
• Create, store, and serve challenges
• Calculate and display distances, scores, and leaderboards
• Maintain sessions and challenge ownership
• Improve reliability and the product experience
• Help prevent abuse and protect security

We do not sell your personal information. Guessor relies on service providers that help us host and operate the product — for example hosting and infrastructure (including Vercel), optional Google authentication, and map tile providers used to display maps. Those providers process information only as needed to provide their services to us.

Guessor is designed for sharing. Information you deliberately include in a challenge — such as the photo, title, and later results — may be visible to people who can access that challenge (for example via a shared link, and according to any visibility options Guessor offers over time).

If you share a challenge link, treat anything in that challenge as visible to the recipients.

Guessor retains challenge and related data only as long as reasonably needed to operate the service, handle abuse or security issues, and meet legal obligations. Some challenges have no automatic expiration; others may expire at a set time and then become unavailable to play. Creators may also delete their own challenges earlier. Expiration or deletion of a playable challenge does not necessarily mean every related record is instantly erased from all systems.

You can:

• Choose whether to create or share a challenge
• Choose whether to sign in with Google
• Sign out of an authenticated session
• Contact us with privacy or data questions

Guessor does not currently offer a self-serve account deletion control in the product. If you have a privacy request about your account or data, email us using the contact details below.

Guessor is not directed at children, and we do not knowingly collect personal information from children for the purpose of creating child accounts. Guessor does not perform age verification. If you believe a child has provided information inappropriately, contact us and we will take appropriate steps.

We may update this Privacy Policy as Guessor evolves. When we do, we will revise the “Last updated” date at the top of this page.

Privacy questions: hello@xiaoyaosystems.com

Operator: Xiaoyao Systems
Website: https://xiaoyaosystems.com