Where&When (“the app”) is a history guessing game. This policy explains what information the app handles when you play.
Playing without an account
The Daily Challenge and single-player rounds need no account. You don't have to sign up or log in to play them, nothing you do in them is tied to an identity, and the app never accesses your camera, photos, contacts, or location.
Signing in for Topics and Tournament
Two modes do need an account, because they have to remember who you are: themed Topics, and Tournament challenges against a friend. Signing in uses Sign in with Apple, so the app never sees or stores a password.
When you sign in, we store the app-specific identifier Apple gives us, your device's time zone (so an evening reminder arrives in the evening) and whether you want that reminder. Apple passes on your email address only the first time you authorize the app; if it does, we keep it to identify your account. You can use Apple's Hide My Email instead, and everything works the same.
Tournament also asks you to choose a display name. That name is what your opponent sees, so pick something you're happy for them to read — it doesn't have to be your real name. If you turn on notifications, the app registers a token for your device so we can send them.
Gameplay data
When you play a round, the app sends your map guess and year guess to our server to score it and return the correct answer. Played without an account, this is anonymous: no guess is linked to you, and nothing is kept against a player profile.
Signed in, some results are kept against your account so the features can work. We record which days you completed the Daily Challenge, which is what keeps your streak in step across devices. In a Tournament we store both players' guesses, scores and timings so the match can be scored and shown to you both — your opponent only ever sees your guess for an event they have already played themselves. A challenge stops accepting play seven days after it was created.
Deleting your account
You can delete your account from inside the app. That removes your profile, your display name, your Daily Challenge history, any notification registrations and every Tournament challenge you took part in, and it asks Apple to revoke the app's authorization. Signing in again afterward starts a new account with nothing carried over. You can also carry on playing the Daily Challenge without an account.
Feedback messages
If you use the in-app “report a mistake” feature, the message you write (along with which event it refers to) is sent to us so we can review and fix it. Only include what you're comfortable sharing — don't send personal information in a feedback message.
Standard server logs
Like most web services, our hosting provider automatically logs basic technical information (such as IP address and request timestamps) for security and operational purposes. We don't use this data for tracking, advertising, or analytics, and we don't share it with third parties.
Analytics
The app uses Firebase Analytics, a service provided by Google, to understand overall usage patterns — for example, how many games are started and completed, and which countries players are playing from (derived automatically from IP address, at the country level only — never a precise location, and the app never asks for or accesses your device's location). These events aren't linked to your name, email, or any other personal identity, and they're not used for advertising or to track you across other apps or websites. See
Firebase's privacy policy for details on how this data is processed.
AI-generated imagery
The clue images you see in the app are AI-generated depictions of real historical events, not photographs. They're artistic interpretations — people, faces, and scene details may not accurately represent what actually happened or who was really there.
No ads, no third-party sharing
The app has no advertising SDKs and doesn't sell or share your data with third parties, aside from the anonymous analytics processing described above.
Children's privacy
The app is suitable for a general audience. It isn't directed at children, and we don't knowingly seek out personal information from them. The Daily Challenge and single-player rounds can be played with no account at all; the only personal information we hold for anyone is what signing in for Topics or Tournament creates, described above, and that can be deleted from inside the app at any time.
Changes to this policy
If this policy changes, we'll update the date at the top of this page.