Privacy Policy

Last updated:

Where&When (“the app”) is a history guessing game. This policy explains what information the app handles when you play.

Playing without an account

The Daily Challenge and the weekly stamps need no account. You don't have to sign up or log in to play them, nothing you do in them is tied to your name or email, and the app never accesses your camera, photos, contacts, or location. The app does create a random identifier for your install the first time you open it, described under Analytics below; it isn't derived from your device and starts over if you reinstall.

Signing in for Topics and Tournament

Two modes do need an account, because they have to remember who you are: themed Topics, and Tournament challenges against a friend. Signing in uses Sign in with Apple, so the app never sees or stores a password.

When you sign in, we store the app-specific identifier Apple gives us, your device's time zone (so an evening reminder arrives in the evening) and whether you want that reminder. Apple passes on your email address only the first time you authorize the app; if it does, we keep it to identify your account. You can use Apple's Hide My Email instead, and everything works the same.

Tournament also asks you to choose a display name. That name is what your opponent sees, so pick something you're happy for them to read — it doesn't have to be your real name. If you turn on notifications, the app registers a token for your device so we can send them.

Once you sign in, the app's usage records for your install (described under Analytics) are linked to your account, including those from before you signed in.

Gameplay data

When you play a round, the app sends your map guess and year guess to our server to score it and return the correct answer. We keep each scored guess, with the random install identifier and, if you're signed in, your account, so we can see which events are hardest and how the game is played. Nothing about a guess identifies you by name.

Each finished week of the Weekly Expedition is also kept: the stamp you earned, how many days you played the Daily Challenge, and how many of the week's topics and duels you played — again with the install identifier and, if you're signed in, your account.

Signed in, some results are kept against your account so the features can work. We record which days you completed the Daily Challenge, which is what keeps your streak in step across devices. In a Tournament we store both players' guesses, scores and timings so the match can be scored and shown to you both — your opponent only ever sees your guess for an event they have already played themselves. A challenge stops accepting play seven days after it was created.

Deleting your account

You can delete your account from inside the app. That removes your profile, your email address, your display name, your Daily Challenge history, any notification registrations and every Tournament challenge you took part in, and it asks Apple to revoke the app's authorization. Usage records, scored guesses and weekly stamps are no longer linked to anything that identifies you: they keep only the random install identifier. Signing in again afterward starts a new account with nothing carried over. You can also carry on playing the Daily Challenge without an account.

Feedback messages

If you use the in-app “report a mistake” feature, the message you write (along with which event it refers to) is sent to us so we can review and fix it. Only include what you're comfortable sharing — don't send personal information in a feedback message.

Standard server logs

Like most web services, our hosting provider automatically logs basic technical information (such as IP address and request timestamps) for security and operational purposes. We don't use this data for tracking, advertising, or analytics, and we don't share it with third parties.

Analytics

The app records what happens as you use it — for example, which screen you opened, which game you started and finished, your score, and which badges and stamps you earned — so we can understand how the game is played and improve it. These events go to Firebase Analytics, a service provided by Google, and to our own database.

Each event carries the random identifier the app creates for your install, the app version and your device's language and region setting. If you're signed in, our copy is also linked to your account, so we can see, for example, how players who sign in use the game differently. Firebase works out which country players are in from the IP address, at the country level only — never a precise location — and the app never asks for or accesses your device's location.

None of this is used for advertising or to track you across other apps or websites. See Firebase's privacy policy for details on how Google processes its part.

Crash reports

If the app crashes, it sends a crash report to Firebase Crashlytics, also provided by Google, so we can find and fix the problem. A report describes what the app was doing when it crashed: the code that was running, the app version, your device model and iOS version, and the app's most recent analytics events. It doesn't include your account, name or email address, and it isn't used for advertising or to track you.

App Store ad attribution

If you installed the app after seeing one of our ads on the App Store, Apple can tell us which campaign it was, using Apple's own attribution service. The app asks for this once, without any advertising identifier and without tracking you; we store the answer with the install identifier so we can tell which ads bring players who enjoy the game.

AI-generated imagery

The clue images you see in the app are AI-generated depictions of real historical events, not photographs. They're artistic interpretations — people, faces, and scene details may not accurately represent what actually happened or who was really there.

No ads, no third-party sharing

The app shows no ads, has no advertising SDKs, and doesn't sell or share your data with third parties, aside from the analytics and crash reporting by Google described above.

Children's privacy

The app is suitable for a general audience. It isn't directed at children, and we don't knowingly seek out personal information from them. The Daily Challenge and weekly stamps can be enjoyed with no account at all; the only personal information we hold for anyone is what signing in for Topics or Tournament creates, described above, and that can be deleted from inside the app at any time.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy? Email whereandwhenonline@gmail.com.