Privacy policy

1. Who processes your data

Mapicos is a personal, non-profit project hosted at mapicos.com, which acts as the controller of the data described in this policy.

2. Playing without an account

You can play without signing up. In that case we store each match result (mode, region, correct answers and duration) anonymously, with no data that identifies you, to improve the game. If you leave a match unfinished, we also store, anonymously and for every player, how far you got (mode, region, rounds played and duration), to learn which matches get abandoned. No cookies are used for this.

Contact form: if you write to us from the contact page, we store your name, your email address, the topic and the message so we can reply, plus an encrypted fingerprint of your IP address (not the address itself) to stop mass sending. The message reaches us by email through Cloudflare. We delete it after one year, or earlier if you ask.

3. Account (optional): ranking and multiplayer

You only need an account to appear in the speedrun ranking or to play multiplayer matches. In that case we process:

• Your email address and your password (encrypted), to identify you and confirm your account.
• Your username, which is public because it is shown in the ranking and to the other players in a match.
• If you sign in with Google, Google gives us your email, your name and your profile picture. We use the email to identify you and the name only as a suggested player name, which you choose; we never publish your real name or picture.
• Your public profile (opened by clicking your name in the ranking) shows your rank and records; your full stats, countries and matches only if you turn on "Public stats" in your profile (off by default).
• If you submit a speedrun video: the YouTube link, the video's title and channel (looked up on YouTube when it arrives), the note you add and the review (status, reason and date). An administrator reviews the video; if approved, the speedrun page is public with your player name, the run and the video. You can withdraw a pending submission or ask us to delete an approved one.
• Your match results and, in multiplayer, your answers and points in each round, to compute standings.

The legal basis is providing the service you request when creating the account. We keep this data while the account exists.

4. Usage measurement (only with your consent)

If you accept measurement cookies, we use Google Analytics (Google) and Microsoft Clarity (Microsoft), loaded through Google Tag Manager, to understand how the site is used: pages visited, device type, approximate location and interactions such as clicks and scrolling. They are only enabled after your consent, and you can withdraw it at any time from “Cookie settings” in the footer.

We also count visits with Cloudflare Web Analytics, which uses no cookies and stores nothing that identifies you: it only gives aggregate figures (page views, country, device type and referring site).

5. Providers

To run the service we rely on providers that process data on our behalf: Cloudflare (website hosting, contact email and cookie-free visit statistics), Supabase (database, accounts, live matches and image storage), YouTube (Google; only when you press play on a speedrun video) and, only if you accept, Google and Microsoft (measurement). Some may process data outside the European Economic Area under the safeguards of the GDPR, such as standard contractual clauses.

We do not sell your data or use it for advertising.

6. Your rights

You have the right to access, rectify and erase your data, to object to or restrict its processing, to data portability and to withdraw your consent. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

To exercise them, or for any question about your data, write to info@mapicos.com.