Privacy policy

Last updated: 8 October 2026

This explains what GuessTheRide keeps about the people who play it, why, who else handles it, how long it is kept, and how to have it removed. It is written to be read, not skimmed past.

1. Who we are

GuessTheRide is run by Filip Terzić, Praška 10, Belgrade, Serbia ("we"). We decide what is kept and why, which makes us the controller of your personal data under Serbian law and, for players in the European Union, under the GDPR.

Questions about this policy, or any request about your data: privacy@guesstheride.com.

2. The short version

• To play the dailies you need no account, and we do not ask for your name or email. To keep your results in your browser we set a cookie with a random number, and the server's log, like any website's, records your IP address for 14 days (sections 3 and 6).
• To play ranked or keep a daily streak you need an account. We keep your email address to sign you in and help you back in, and your games to rate them and show them to you.
• Your name on the ladder, your rating, your win-loss record, your best rating and your approved picture are public. Your email address never is.
• A picture you upload shows to other players as soon as you add it (to a new account's opponents, after a day or a match), unless it is reported by two other players, when it is hidden until a person has looked at it. You can remove it at any time.
• We don't show ads, we don't use tracking or analytics services, and we don't sell or share your data for marketing.
• You can delete your account from your profile at any time. Your account, picture and daily results are deleted at once; a few things are kept for a stated time (sections 6 and 9). The matches you played stay, because they are also your opponents', but they show you as "Deleted player".

3. What we keep, and why

Your account

• Your email address. It signs you in, confirms the account is yours, and gets you back in if you forget your password. We send it only the emails in section 7. It is never shown to other players.
• Your password, if you made one. We keep only a scrypt hash of it, which cannot be turned back into the password.
• Your name on the ladder. The name you chose: typed when you registered, or confirmed on the first page after signing in with Google, Discord or Apple. We never keep the name on your Google, Discord or Apple account. When you sign in with one of them we suggest a name (your Discord username, or your first name from Google or Apple, never your surname or email address), and you keep it or type another before anybody can see it. Until you have chosen, the suggestion is kept only to show you, and your account takes no part in anything other players see.
• Your car (the one you picked in the garage), your rating, your best rating, how many matches you have played and won, and when you joined.
• When you confirmed you are 16 or older. Every account is asked, when it is created, and we keep the date of the answer.
• Whether you have seen the ranked introduction. We keep the date it was first shown, so it is shown once on your account and not again on another device.
• Google, Discord or Apple, if you use one to sign in: which one, and your account's ID there, so the same account opens next time. We do not keep your name or profile picture from them, or the keys they issue for acting on your behalf there. If you use Apple's Hide My Email, the address we keep is the one Apple made for you, and our emails reach you through Apple.

Why we may: we need these to give you an account and run the game you signed up for (performance of a contract).

Your picture

If you upload a picture, we keep it. It shows to other players as soon as you add it; nobody looks at it first. Any signed-in player can report a picture, and the report keeps a copy of the picture as it was, because the first thing somebody reported does is change it. If two different players who have had an account for a week and played at least three matches report it, it is hidden from everyone but you until a person has looked at it, and we may then remove it. Reports about a picture are kept as described under Reports. A new account's picture is shown to other players only once the account is a day old or has finished a match. You can replace or remove your picture at any time.

Why we may: you chose to add it, to show it with your name (contract). We check it first to keep the game safe for everyone (legitimate interest).

Your games

• Ranked matches: who you played, the score of each round, the rating each player had before and after, and when. Also each answer you gave — what you typed or pressed, and how long it took, timed by our server.
• The dailies: your results and your daily streak.
• What you have already been shown: which cars and photographs have come up for you recently, so they don't repeat.

While a match is running we also note, for each player, the last time their screen asked how it stood. That is how we tell a player who has left from one who is slow: a player gone for a minute loses the match, and the other sees that they have gone. It is cleared when the match ends.

Why we may: to run matches, rate them, show you your history and keep the ladders (contract). Answer times also help us notice cheating (legitimate interest).

What we have done to an account

If we hide a name, remove a picture, suspend or close an account, or revoke a shared picture, we keep a record: who did it (the administrator, and whether they or an assistant ran it), when, which of the four kinds it was about (name, picture, how you played, other), and a sentence of reason that does not name anybody. For a suspension it also holds the end date. We also keep, for a name that has been given up (by deleting the account, because we hid it, or because we asked you to change it), a one-way scrambled form of the name for 90 days (a year for a hidden name), so nobody can take it and pass as you. A name you change yourself is not kept: it is free to anybody as soon as you change it. And for a closed account, a one-way scrambled form of its email address, for as long as the closure stands (it is deleted if we lift it). Neither is readable as a name or an address, and neither is used for anything else. The scrambled form catches the same address or name being used again; it does not catch a different address or a changed spelling.

Why we may: to enforce the terms and keep the ladder fair (legitimate interest), and to show an administrator's decisions can be checked.

A picture of a match you share

At the end of a match either player can press Share image. That makes a picture with the result (victory, defeat or draw for each player), both players' names, a drawn car in each player's colour, and the points of that match, and nothing else: no profile picture, no rating, no rank, no history. It is made from the stored match, so nobody can type a different result into it. We keep one random link for it, tied to that match and that player, so the same picture is not drawn twice; the link works only for the picture.

This is a choice the player who shares makes. Once they save or post it, it is theirs to post, and it shows their opponent's name and the result on an image the opponent did not make. We cannot take back a picture somebody has already saved. Your match history stays private to you: sharing one match does not show any other. If a picture of a match you played should not be served from our address any more, write to us (section 1); we can stop serving that one.

Why we may: to let a player show a result they were part of (legitimate interest).

Reports

If you report another player after a match, we keep who reported, who was reported, the match, and the reason. For a report about a name or a picture, we also keep a copy of the name or picture as it was, because it may have changed by the time we look.

Why we may: to decide reports fairly and keep a record of what was decided (legitimate interest).

Being around, and challenges

While you are signed in and this site is open and in view in your browser, it tells our server so every twelve seconds. We keep one thing from that: the time of the last time. Each one replaces the one before, so the game's database has no history of when you were here. The server's log, which records every request with its IP address for 14 days, does include these requests. Other players in your rank cannot see that time. They can only see whether it is under three minutes old, and that is all it is used for: it decides whether they are offered a Challenge button on your player page. It is not shown to anybody outside your rank. On your profile, Appear offline turns this off: nobody can then challenge you or tell whether you are around.

If somebody challenges you, or you challenge them, we keep who asked whom, when, whether it was answered, and the match it became, if it did. A challenge lasts five minutes, and the record of it is deleted a day after it ends. A player you said no to cannot ask you again for an hour, and that is why the record is kept that long.

Why we may: to offer a challenge only to somebody who will see it, and to run it (contract); the switch is yours (legitimate interest, with your right to object).

When a page breaks

If a page breaks in your browser, it sends our server a short report: the page's address on this site and nothing after the ?, the error's message, and your name on the ladder if you are signed in. It goes into the server's log, which also holds IP addresses and is kept for 14 days. A browser can send only a few of these a minute.

Why we may: to find and fix what is broken (legitimate interest).

Messages you send us

If you use the contact form, we keep the message, the address you give if you want a reply, and when you sent it. A bug report also carries the page you sent it from (its address on this site and nothing after the ?), your browser, your screen size, the version of the site, and your name on the ladder if you are signed in. It reaches us as an email in our support inbox, a Gmail mailbox (section 8). It is not kept in the game's database, and an idea or a message carries none of those extras.

Why we may: to answer you and to fix what you reported (legitimate interest).

Totals we count

We count totals per day, with no names, addresses or identifiers: how many arrive from each place, how many finish a daily, how long ranked searches take, how many sign-ins fail and how many pages break. A count is a day, a label and a number, and nothing in it is about you. A link we or you share can end in ?src=share (or another short word) so we can tell where a visit came from; your browser tells us once and the tag is taken off the address. If you make an account in that same visit, the tag is kept on the account, to be added up with the others, and goes when the account does. We use no analytics service, pixel or analytics cookie, and nothing is stored in your browser for this.

Why we may: to know whether the game works and whether people find it (legitimate interest).

Keeping accounts safe

• Sessions: while you are signed in, a random key in a cookie matches a record on our server. Sessions end after 30 days, when you sign out, or when you reset your password (which signs you out everywhere).
• Sign-in, sign-up and contact-form attempts: the email address or internet (IP) address involved and the time, kept for 24 hours to stop password guessing, mass sign-ups and a flood of messages.
• Email links: the links we email you are stored only as a scrambled fingerprint, and stop working after one use, or after 1 hour (password resets) to 2 days (confirming an address). We keep the record of a used or expired link, still only as the fingerprint, with the address it was sent to and when it was used, for 7 days, so that the page it opens can say that it was used or has expired and offer a new one; then it is deleted.

Why we may: to protect your account and everyone else's (legitimate interest).

Playing without an account

To keep your daily results in your browser without an account, so a puzzle you have finished stays finished, we set a cookie with a random ID. It isn't linked to your name or email, and we don't use it to follow you anywhere else. Everything kept against it is deleted 12 months after that browser last played. Streaks are kept only for accounts.

If you choose a car in the garage without an account, it is kept in a cookie of its own in your browser, and nowhere else.

4. What is public

• Your name on the ladder (always one you chose), your rating and rank, your best rating, your position on the ladder, and your win-loss record: how many of the matches you have finished you won, lost and drew.
• These, with your picture, car and daily streak, are on your player page. Anybody can open it, signed in or not, from your name on the ladder or at the end of a match against you; search engines are asked not to list it. Your match-by-match history is not on it: only you can see that.
• Your picture, once approved, and your car.
• Your daily streak, on the streak ladder.
• Whether you are around (seen in the last three minutes), but only to players in your own rank, and only as whether a Challenge button is offered. You can turn it off.
• In a match, your opponent sees your name, picture and car, and your answers once each round is over.
• On a picture of a match that either of you chooses to share: both names, a drawn car in each one's colour and the points of that match (see "A picture of a match you share").

Your email address, your password, and anything in section 3 not listed here are never shown to other players.

5. Cookies and storage in your browser

We use only what the game needs to work, so there is nothing to agree to and no banner:

No advertising, analytics or tracking cookies, ours or anybody else's.

6. How long we keep it

7. Emails we send

Only these, and only to the address on your account:

• the link to confirm your address when you register;
• a password reset link when you ask for one;
• a link to confirm a new address, and a notice to the old address, when you change it;
• a notice if somebody tries to register with your address when it already has an account;
• if you write to us and give an address, our reply to it;
• a notice if we remove your picture, hide your name, or suspend or close your account (terms, section 6).

No newsletters, no marketing, nothing else.

8. Who else handles your data

These companies process data for us, only to provide their part of the service:

• Hetzner Online GmbH, Germany: our server, in Nuremberg. It runs the website and the database that holds everything in section 3, and keeps the server's logs, including IP addresses, for 14 days, and the copies of the database kept on the server itself (section 6).
• Cloudflare, Inc., United States: forwards the email sent to our support and privacy addresses to our mailbox (Google, below), so it handles those messages on their way. It keeps our nightly backups for 30 days, in the European Union. They are copies of the database, encrypted on our server before they are sent, so Cloudflare cannot read them. It also stores the car photographs and delivers them to your browser, so it handles your IP address when a photograph loads.
• Resend, United States: sends the emails in section 7, from its servers in Ireland, so it handles your address and the email.
• Google LLC, United States: provides the Gmail mailbox that our support and privacy addresses are forwarded to, so it holds the messages you send us there and the address you send them from, until we delete them (section 6).

If you choose to sign in with Google, Discord or Apple, that service learns that you signed in to GuessTheRide, and it is responsible for its own handling of that. We receive only what section 3 says we keep.

The car photographs come from Wikimedia Commons. We keep our own copies (at Cloudflare, above) and serve them from there, so viewing them does not tell Wikimedia anything about you. The credits page links to Commons, which is its own website with its own policy.

Some of these companies are outside Serbia. Where they are, we send them only what is described above, and only for the purpose given.

9. Deleting your account

On your profile, choose Delete account. It happens at once and cannot be undone.

What is deleted: your email address, password, name, picture and car; every way of signing in, including links to Google, Discord and Apple; your rating and place on the ladder; your daily results and streak; the list of what you have been shown; any open challenge link; the links behind match pictures you shared; your ladder challenges; and every report made about you, which holds a copy of your name and sometimes your picture.

What stays, and why: the matches you played. Each one is also your opponent's, and their record of it — who they played, the answers, the rating it changed — must not change because you left. Those matches show you as "Deleted player", with nothing that could identify you. Reports you made about other players also stay, without your name.

If you sign in again later with the same email address, Google, Discord or Apple account, you start a new account from the beginning.

Copies in backups disappear as the backups expire, within 31 days.

10. Your rights

You can ask us to:

• give you a copy of your data, including in a format you can take elsewhere;
• correct anything that is wrong;
• delete your data (you can also do it yourself, section 9);
• restrict or object to how we use it, where we rely on legitimate interest.

Write to privacy@guesstheride.com from the address on your account. We will answer within 30 days.

If you think we have handled your data wrongly, you can complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection (Poverenik, poverenik.rs). If you live in the EU, you can also complain to the data protection authority where you live.

11. Age

You must be at least 16 to create an account, and creating one asks you to confirm that you are; we keep the date you did. If we learn that an account belongs to someone younger, we will delete it. The dailies need no account and ask for no name or email.

12. Changes to this policy

When this policy changes, the date at the top changes. If a change affects what we keep or who sees it, we will say so in the game, and by email where the change matters to you, before it takes effect.