Privacy Policy

Geowin operates this site and is the controller of the personal data described below. You can reach us using the details on the Contact page. This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have.

• Account data: email address, username, password hash (or Google sign-in identifier), email verification status and account creation date.
• Game data: tiles you dig and when, clues you unlock, dig allowances and credits, wins and prize amounts.
• Purchase and payout data: what you bought, when, the amount, subscription status, withdrawal requests and their status. Card details are handled by our payment provider — we never see or store your full card number.
• Referral data: your referral code, who referred you, who you referred and commissions earned.
• Chat data: messages you post in the global live chat, with your username and timestamp.
• Technical data: IP address, device and browser information, approximate region derived from IP, and server logs — used for security, anti-cheat and diagnostics.
• Verification data: if a payout requires it, identity documents you choose to send us.

We do not track your precise GPS location — where you dig on the map is a game choice, not your real position. We do not sell your personal data, and we do not use it for third-party advertising profiling.

• To run your account, the hunts, purchases and payouts — necessary to perform our contract with you.
• To detect and prevent cheating, multi-accounting, fraud and abuse, and to keep the service secure — our legitimate interest in a fair game.
• To send service emails (verification, security, purchases, payouts, hunt status) — contract performance.
• To send occasional product and promotional emails — legitimate interest or consent; you can unsubscribe at any time.
• To comply with tax, accounting and anti-fraud obligations — legal obligation.

By creating an account you agree to receive account, security, purchase, payout and hunt-related emails. These are required to operate your account and cannot be turned off while it exists. Marketing emails are optional and every one contains an unsubscribe link.

Your username is public: it appears in the live chat and, if you win, on the winners page. If you win a hunt, you agree that we may publish your username, the prize amount, the hunt date and the revealed chest location on the winners page and our social channels. We never publish your email, real name or address without your consent.

We share only what is needed with service providers acting on our instructions: hosting and database infrastructure, authentication (including Google sign-in if you use it), map and imagery providers, payment and payout processors, and email delivery. We may also disclose data if required by law or to protect our rights, players or security. Some providers operate outside the EU/EEA; in that case transfers rely on standard contractual clauses or an equivalent safeguard.

We use strictly necessary cookies and local storage to keep you signed in, remember interface preferences and protect against abuse. We do not use advertising cookies. Blocking these cookies will prevent you from signing in.

Account and game data is kept while your account is active. After deletion we remove personal data within 30 days, except records we must keep longer: purchase, payout and tax records (typically 7 years), and limited anti-fraud records such as hashed identifiers of terminated accounts. Dug tiles, chat messages and winner entries remain part of the game history, disassociated from your account where possible.

Data is stored on access-controlled infrastructure with row-level security, encrypted connections and hashed passwords. Secret chest coordinates are never sent to the browser. No system is perfectly secure, so please use a strong, unique password.

Depending on where you live you may request access to your data, a copy in portable form, correction, deletion, restriction of processing, or object to processing based on legitimate interest. Contact us and we will respond within one month. You may also complain to your local data protection authority.

Geowin is not for anyone under 18. We do not knowingly collect data from children; if we learn that we have, we delete the account and its data.

We may update this policy; material changes will be announced on the site and the date above will change. Questions or requests: see the Contact page.