Privacy policy

Playing without an account

Solo play requires no registration. You receive a guest identifier that keeps track of your round results. Guest data is deleted automatically after 35 days.

Your language choice is stored in two cookies (fg_locale and fg_locale_manual, both lasting a year). They exist so the interface appears in the language you picked when you come back.

FoodGuess runs on two domains (foodguess.hu and foodguess.com). To suggest the right one, we use country-level geolocation (our network provider, Cloudflare, passes us only a two-letter country code derived from your IP address) and your browser language setting. When you make a choice in the suggestion bar — staying or switching — the fg_piac_valasz cookie remembers it for 180 days so we do not ask again.

Accounts and signing in

Registering requires an email address, a password and a nickname. Passwords are stored only as a cryptographic hash. You can also sign in with a Kick, Twitch or Google account, in which case we receive your name, email address and profile picture URL from that provider; access tokens are stored encrypted.

For every session we record your IP address and browser identifier (user agent). This exists for login security: it is how unauthorised access to your account becomes visible. Sessions last 30 days.

If you enable two-factor authentication, we store the associated secret key and your backup codes. Your IP address also appears in our rate-limiting counter, which exists to prevent abuse.

Gameplay data

We store the results of your rounds: which dish you guessed on, how many guesses you used, how far off you were and how many points you scored. This drives the leaderboard and your own statistics. In multiplayer rooms your nickname and profile picture are visible to the other people in the room.

Players on the Hungarian leaderboard may supply a separate prize email address. We deliberately keep this apart from your login address, and it is never shown on the public leaderboard — it only indicates prize eligibility.

Usage statistics

We keep simple first-party statistics: which page was opened, and whether an advert or the subscription button was clicked. No third-party service is involved — there is no Google Analytics, no Facebook pixel and no tracking script of any kind.

We do not store IP addresses or browser identifiers for this, and unique identifiers (room codes, result IDs) are stripped out of the recorded paths. This data is deleted automatically after 90 days.

There is exactly one external connection from your browser: map tiles are served by OpenStreetMap, so your IP address reaches them. That is governed by their own privacy policy.

Payments

Subscriptions are handled by Stripe. Card details never enter our systems — they go directly to Stripe. We send them your identifier and email address so the subscription can be linked to your account.

On our side we store the Stripe customer identifier, the subscription identifier, its status and its expiry date. Payment events are logged so that double charges can be ruled out; those log entries cannot be altered afterwards.

Email

We send email in two situations: to confirm your registration and to reset your password. We do not send newsletters, and we do not pass your address to third parties for marketing.

Retention and your rights

Usage statistics are deleted after 90 days and guest data after 35 days. Gameplay results attached to registered accounts are currently retained indefinitely.

You can request deletion of your account, a copy of your data, or correction of it at [email protected]. An important and honest note: the interface currently has no self-service account deletion or data export, so these requests are fulfilled manually. That functionality is being built.