Privacy

Updated 3 October 2026 · version of the explanation texts 2026-09-14.1

This page explains who is responsible for your data in PLAYMAPY, what data we process, why and for how long, and what rights you have. It lists only what the service actually does.

Who is responsible for your data

The controller of personal data in PLAYMAPY is Goality Sport Group OÜ, registry code 17232252, address: Peterburi tee 34/4, 11415 Tallinn, Harju maakond, Estonia.

For any question about your data, write to hello@playmapy.com.

We process data under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Estonian Personal Data Protection Act (Isikuandmete kaitse seadus).

What data we process

Only what the service needs to work — what you give us yourself and what arises when you use it:

• Account: e-mail address, password (stored only as a hash), how you sign in — with a password, with Apple or with Google; when you sign in with Apple or Google, the account identifier and e-mail address that Apple or Google passes on (nothing else from your Apple or Google account is stored).
• Profile: name, avatar, sports, social media links if you add them; date of birth and country — as you state them, for the age rules.
• Moments and check-ins: time, place or event, text and photos, audience, presence confirmations (accuracy and distance, without coordinates), likes and your comments.
• Photos and videos: when they are published, the location and camera data stored inside the file are removed on our server; only the orientation of the picture is kept. What is visible in the picture itself is not changed.
• Location: only with your permission in the system. When you check in, the point where you were is saved; when you record a training with its route turned on, the route is saved (see the next point). When you visit a business, coordinates are used only to check the distance and are not saved.
• Training route: recorded only when the feature is turned on; stored encrypted.
• Health data — steps, distance, activity and workouts from Apple Health (iPhone and Apple Watch) or Health Connect (Android): the app reads them only after you connect them yourself and allow access in the system. They are not published automatically. You can turn access off in the system settings at any time.
• Challenges and rewards: your participation and progress, badges, the rewards you have earned, the personal code you show to collect a reward, and the record that a reward was handed out — when, by which organisation and by which of its staff members.
• Reviews and ratings of places, businesses and coaches.
• Event participation, following people and organisations.
• Reports and blocks: what you reported and the reason you gave; whom you have blocked. The person you report is not told who reported them.
• Consent log: which consent was given or withdrawn, when and under which version of the text.
• Technical data: IP address and request address in the server log (e-mail addresses and tokens are hidden in the log); sign-in session data (token hash, time of last use); IP address when you request a password reset or e-mail confirmation.
• Notifications: if you allow notifications on iPhone, we store the device’s notification token, the platform, the language and when it was last used — to tell you, for example, about changes to events you follow.
• Feedback, if you send it: the text, the page address, browser type and window size.

Why, and on what legal basis

• So that the service works — account, sign-in, profile, moments, check-ins, events, reviews: performance of our contract with you (GDPR Art. 6(1)(b)).
• So that others can see you — public athlete or coach profile, a moment for “Everyone”, a named review: only with your consent (GDPR Art. 6(1)(a)); you can withdraw it at any time.
• So that the service is safe — server log, protection against abuse and excessive requests, moderation: our legitimate interest (GDPR Art. 6(1)(f)).

Who else receives data

Data is processed on our behalf by providers the service cannot work without:

• Hetzner — the server that runs the database and the service; located in Helsinki, Finland.
• Cloudflare — storage of photos and backups (Cloudflare R2) and DNS.
• Resend — sending e-mails (e-mail confirmation, password reset) from noreply@playmapy.com.
• Zoho — the mailbox hello@playmapy.com: e-mails you send us and our replies are kept there.
• Amazon Web Services — key service for encrypting training routes (Stockholm region, Sweden); only the encryption key is sent there, not the data itself.
• OpenFreeMap — the base map: your device loads it directly, so OpenFreeMap sees your IP address.
• Apple — if you sign in with Apple (on the website and on iPhone), and to deliver notifications to iPhone (Apple Push Notification service). When an account that signs in with Apple is deleted, we revoke the access Apple gave PLAYMAPY. Google — if you sign in with Google (on the website, iPhone and Android): Google confirms your account to us and passes on its identifier and e-mail address; PLAYMAPY gets no other access to your Google account and keeps no Google tokens. On the website’s sign-in and account-deletion pages, the “Continue with Google” and “Continue with Apple” buttons are loaded from Google and Apple, so they receive your IP address and browser data under their own privacy policies.

PLAYMAPY uses no third-party analytics, advertising or error-tracking services.

How long we keep data

• Account, profile, Moments, Health data and notification tokens — for as long as the account exists.
• Sign-in: an access key is valid for 15 minutes, a session ends after 30 days without use; a password reset link is valid for 30 minutes, an e-mail confirmation link for 24 hours.
• Training route: the line itself is erased after 90 days; only the training summary remains (distance, pace, duration).
• The server log is kept in a limited volume and is overwritten as it fills up.
• Database backups are made daily; after data is deleted, it remains in backups for some time until they are replaced.
• Consent log — for as long as the account exists: it shows which consents you gave and withdrew.
• After you delete your account, erasure starts as soon as you confirm; the deadline we have set for it is 7 days. When it is complete, we send a confirmation email. What is kept after deletion, and why, is explained on the page “Delete your PLAYMAPY account”.

Cookies and browser storage

We use one cookie — pm_refresh: it keeps you signed in; it lasts up to 30 days, is not readable by page scripts and is sent only when signing in. There are no advertising or analytics cookies.

Browser storage keeps your language, theme, a note that an explanation was shown and an unfinished training session including the points of its route — they stay on your device.

Who sees you

You always see yourself. Other people — signed in or not — see your name and avatar only when you have given a reason for it and your age allows it.

Age

Your date of birth and your country are what you tell us; PLAYMAPY does not verify them. The date of birth is used only for age rules — being public and the age conditions of challenges and rewards — and is never published.

• Under 14: the profile is closed and nothing about you is public — others see no public moments, name or avatar of yours.
• Age unknown: nothing becomes public. You can use every other feature.
• From 14, if you have reached the age of digital consent in your country: being public is your own choice.
• From 14, but below the age of digital consent in your country: a parent’s or guardian’s consent is needed. PLAYMAPY has no way to give it yet, so being public is not available.

The age of digital consent is set per country. Estonia: 13, so being public there starts at 14. A country we don’t know or haven’t listed yet: 16.

What can make you visible

Each setting covers only its own object, and all of them are off until you turn them on.

• Public athlete profile — a separate setting, off by default. You can turn it off in one step.
• Public coach profile — its own separate setting, also off by default.
• A moment shared with “Everyone” — the moment, your name and your avatar are visible to everyone, including visitors without an account. Your profile stays closed.
• A named review — only after a visit confirmed by your location or by other people, and only with your consent for that review. It shows the review, your name and your avatar, and does not open your profile. A review without that consent is visible only to you and does not count towards the number of reviews or the average.

Before each of these actions PLAYMAPY tells you who will see it and what exactly.

Changing your mind

• Each consent is withdrawn in the same place where it was given.
• “Hide me everywhere” withdraws everything at once: both public profiles are turned off, your public moments become “Only me”, and your named reviews lose your name and are no longer shown to others.
• If your age no longer allows being public — for example, after you correct your date of birth or change your country — it works the same way as withdrawing consent.
• A photo link that has already been issued stops working within 5 minutes.

Consent log

Every consent and every withdrawal is recorded: who, which action, on which object, given or withdrawn, when, and the version of the explanation text (2026-09-14.1). Records are never changed — a withdrawal is a new record.

Your settings: Public visibility

Your rights

Under the GDPR you can:

• find out what data about you we keep and get a copy of it;
• correct inaccurate data — much of it you can correct in your profile and in Public visibility;
• ask for your data to be erased;
• restrict processing;
• receive the data you gave us in a machine-readable form (portability);
• object to processing based on our legitimate interest;
• withdraw consent — where you gave it, or all at once with “Hide me everywhere”.

To use a right, write to hello@playmapy.com from your account’s e-mail address. Under the GDPR we must reply within one month.

You can delete your account yourself. On the website: “Profile and settings” → “Security” → “Delete account”, confirmed with your password, Apple or Google — whichever you sign in with. In the app: in your account settings, confirmed with your password, with Apple on iPhone, or with Google on iPhone and Android. Access ends at once, and deletion cannot be cancelled. If you don’t see the button, write to hello@playmapy.com from your account’s e-mail address.

Delete your account

Where to complain

If you believe we process your data in breach of the rules, you can contact the Estonian supervisory authority — Andmekaitse Inspektsioon (Data Protection Inspectorate): Tatari 39, 10134 Tallinn, info@aki.ee, +372 627 4135, www.aki.ee — or the supervisory authority of the country where you live or work.