1. Who is responsible
The data controller for this service is David Larsson, a private individual in Sweden. You can reach me at info@disco.games.
Guess the Career is a football career guessing game available at guessthecareer.disco.games. This policy explains what personal data is processed when you use it.
2. What data we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Guest account. When you make your first guess without signing in, an anonymous account with a random ID is created. Your browser stores a session so you stay recognised. | To save your progress and streak, and to let you keep them when you later sign in. | Performance of the service (Art. 6(1)(b)) |
| Google sign-in. Your name, email address and a link to your profile picture, as provided by Google, plus your Google account identifier. | To create and secure your account. Your email is only visible to you in your own profile. | Performance of the service (Art. 6(1)(b)) |
| Profile. Display name (by default your Google name, which you can change), and a two-letter country code. | To show you on the leaderboard and show a country flag next to your name. | Performance of the service (Art. 6(1)(b)) and legitimate interest in running a leaderboard (Art. 6(1)(f)) |
| Gameplay data. Which players you have identified, your wrong guesses (with time), your current and longest streak, and which player you are currently guessing. | To save your progress, calculate rankings, and show statistics such as the easiest and hardest players. | Performance of the service (Art. 6(1)(b)) |
| IP address. When you have signed in with Google and we do not yet know your country, your browser sends your IP address to a geolocation service (ipapi.co) to look up your country. We store only the country code, not the IP address. Our hosting and infrastructure providers also process IP addresses in technical logs. | To show a country flag, and to keep the service secure and available. | Legitimate interest (Art. 6(1)(f)) |
| Security data. Counts of guesses per minute and hour. | To prevent cheating and automated abuse. | Legitimate interest (Art. 6(1)(f)) |
| Emails to us. If you write to info@disco.games, we receive your email address and your message. | To answer you. | Legitimate interest (Art. 6(1)(f)) |
We do not collect special categories of personal data, and we do not sell your data. We do not currently show advertising or use analytics tools. If that changes, this policy will be updated first, and we will ask for consent where the law requires it.
3. What is public
The leaderboard is visible to everyone who visits the site. For signed-in users it shows your display name, country flag, score and streak badge. Clicking a name also shows that person's three best leagues as percentages. Guest accounts are not shown on the leaderboard. Choose a display name you are comfortable sharing publicly. You can change it any time in your profile.
4. Who we share data with
We use the following service providers (processors). They only process data on our behalf, or, in Google's case, provide the sign-in.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in (accounts, profiles, progress) | Data is stored in the EU (AWS eu-west-1, Ireland) |
| Vercel | Hosting of the website | Global network; company based in the US |
| Cloudflare | Domain registration, DNS and email forwarding for info@disco.games | Global network; company based in the US |
| "Sign in with Google" | Global; company based in the US | |
| ipapi.co | Looking up your country from your IP address | Third-party service (see its privacy policy) |
We do not share your data with anyone else, except if the law requires it.
5. Transfers outside the EU/EEA
Some providers above are based in, or may process data in, countries outside the EU/EEA, such as the United States. Where that happens, the transfer relies on safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. You can ask us for more information at info@disco.games.
6. How long we keep your data
- Accounts, profiles and gameplay data: until you delete your account.
- Guest accounts: deleted automatically after 30 days without activity.
- Backups: if you delete your account, copies in backups are removed within 30 days.
- Technical logs: kept by our infrastructure providers according to their own retention periods.
- Emails you send us: as long as needed to handle your request.
7. Your rights
Under the GDPR you have the right to:
- get access to the personal data we hold about you
- have incorrect data corrected
- have your data erased
- restrict or object to certain processing, including processing based on legitimate interest
- receive your data in a portable format
Delete your account yourself: sign in, open your profile and choose Delete account. This permanently removes your account, progress, wrong guesses and leaderboard entry. It cannot be undone.
For anything else, such as access to your data, removing your country flag or other requests, email info@disco.games. We aim to reply within one month.
If you think we handle your data incorrectly, you also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
8. Cookies and local storage
The site stores your sign-in session in your browser's local storage. It is strictly necessary for you to stay signed in and keep your progress, and it is removed when you sign out or clear your browser data. We do not use advertising or tracking cookies. When you sign in, Google may set its own cookies on its sign-in pages, governed by Google's policies.
9. Security
Answers are checked on the server, access to the database is restricted with row level security and column permissions, and data is sent over encrypted connections. No system is perfectly secure, but we work to protect your data.
10. Children
The service is not intended for children under 13. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
We may update this policy when the service changes, for example when we add features. The date at the top shows when it was last updated. For significant changes, we will make it visible in the service.
12. Contact
David Larsson
Email: info@disco.games