Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how GuideGame ("we", "us", "our") collects, uses, and protects your information when you use the GuideGame application and website at app.guidegame.gr (the "Service").

Who is responsible for your data

The data controller is GuideGame, Argyroupoleos 13, Argyroupoli 16451, Athens, Greece. Contact: hello@guidegame.gr

Information we collect

• Account information: your email (and name, if you sign in with Google). Passwords are handled securely by Google Firebase; we never see or store them.
• Guest access: if you play as a guest with a PIN, an anonymous device identifier is stored on your device to track access and progress. It is not linked to your name.
• Tour progress: stations visited, quiz results, and rewards collected, so your progress is saved.
• Location: while taking a tour, your device location is used in real time to guide you between stations. To calculate the walking route, your position is sent to Google Maps. We do not store your location or keep a location history.
• Notifications: if you allow notifications, we store a notification token and your device type, so we can tell you when your group is ready or a reward is waiting.
• Rewards: when you claim a partner reward, we record the claim and generate a code. The partner receives your reward code. Your email is shared with that partner only if the reward asks for it and you tick the consent box, so that the partner can send you its newsletter and offers; you can unsubscribe from the partner at any time. A social follow happens on the social network itself, under that network's own privacy policy.
• Storage on your device: we keep a few small items in your browser (local storage) that the app needs to work, such as your tour access and preferences. We do not use advertising or tracking cookies, and we do not use analytics.

Why we use it (legal basis)

• To provide the tour you bought (account, PIN access, progress, rewards, storage on your device): necessary to perform our contract with you (GDPR Art. 6(1)(b)).
• Location and notifications: only with your consent, which you give through your phone or browser permission (GDPR Art. 6(1)(a)).
• Sharing your email with a partner for a reward: only with your consent, when you choose that reward.
• Keeping the Service secure and preventing misuse of PINs and reward codes: our legitimate interest (GDPR Art. 6(1)(f)).
• Purchase and billing records: to meet our legal tax and accounting obligations (GDPR Art. 6(1)(c)).

How long we keep it

• Account and tour progress: until you delete your account. You can do this yourself at any time in the app (Account menu → Delete account), and it takes effect immediately.
• Guest progress (linked to a PIN, not to your name): kept so you can continue your tour; deleted on request.
• Notification token: until you delete your account or ask us to remove it.
• Reward codes you have claimed: kept so the partner business can verify and honor them.
• Location: never stored.
• Purchase records from our website: as long as Greek and EU tax law requires (typically 5 years).

Third-party services

We use Google Firebase (accounts, database, notifications) and Google Maps (navigation). To deliver these services, Google receives your device's IP address. Small logos on some buttons are loaded from Google and Wikimedia, which also receive your IP address. Partner businesses receive only what is needed to honor a reward you claim. We do not sell your personal data. We also use Google reCAPTCHA (part of Firebase App Check) to protect the app from abuse and automated traffic. It runs silently in the background and sends technical information about your device and its use to Google. This site is protected by reCAPTCHA and the Google Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms) apply.

Transfers outside the EU

Google may process data on servers outside the European Union, including in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google also applies the European Commission's Standard Contractual Clauses, so your data receives a level of protection recognised by EU law.

Partner businesses

If you register as a partner, we collect your company name, VAT number, contact email, phone number, logo, city, website and the details of your offers. Your company name, logo, city, offer, website, contact email and phone number are shown to app users on your reward card, so that customers can contact you. Your VAT number and business address are never shown to app users; they are visible only to the GuideGame administrator, who uses them to verify your business. We use this data to perform our partnership agreement (GDPR Art. 6(1)(b)) and keep it while your partner account is active. When you close it, we delete it, except for records we must keep by law and the reward codes already issued, which you must still honor.

Families and children

GuideGame is a general-audience experience designed to be enjoyed by families together. It is intended to be purchased and operated by an adult, who supervises any children taking part. We do not knowingly collect personal data directly from children.

Your rights

Under the EU GDPR, you have the right to access, correct, delete, or receive a copy of your data (portability), to restrict or object to its processing, and to withdraw your consent at any time. Withdrawing consent does not affect processing that took place before.

• Location: turn it off at any time in your phone or browser settings. You can still play using the "I Arrived" button.
• Notifications: turn them off at any time in your phone or browser settings.
• Your account and data: delete them yourself in the app (Account menu → Delete account).
• Anything else (a copy of your data, a correction, deleting guest progress or an email shared for a reward): email us at hello@guidegame.gr. We reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Contact

GuideGame — hello@guidegame.gr

Terms of Use

Provider

The website guidegame.gr, the GuideGame app and the tours are provided by GuideGame. Contact: hello@guidegame.gr.

Your access PIN

The PIN is a personal, non-transferable licence for you and your group. It must not be resold or shared publicly. To play, you need a compatible smartphone with an internet connection and location services.

Safety during the tour

The tours take place in public urban spaces. During the tour you are responsible for your own safety and you must comply with traffic laws, remain aware of your surroundings, avoid restricted, private or hazardous areas, and not endanger yourself or others. Children may take part only under the supervision of an adult.

Liability

To the extent permitted by law, GuideGame is not liable for injury, accidents, or loss of or damage to personal property that result from the user's own conduct, from failure to follow these terms, or from circumstances outside our control. Nothing in these terms excludes or limits our liability where this cannot be excluded by law, including liability for death or personal injury caused by our negligence, or for intent or gross negligence.

Intellectual property

All content of the website, the app and the tours, including text, riddles, audio, images, maps, graphic design and branding, belongs to GuideGame and is protected by copyright law. It may be used only for personal, non-commercial purposes.

Governing law

These terms are governed by Greek law. Any dispute shall be subject to the competent courts of Athens, Greece, without prejudice to any mandatory rights you have as a consumer, including the right to bring a claim in the courts of your place of residence. You may also contact the Hellenic Consumer's Ombudsman (www.synigoroskatanaloti.gr) for out-of-court resolution.

Need help?

Tap a question to see the answer.