Privacy policy

Last updated 3 November 2026. Covers this GeoStats server and the GeoStats Uploader browser extension.

GeoStats is self-hosted software for keeping a history of your GeoGuessr daily challenge results. Each server is run by its own operator. The extension only talks to GeoGuessr and to the server you configure. No data is sent to the extension's author or any other third party. Nothing is sold, used for advertising or profiled. GeoStats is not affiliated with GeoGuessr.

What the browser extension does

• Reads: while you have geoguessr.com open, the extension calls GeoGuessr's own API with your existing login to get your GeoGuessr user ID and nickname, and the daily challenge leaderboard for recent days.
• Sends: when your result for a day is available, it sends that leaderboard response to the server address you entered, together with your GeoGuessr user ID and nickname, authenticated with your API token. The server keeps only your own entry and discards the other players included in GeoGuessr's response.
• Stores in your browser: the server address, your API token, the dates already uploaded and the status of the last upload.
• Never: reads or sends your GeoGuessr password or cookies, tracks other websites, or contains analytics.

What this server stores

• Account: username, a salted hash of your password (never the password itself), and whether you share your stats.
• API tokens: a hash of each token (the token is shown only once), its name, and when it was created and last used.
• Game data: for each daily challenge: the locations, your guesses, scores, distances, time, steps, medal, percentile, streak and XP, plus your linked GeoGuessr user ID and nickname.
• Cookies: one session cookie to keep you logged in. No tracking or advertising cookies.
• The server's normal access logs (IP address, time, requested page) may be kept by the operator for running and securing the service.

Who can see your data

• Other registered users on this server can see your stats and compare against you while “Let other players see my stats” is on in Settings. It's on by default. Turn it off to hide yourself.
• The server operator has access to the database.
• The web pages load fonts from Google Fonts, the map library from unpkg.com and map images from Esri. Those services receive your IP address when pages load. Street View links open Google Maps only when you click them.

Keeping and deleting data

• Data is kept until you delete it.
• Download your data at any time as CSV from the dashboard, or through the API.
• Settings → Delete account permanently removes your account, tokens and all stored games. Individual days can be removed through the API (DELETE /api/v1/me/games/<date>).
• Revoking a token in Settings stops any extension that uses it straight away. Removing the extension deletes what it stored in your browser.

Contact

Questions or requests about your data: geoguesser-admin@thumann.dk.