Privacy Policy
California Privacy Notice
Nevada Privacy Notice
1. ABOUT US
- GEOCACHING.COM website, mobile applications, and discussion forums;
- SHOP.GEOCACHING.COM website;
- WAYMARKING.COM website;
- WHERIGO.COM website and mobile applications;
- GROUNDSPEAK.COM website;
- BLOG.GEOCACHING.COM website;
- ADVENTURE LAB® webpages and mobile applications;
- MYGEOCACHINGPROFILE.COM website; and
- LILYPAD CHAT™ mobile applications.
For the purpose of this privacy policy, we refer to the above as our “services”. References in this privacy policy to “we”, “us,” or “our” are references to Groundspeak.
2. ABOUT THIS PRIVACY POLICY
While we are based in the United States, we recognize that people in many different countries also use our services. Privacy laws vary depending on your location. As the majority of people who use our services are in the U.S. and Europe, we have based our privacy policy on U.S. law and the European Economic Area’s (EEA) privacy law, known as the General Data Protection Regulation (GDPR). When processing personal data (also personal information or information or data), we act as the controller within the meaning of GDPR.
3. CATEGORIES OF PERSONAL INFORMATION
3.1. Account and identity information
3.2. Activity information
3.3. Browsing information
3.4. Community information
3.5. Contact information
3.6. Correspondence
3.7. Device information
3.8. Professional or employment-related information
3.9. Location information
You also have control over how your location is shared in your account settings:
- Geocaching, Waymarking, and Wherigo: You can choose to add a general location to your public profile, so others know where you’re based.
- Geocaching only: You can set a Home Location in your private profile. This helps us show you relevant geocaches, Adventures, and events near you. You can make this as broad as your state or as specific as GPS coordinates.
- Lilypad Chat: You can set Private Locations in your private profile. This allows us to hide your location when you enter those designated areas.
3.10. Membership information
3.11. Messaging
3.12. Other account information and contacts
3.13. Preference information
- Which pages you visit and how much time you spend on them
- The links you click
- The files, listings, or other content you view or interact with
- The pages or features you request or return to
Actions that help us understand what parts of the service are useful, confusing, or popular
3.14. Profile information
3.15. Promotion information
3.16. Purchase information
- Your contact details
- Shipping and billing addresses
- The item(s) you purchased and the price
- Your chosen payment method
We also keep a record of your purchase history so you can view past orders and we can provide better support if needed.
3.17. Review submissions
4. HOW WE USE YOUR PERSONAL INFORMATION
4.1. Providing services
Categories of personal information we use
- Account and identity information
- Membership information
- Profile information
- Location information
- Activity information
- Other account information
Legal basis
Performance of a contract with you, e.g.:
- Authenticating your identity
- providing you with the correct membership level
- administering our services
Pursuing our legitimate interests in:
- making our services available to you
- ensuring that our services are secure and only used by authenticated and authorized users.
- providing you with all features that you have requested
- providing a more compelling game experience
4.2. Purchases
Categories of personal information we use
- Account and identity information
- Contact information
- Correspondence
- Purchase information
Legal basis
Performance of a contract with you, e.g.:
- facilitating secure payment
- providing you with the correct membership level
- communicating with you about the status of your purchases
- administering our services
4.3. Account maintenance
Categories of personal information we use
- Account and identity information
- Membership information
- Contact information
- Correspondence
Legal basis
Performance of a contract with you, e.g.:
- providing you with the correct membership level
- administering our services
- providing you with non-marketing commercial communications relating to your Premium membership
Your consent, if requested and provided.
4.4. Communications
Categories of personal information we use
- Account and identity information
- Membership information
- Contact information
- Messaging
Legal basis
Performance of a contract with you by enabling you to send or receive messages through our communications services.
4.5. Internal purposes
Categories of personal information we use
- Account and identity information
- Membership information
- Profile information
- Location information
- Correspondence
- Purchase information
- Activity information
- Community information
- Preference information
- Device information
- Browsing information
Legal basis
Pursuing our legitimate interest in:
- improving our services
- developing our business
- maintaining our business records
- ensuring that our services are secure and functioning properly
- efficiently handling our business processes
Your consent, if requested and provided.
4.6. Authorized Developers
Categories of personal information we use
- Profile information
- Activity information
- Device information, specifically the name and version of the Authorized Developer application you’re using
- Location information
Legal basis
Pursuing our legitimate interest and those of our Authorized Developers to create websites and applications that extend your experience of the games and services beyond what we are able to provide.
Your consent, if requested and provided.
4.7. Marketing
Categories of personal information we use
- Account and identity information
- Membership information
- Profile information
- Contact information
- Location information
- Correspondence
- Purchase information
- Preference information
Legal basis
Pursuing our legitimate interest in providing you with marketing communications, including telling you about our services, products, or offers relating to your membership or our services, if you have opted to receive these communications.
Your consent, if requested and provided.
Complying with our legal obligations.
4.8. Customer service
Categories of personal information we use
- Account and identity information
- Activity information
- Membership information
- Contact information
- Correspondence
- Device information
Legal basis
Performance of a contract with you, e.g.:
- providing you with non-marketing commercial communications relating to your membership or our services that you use
- answering questions that you have specifically directed to us, e.g., support queries or questions relating to your membership or our services
4.9. Building community
Categories of personal information we use
- Account and identity information
- Membership information
- Profile information
- Location information
- Activity information
- Community information
- Other account information
Legal basis
Pursuing our legitimate interests in:
- providing you with the public features of our services that you have requested
- maintaining a historical record of game-related activity
- enhancing the community-oriented nature of the game
- allowing other users to interact with you and determine your credibility or engagement level with the game
Your consent, if requested and provided.
4.10. Promotions
Categories of personal information we use
- Account and identity information
- Contact information
- Activity information
Legal basis
Pursuing our legitimate interest to develop our business.
Your consent, if requested and provided.
4.11. Log in
Categories of personal information we use
- Other account information
Legal basis
Performance of a contract with you, in particular:
- providing our services to you
- administering your account with us
4.12. Violations
Categories of personal information we use
- Account and identity information
- Membership information
- Contact information
- Profile information
- Location information
- Correspondence
- Review submissions
- Activity information
- Community information
- Device information
- Browsing information
- Messaging
Legal basis
Pursuing our legitimate interests in:
- ensuring appropriate conduct in connection with the use of our services
- enforcing our terms of use and other agreements that we have in place
- protecting the rights and freedoms of our users and other third parties
4.13. Community volunteers
Categories of personal information we use
- Review submissions
- Community information
Legal basis
- Pursuing our legitimate interest in:
- ensuring that your geocache meets the publishing guidelines
- providing appropriate controls on forum discussions
4.14. Location features
Categories of personal information we use
- Location information
Legal basis
Pursuing our legitimate interests in verifying your location when you use location-dependent features, sending you information that is relevant for your location, and understanding how you use our apps in order to improve your experience.
5. DISCLOSURE OF PERSONAL INFORMATION
5.1. Other users
Personal information disclosed
- Account and identity information: username
- Membership information: membership type and date account was created
- Profile information: only if you choose to make it public or visible to friends
- Location information: only if you choose to make it public or visible to friends
- Browsing information: if you participate in the discussion forums, your IP address may be shared with community volunteer forum moderators (who are registered Geocaching account holders) to help them provide appropriate controls on forum discussions
- Review submissions: shared with community volunteer reviewers to allow them to assess whether your geocache meets the publishing guidelines
- Activity Information
Legal basis
Pursuing our legitimate interest in:
- providing you with the public features of our services that you have requested
- maintaining a historical record of game-related activity
- enhancing the community-oriented nature of the game
- allowing other users to contact and interact with you and determine your engagement level with the game
- ensuring appropriate conduct in connection with the use our services
- enforcing our terms of use and other agreements that we have in place protecting the rights and freedoms of our users and other third parties
5.2. Authorized Developers
Personal information disclosed
- Account and identity information: username
- Profile information
- Activity information: geocache and trackable listings and logs (including photos), Adventure Lab listings and activity
- Location information: only if you use the Authorized Developer application and consent to share
- Legal basis
Pursuing our legitimate interest and those of our Authorized Developers in creating websites and applications that extend your and other account holders’ experience of the games and services beyond what we are able to provide.
Your consent, if requested and provided.
5.3. Promotion partners (only if you choose to participate in their promotion)
Personal information disclosed
- Location information
- Contact information
- Activity information
Legal basis
Pursuing our legitimate interests and those of our partners in:
- enabling your participation in the promotion
- allowing the promotion sponsor to learn more about the general location of participants, e.g., to gauge whether the promotion was effective
Your consent to:
Sharing of contact information for purposes of marketing to you or prize fulfilment
5.4. Social media
Personal information disclosed
Activity information: only if you choose to share your activities to social media platforms like Facebook or Instagram via buttons that may be available on our services
Legal basis
Your consent, if requested and provided.
5.5. Advertising networks
Personal information disclosed
Browser information
Legal basis
Your consent, if requested and provided.
5.6. Vendors, contractors, and service providers, such as:
- email services
- commenting services
- human resource related systems (e.g., applicant tracking, payroll, etc.)
- customer relationship management
Personal information disclosed
The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.
Legal basis
These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.
5.7. Internal business providers, such as:
- auditors
- accounting service providers
- lawyers
- banks
- tax consultants
Personal information disclosed
May include personal information; the type varies depending on the nature of the internal business purposes. Access only as necessary for the internal business purposes.
Legal basis
Necessary for the provision of our services
Our legitimate interest in the proper operation of our business (Art 6(1)(f) GDPR)
5.8. Legal authorities
Personal information disclosed
- May include contact information, profile information, activity information, and location information; the type varies depending on the nature of the request
- Access only as necessary for the purpose
Legal basis
If we are required to by law
Our legitimate interest in combating abuse; in prosecuting crimes; and in securing, establishing, and enforcing claims
5.9. Merger and acquisition partners
Personal information disclosed
May include all categories of personal information
Legal basis
- Shared in accordance with this privacy policy and applicable data protection law
- Our legitimate interest in changing the corporate structure of our business
5.10. Third Party account providers
Personal information disclosed
Other account information
Legal basis
Performance of a contract with you, in particular:
- providing our services to you
- administering your account with us
5.11. Map Providers
Personal information disclosed
Location information (however, you are not identifiable – the information is not linked to your account)
Legal basis
Pursuing our legitimate interest in making our services available to you
5.12. Analytics Providers
Personal information disclosed
The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.
Legal basis
These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.
5.13. Payment Processors
Personal information disclosed
The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.
Legal basis
These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.
5.14. Other services
6. NOTICE OF RIGHTS FOR EEA, UK, AND SWITZERLAND
- Right of access (Art. 15 GDPR): You have the right to request confirmation of whether we are processing your personal information, along with access to that information and details about its processing (e.g., purposes or categories of data involved). You may also request a copy of your personal information.
- Right to rectification (Art. 16 GDPR): You have the right to request correction of your personal information, as permitted by law.
- Right to erasure (Art. 17 GDPR): Subject to the requirements of Article 17 GDPR and as permitted by law, you have the right to request the deletion of your personal information. This right may apply, for example, if: (i) the information is no longer needed for the purposes it was collected; (ii) you withdraw your consent and there is no other legal basis for processing; (iii) you object to processing based on our legitimate interests and no overriding grounds exist, or you object to processing for direct marketing; or (iv) your information has been processed unlawfully.
- Right to restriction of processing (Art. 18 GDPR): Subject to Art. 18 GDPR, you have the right to request the restriction of our processing under limited circumstances, including: when the accuracy of your personal information is contested; when the processing is unlawful and you and you prefer restriction over deletion; and when you have objected to processing that is necessary for our legitimate interests (pursuant to Art. 21(1) GDPR) and a verification of overriding grounds is pending.
- Right to data portability (Art. 20 GDPR): Subject to Art. 20 GDPR, you have the right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format, and to transmit it to another controller, either directly or through us, where technically feasible.
- Right to object (Art. 21 GDPR): You have the right to object to our processing of your personal information, as permitted by law. This applies to processing based on our legitimate interests or tasks carried out in the public interest (Art. 6(1)(e) or (f) GDPR), including related profiling, as well as processing for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): when we process your personal information based on your consent, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of any processing carried out before the withdrawal.
7. YOUR RIGHTS AND CHOICES
- By signing into your account and accessing your account Settings, you can change various privacy settings and
update certain personal information, including deleting information from your profile and deleting your geocache and trackable logs. You can also contact us via our webform to request deletion.
- You can opt out of allowing our Authorized Developers to share your Geocaching.com Profile information with their users by changing your Authorizations in your account Settings. You can also choose to allow them to share your geocaching activity with your Geocaching friends.
- If you don’t want our newsletter or marketing messages, you can click the “unsubscribe” link at the bottom of the email or adjust your email preferences in your account Settings.
- If you don’t want emails from us about specific geocaches or trackables, you can change your settings by logging into your account and removing them from your Watchlist or Lists. Please note that notifications for geocaches or trackables you own cannot be disabled.
- If you have granted us access to your Facebook, Google, or Apple sign-on, you can remove authorizations by logging into account Settings, selecting the Authorizations tab, and clicking to remove access.
- If you’ve given us consent to use your information, you may withdraw it at any time going forward. If not otherwise stated in this privacy policy, you can do so by “opting out” where provided, changing your account Settings or email preferences, or contacting us directly.
7.1. Contacting us to exercise your rights
7.2. Personal information processed when you exercise your rights
7.3. Right to lodge a complaint with the competent data protection authority
8. COMPLAINTS AND QUESTIONS
While we encourage you to reach out to us first, you also have the right to file a complaint with your data protection supervisory authority. If you need help finding the appropriate authority or contact details, feel free to email or contact us.
9. STORAGE OF YOUR PERSONAL INFORMATION
9.1. Account deletion
Because of the nature of our services, which require a mobile data plan or GPS device and the ability to travel, our services are not intended for anyone under the age of 16. If you are a parent or guardian and discover that your child under the age of 16 has created an account without your involvement, please email or otherwise contact us so we can delete that child’s personal information.
9.2. When you stop using our services
We know that users sometimes take a break from using our services, so we don’t automatically delete your account and personal information if you stop using our services or temporarily disable your account. We may reach out to check if you’d like to permanently delete your information. However, after three years of inactivity, we may delete your account without further notice.
Please note that once your account and personal information are deleted, they can’t be recovered. Unless you request permanent deletion, we will retain it securely and in accordance with this privacy policy until you reactivate your account.
9.3. Information provided for a specific purpose
- Competition entries: as long as necessary to administer the competition, typically one year.
- Marketing communications: We will retain your contact details if you have an account or we think you may be interested in our marketing messages. You can opt out at any time, and we will remove you from our email lists within 10 business days.
- Forum content: If you have posted in the discussion forums, we will retain it for as long as the topic remains relevant. After that, we may delete or archive it, unless you request its removal before then.
When we collect personal information automatically (e.g., through analytics), we retain it for as long as it’s useful for improving or developing our services-typically no longer than 24 months after its original purpose is fulfilled.
In some cases, we may be required to store personal information beyond its original purpose due to:
- legal obligation (e.g., compliance with tax and accounting laws).
- Legal claims, including the establishment, exercise, or defense of such claims.
If a law requires us to hold onto your data, we will do so for legally mandated period. We may also retain information based on our legitimate interests, such as maintaining proper records of our business operations.
10. PROTECTION OF YOUR PERSONAL INFORMATION
11. HOW WE USE COOKIES AND OTHER TRACKERS
Cookies are small text files stored on your device when you visit our websites. They help us to: (a) recognize your device; (b) remember your preferences and settings; (c) track which of our webpages you visit and the referral sources; (d) tailor content to your interests; (e) perform analytics; and (f) support security administrative functions. For more details, visit the Cookies section of your account Settings or go to https://www.geocaching.com/account/documents/cookies.
Pixel trackers (also called web beacons or clear GIFs) are tiny tags embedded in websites, ads, or emails. They track thinks like ad impressions or clicks, and help measure the effectiveness of our content and ads.
SDKs are pieces of software code provided by our digital vendors (e.g., analytics providers) that are embedded into our mobile apps. They collect data like app usage, crash reports, and device info, and support features like login via Facebook.
11.1. Information we collect using trackers
- The date and time you use our services
- Information about your browser, system, or device configuration
- Your IP address
- Your interactions with our websites and the pages you visit
- Your interactions with our mobile apps
- Analytics information
- Crash reporting
11.2. Managing trackers
Some user profile and cache pages may include links to third-party sites added by account holders to display content. These links can include cookies and pixels from those third parties. Due to the volume of such content, we may not be able to identify or manage all of these trackers. Please consider browser-based blocking if you wish to block these types of trackers.
11.3. Types of trackers that we use
Strictly necessary trackers
Strictly necessary trackers are essential for our websites to function. They enable core features like page navigation and access to secure areas. The websites cannot function properly without these trackers.
Preference trackers
Preference trackers enable our websites to remember information that changes the way the websites behave or look, like your preferred language or the region that you are in.
Statistics (also called analytics) trackers
Statistics trackers help us to understand how visitors interact with our services by collecting and reporting information about interactions with our websites.
Advertising Trackers
Advertising trackers are used by third parties to track visitors across websites. The purpose is to display ads that are relevant and engaging for the individual user and therefor more valuable for publishers and third-party advertisers.
11.4. For users in the EEA, UK, and Switzerland
If you’ve given consent, you may withdraw it at any time, effective moving forward (but not retroactively). You can do this by changing your cookie settings in your account Settings or as outlined below for specific third-party applications.
Please note that even after withdrawing consent, some trackers might not be blocked. Content that other account holders place on our websites (e.g., links on cache pages) may include third party advertising trackers. Because of the volume of this content, we cannot identify or block all of these trackers. Please consider browser-based blocking instead.
11.5. Google Services
- Ad Settings helps you control ads you see on non-Google websites and apps that use Google ad services. You can also learn how ads are personalized, opt out of ad personalization, and block specific advertisers.
- If you are signed in to your Google Account, and depending on your Account settings, My Activity allows you to review and control data that’s created when you use Google services, including the information it collects from the sites and apps you have visited. You can browse by date and by topic, and delete part or all of your activity.
- Many websites and apps use Google Analytics to understand how visitors engage with their sites or apps. If you don’t want Analytics to be used in your browser, you can install the Google Analytics browser add-on. Learn more about Google Analytics and privacy.
- Incognito mode in Chrome allows you to browse the web without recording webpages and files in your browser or Account history (unless you choose to sign in). Cookies are deleted after you’ve closed all of your incognito windows and tabs, and your bookmarks and settings are stored until you delete them. Learn more about cookies.
- Many browsers, including Chrome, allow you to block third-party cookies. You can also clear any existing cookies from within your browser. Learn more about managing cookies in Chrome.
Google Analytics
We use Google Analytics, including Google Analytics for Firebase, to understand how users interact with our services and improve their experience. Google Analytics uses cookies to collect data about your usage, including your truncated IP address. This information is sent to and stored on Google servers. We also use Google Analytics’ User-ID feature, which helps track user behavior across multiple devices and sessions. When you log in, your User ID is shared with Google to identify your interactions over time. Google Analytics collects both standard events (e.g., the page you came from) and custom events (e.g., clicking a specific button or link). Google uses this data to generate usage reports and insights for us. Google may combine this information with other data it holds, such as your search history, Google account activity, and usage across other devices. In some cases, Google may share this data with third parties, either to comply with legal obligations or if those third parties process data on Google’s behalf.
The information logged with Google Analytics is stored for two years. Once this time period has lapsed, only aggregated statistics will be retained by Google Analytics.
You can deactivate Google Analytics on our websites through an opt-out browser add-on.
Google Firebase
We use Google Firebase, a cloud-based platform that provides certain backend services for mobile applications, such as in-app messaging, notifications, analytics, performance monitoring, A/B testing, dynamic links (links that take you to a particular location in our applications), crash reporting, remote configuration, and behavior predictions using machine learning. To enable these services, we share certain data with Google, including installation IDs and UUIDs, mobile ad IDs, Apple and Android IDs, analytics app instance IDs, mobile ad IDs, IP addresses, device specifications, and crash data.
The information obtained using Firebase is stored for up to 14 months.
Google Marketing Platform
We use the Google Marketing Platform. This cookie platform enables Google and its partners to serve ads to you based on your visit to our websites and/or other sites on the internet. Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are signed into a Google account, this activity may be linked to your account. Even if you do not have a Google account or are not signed in, Google may connect this information to your IP address.
This platform also supports conversion tracking, helping us to understand whether you take certain actions on our websites after interacting with one of our ads on Google or another platform.
For more information on the Google Marketing Platform, please visit https://marketingplatform.google.com/. Please visit Google and use Ads Settings to set your preferences. The website https://optout.aboutads.info/ offers a single place to turn off targeted ad serving from any of its members.
Google reCAPTCHA
We use this tool on some cache pages and during signup to protect our services from abusive bots and spam. Types of data collected include:
- Referrer URL
- IP Address
- Operating system information
- Cookies
- Mouse and keyboard behavior
- Date and language settings
- JavaScript objects
- Screen resolution
This data is stored by Google. To minimize data sent by reCAPTCHA, you can also delete your history and cookies from your browser.
11.6. Hotjar
Your information is processed by Hotjar in the U.S. We use Hotjar to better understand user behavior (e.g., time spent on pages, clicks, etc.) and improve our services based on user feedback. Hotjar uses cookies and other technologies to collect information about your device and usage (including IP address, screen size, device type, unique device identifiers, browser information, country-level location, preferred language). Hotjar stores this information in a pseudonymized user profile and is not linked to any other personal information by us or Hotjar. For additional details, please see the information provided by Hotjar.
The information collected is stored for up to 365 days.
You can opt-out of the creation of a user profile, Hotjar’s storing of personal information about your usage of our websites, and Hotjar’s use of tracking cookies on other websites on the HotJar website.
You can prevent Hotjar from collecting your information generated by the cookie and related to your use of the website, as well as the processing of this information by following Hotjar’s guide here: https://www.hotjar.com/legal/policies/do-not-track/.
11.7. Microsoft Azure Application Insights
Microsoft Azure Application Insights collects mobile application performance data, and in some cases usernames, to help us diagnose problems and understand how you are using our apps.
The information collected are stored for up to 30 days.
11.8. Meta Pixel
Navigate to Settings/Adverts in your Facebook account to adjust your preferences. Learn more about the different types of Facebook cookies here: www.facebook.com/policies/cookies/
12. CHANGES TO THIS PRIVACY POLICY
13. CROSS-BORDER DATA TRANSFERS
We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the applicable DPF Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/
We will offer you the opportunity to choose (opt-out) whether your data is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by you. You may opt-out of such uses of your personal data by contacting us in the How to contact us section or by using our web form.
We will not use sensitive personal data for a purpose other than the purpose for which it was originally collected, or subsequently authorized by you, without first receiving your affirmative and explicit consent (opt-in). We will treat as sensitive any personal data received from a third party where the third party identifies and treats it as sensitive.
Please see the section above called Disclosure of Personal Information for more information about the types of third-parties to whom we may transfer your data. Our accountability for personal data that we receive under one of the DPFs and subsequently transfer to a third party is described in the DPF Principles. In particular, we remain responsible and liable under the DPF Principles if third-party agents that we engage to process the personal data on our behalf do so in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage. For data received under one of the DPFs, we will obtain appropriate assurances from applicable third-parties that they will safeguard it consistent with this privacy policy.
We will take reasonable and appropriate precautions to protect personal data in our possession from loss, misuse and unauthorized access, disclosure, alteration, and destruction.
We will use personal data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by you. We will take reasonable steps to ensure that personal data is relevant to its intended use, accurate, complete, and current.
Pursuant to the Data Privacy Frameworks, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. If you want access, or want to correct, amend, or delete inaccurate data transferred to the United States under the Data Privacy Frameworks, please contact us using the contact details set out in the How to Contact Us section. If requested to remove data, we will respond within a reasonable timeframe.
Recourse, Enforcement, and Liability
In compliance with the EU-US Data Privacy Framework Principles and the Swiss-US DPF, we commit to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. EU, UK, or Swiss individuals with DPF inquiries or complaints should first contact us in the How to contact us section or by using our web form.
We have further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.
If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.
We are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
We will conduct compliance audits of our relevant privacy practices to verify adherence to the DPF. Any employee that we determine is in violation of this policy may be subject to disciplinary action.
13.1. Limitations
14. CALIFORNIA PRIVACY NOTICE
14.1. Right to Know
14.2. Right to Delete
14.3. Right to Opt Out of Sale or Sharing of Personal Information
14.4. Right to Correct
14.5. How to Submit a Request
14.6. Categories of Personal Information That We Collect
- Identifiers – including your name, email address, contact address, username, IP address, device ID, and an ID number assigned to your account
- Other personal information – including your phone number and billing address
- Characteristics of protected classifications – your race or ethnicity (if you apply for a job with us) and your age
- Commercial information – including your purchases and purchase history or tendencies
- Internet or other electronic network activity information – including your browsing history, search history, and how you interact with our websites, applications, or advertisements
- Geolocation data – inferred from your IP address, home GPS coordinates (if you provide them)
- Audio and visual information – records of phone or video calls between you and us
- Professional or employment-related information – if you apply for a job with us
- Inferences drawn from the above information about your preferences, predispositions, and behavior in relation to our websites and apps
For more detailed information about the types of data included in these categories, please see the Categories of Personal Information section above. We do not use or disclose your sensitive personal information for any purpose other than what you would reasonably expect and do not use it to make any inferences about you.
We obtain the categories of personal information listed above from the following categories of sources:
- Directly or indirectly from you: such as when you create an account, from your game play, or from your correspondence with us
- Using cookies, pixels, and other automatic data collection technologies: for example, from observing your actions on our websites or apps, including by the use of cookies or from third parties such as analytics providers
- The device you use to access our services
14.7. Purpose of Collection
14.8. Disclosure of Data to External Parties
We do not sell your personal information as the term sell is traditionally understood. However, our use of tracking technologies and collaboration with our Authorized Developers may be considered sharing or a sale under the CCPA. We sell or share the following information:
Personal Identifiers. We provide your IP address and Device ID to our advertising partners. We also provide certain geocaching account and game activity information to our Authorized Developers, as described further in our privacy policy, for the purpose of creating geocaching applications and websites. This information includes your username, your avatar pictures, images, geocache and trackable logs. You can opt out of sharing your information with Authorized Developers in your account Settings.
Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics. Cookies dropped on your browser may collect observations about you that are shared to our advertising partners. You can opt out of advertising cookies using the tools on our site, by implementing an opt-out preference signal, or by visiting Google and using “Ads Settings” to set your preferences. The website https://optout.aboutads.info/ offers a single place to turn off targeted ads serving from any of its members.
We do not knowingly sell or share the personal information of minors under 16 years of age without legally-required affirmative authorization from the parent or guardian who owns and manages the account.
14.9. Data Retention
14.10. Non-Discrimination
15. NEVADA PRIVACY NOTICE
15.1. Personal Information Collected and Purposes of Use
15.2. Your Privacy Rights
If a delay occurs, we will notify you promptly and provide a new response date.
We generally do not disclose or share personal information for profit. However, under Nevada law, you may direct us to not sell or license your personal information to third parties. To exercise this right, if applicable, please submit a request via email. The same response timeframe and notification process applies.
16. HOW TO CONTACT US
We aim to respond to all legitimate requests within one month. If needed, we may contact you for additional information (e.g., to confirm your identity, or to better understand, and respond to your request.
If you live in the EU: We are located in the U.S. However, we have an EU-based data protection officer and EU-based representative who you may contact as follows:
Our EU Data Protection Officer:
Email: [email protected]
Address: Data Protection Officer, Geocaching, Innere Kanalstr. 15 50823 Cologne, Germany
Our EU-based representative:
Email: [email protected]
Address: MCF Legal Technology Solutions Limited, ATTN: Groundspeak, Inc. DBA Geocaching EU Representative, Riverside One, Sir John Rogerson’s Quay, Dublin 2, D02 X576
If you live in the UK: We are not located in the United Kingdom, so we have appointed a UK-based representative to serve as a direct contact on our behalf, who can be contacted at:
Email: [email protected]
Address: MCF Legal Technology Solutions (UK) Limited, Tower 42 Level 38C, 25 Old Broad St, Cornhill, London EC2N 1HQ, United Kingdom.
If you live in California: If you would like to exercise your rights under the CCPA, you or your authorized agent can contact us using the address above or our web form. If you’re using an authorized agent, we may ask for proof that you’ve granted them power of attorney or other valid signed authorization to act on your behalf. We may also require you to verify your identity directly with us.