Privacy Policy

California Privacy Notice
Nevada Privacy Notice

1. ABOUT US
We are Groundspeak, Inc. (Groundspeak), the owner and operator of the following websites and mobile applications:

For the purpose of this privacy policy, we refer to the above as our “services”. References in this privacy policy to “we”, “us,” or “our” are references to Groundspeak.

2. ABOUT THIS PRIVACY POLICY
When you use our services, we process your personal information. This privacy policy explains the ways that we process your personal information and our reasons for doing so.

While we are based in the United States, we recognize that people in many different countries also use our services. Privacy laws vary depending on your location. As the majority of people who use our services are in the U.S. and Europe, we have based our privacy policy on U.S. law and the European Economic Area’s (EEA) privacy law, known as the General Data Protection Regulation (GDPR). When processing personal data (also personal information or information or data), we act as the controller within the meaning of GDPR.

3. CATEGORIES OF PERSONAL INFORMATION
We process the following categories of personal information about you in connection with our services.

3.1. Account and identity information
Any information about you that we use to identify you in connection with your account and our services, such as your name, email address(es), username, passwords, phone number (Lilypad Chat), and other identification information, e.g., your user ID for the account through which you are accessing our services. We may collect your age in order to comply with laws that restrict collection and disclosure of personal information belonging to minors.
3.2. Activity information
Any information relating to your game-related activities on our services, such as your finds and related logs (including uploaded photos), hides, favorite points (awarded and received), trackable logs and ownership, game statistics, standing compared to other users on a leaderboard, the Adventures you own and have played, as well as the ratings and reviews you’ve added, and the date and time that you finished the various stages of an Adventure or logged a particular geocache or trackable item.
3.3. Browsing information
Your browsing behavior while using our services, such as your IP address, time and date of access, browsing history, search history, and use of our services, as well as information regarding your interaction with websites, applications, or advertisements when you use our services.
3.4. Community information
Any information you provide to us when interacting with our community, including, but not limited to, any content you post publicly when you use the public features of our services, such as when you participate in the discussion forums or when you write a note on a cache page.
3.5. Contact information
Any information that can be used to communicate with you, including, but not limited to, your name, email address, and other contact details you provide, such as your phone number and address.
3.6. Correspondence
Any information you provide to us through correspondence with us (e.g., by email or via our Help Center), such as your opinions, survey responses, comments and questions, and feedback.
3.7. Device information
Any information related to your mobile phone or GPS device, including, but not limited to, its unique identifiers, such as UUIDs, mobile ad IDs, Apple and Android IDs, analytics app instance IDs, and install IDs, your device type, device specifications, and crash data, your IP network state (online/offline), which version of our applications you’re using, the name of the Authorized Developer application you are using, and whether or not you have enabled a developer option to override your phone’s GPS coordinates.
3.8. Professional or employment-related information
Any information you provide to us if you apply for a job with us, including information in your resume or application form.
3.9. Location information
Any information that allows us to determine or approximate your location. For example, we can estimate your general location based on your IP address when you access our services. When you use our search features, we also collect location data—like latitude and longitude—based on the places you search for. This could be from searches you enter manually, or from automatic searches the app runs when you open it. With your permission, our mobile apps can access your real-time location while you’re using them or, for Lilypad Chat, in the background.

You also have control over how your location is shared in your account settings:

  • Geocaching, Waymarking, and Wherigo: You can choose to add a general location to your public profile, so others know where you’re based.
  • Geocaching only: You can set a Home Location in your private profile. This helps us show you relevant geocaches, Adventures, and events near you. You can make this as broad as your state or as specific as GPS coordinates.
  • Lilypad Chat: You can set Private Locations in your private profile. This allows us to hide your location when you enter those designated areas.
3.10. Membership information
Any information regarding your membership, including whether you are Basic or Premium, the date you joined and last visited, and whether your account is validated.
3.11. Messaging
Messages you send to or receive from other users using our services.
3.12. Other account information and contacts
Any information, such as email address, that we need to process when you choose to login via a third-party account (e.g., Apple, Facebook, Google) or information from your phone contacts to help you connect with others who may be using or want to use our services.
3.13. Preference information
Any information that indicates your actual or likely preferences when using our services, whether provided by you or inferred by us. When we refer to preferences, we’re talking about the choices and patterns we observe based on how you interact with our services, such as:

  • Which pages you visit and how much time you spend on them
  • The links you click
  • The files, listings, or other content you view or interact with
  • The pages or features you request or return to

Actions that help us understand what parts of the service are useful, confusing, or popular

3.14. Profile information
Any information that you put in your profile such as your location, images, photos, and “about me” information.
3.15. Promotion information
Any information you provide when you participate in a promotion, such as a trackable giveaway.
3.16. Purchase information
Any information you provide to buy a Premium membership or make a purchase on Shop.Geocaching.com. This includes things like:

  • Your contact details
  • Shipping and billing addresses
  • The item(s) you purchased and the price
  • Your chosen payment method

We also keep a record of your purchase history so you can view past orders and we can provide better support if needed.

3.17. Review submissions
Any information used to assess whether your geocache meets the geocache hiding guidelines, such as your unpublished cache page and correspondence with the geocaching community volunteer reviewers.
4. HOW WE USE YOUR PERSONAL INFORMATION
The purposes for which we process your personal information are below, along with our legal bases for processing as required by GDPR. (See Article 6(1)(a)-(f) of GDPR if you’d like to know more about the specific legal bases for processing.)

4.1. Providing services
To provide our services to you and to administer and verify your account with us.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Profile information
  • Location information
  • Activity information
  • Other account information

Legal basis

Performance of a contract with you, e.g.:

  • Authenticating your identity
  • providing you with the correct membership level
  • administering our services

Pursuing our legitimate interests in:

  • making our services available to you
  • ensuring that our services are secure and only used by authenticated and authorized users.
  • providing you with all features that you have requested
  • providing a more compelling game experience
4.2. Purchases
To complete your purchase transactions, including authorizing, processing, and tracking payments through our service providers’ secure credit card and payment processing gateways.

Categories of personal information we use

  • Account and identity information
  • Contact information
  • Correspondence
  • Purchase information

Legal basis

Performance of a contract with you, e.g.:

  • facilitating secure payment
  • providing you with the correct membership level
  • communicating with you about the status of your purchases
  • administering our services
4.3. Account maintenance
To enable your Premium membership status, communicate with you about your membership, and keep you informed about service updates and other important administrative matters, such as changes to our Terms of Use or this Privacy Policy.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Contact information
  • Correspondence

Legal basis

Performance of a contract with you, e.g.:

  • providing you with the correct membership level
  • administering our services
  • providing you with non-marketing commercial communications relating to your Premium membership

Your consent, if requested and provided.

4.4. Communications
To allow you to communicate through our services.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Contact information
  • Messaging

Legal basis

Performance of a contract with you by enabling you to send or receive messages through our communications services.

4.5. Internal purposes
Purposes related to our services and operations, including market research, optimizing our website and mobile app, improving our products and services, maintaining records, providing evidence in potential legal matters, and ensuring backups and data storage.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Profile information
  • Location information
  • Correspondence
  • Purchase information
  • Activity information
  • Community information
  • Preference information
  • Device information
  • Browsing information

Legal basis

Pursuing our legitimate interest in:

  • improving our services
  • developing our business
  • maintaining our business records
  • ensuring that our services are secure and functioning properly
  • efficiently handling our business processes

Your consent, if requested and provided.

4.6. Authorized Developers
To enable Authorized Developers to provide related websites and applications that extend and enhance your experience of our services.

Categories of personal information we use

  • Profile information
  • Activity information
  • Device information, specifically the name and version of the Authorized Developer application you’re using
  • Location information

Legal basis

Pursuing our legitimate interest and those of our Authorized Developers to create websites and applications that extend your experience of the games and services beyond what we are able to provide.

Your consent, if requested and provided.

4.7. Marketing
To communicate with you about things we think might interest you, such as our products and services and location-based entertainment-related activities.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Profile information
  • Contact information
  • Location information
  • Correspondence
  • Purchase information
  • Preference information

Legal basis

Pursuing our legitimate interest in providing you with marketing communications, including telling you about our services, products, or offers relating to your membership or our services, if you have opted to receive these communications.

Your consent, if requested and provided.

Complying with our legal obligations.

4.8. Customer service
To provide customer service and review issues with your account or your use of our services.

Categories of personal information we use

  • Account and identity information
  • Activity information
  • Membership information
  • Contact information
  • Correspondence
  • Device information

Legal basis

Performance of a contract with you, e.g.:

  • providing you with non-marketing commercial communications relating to your membership or our services that you use
  • answering questions that you have specifically directed to us, e.g., support queries or questions relating to your membership or our services
4.9. Building community
To allow you to share your experiences using our services with others.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Profile information
  • Location information
  • Activity information
  • Community information
  • Other account information

Legal basis

Pursuing our legitimate interests in:

  • providing you with the public features of our services that you have requested
  • maintaining a historical record of game-related activity
  • enhancing the community-oriented nature of the game
  • allowing other users to interact with you and determine your credibility or engagement level with the game

Your consent, if requested and provided.

4.10. Promotions
To provide promotions with our partners, such as GeoTours, trackable promotions, and sponsored Adventures.

Categories of personal information we use

  • Account and identity information
  • Contact information
  • Activity information

Legal basis

Pursuing our legitimate interest to develop our business.

Your consent, if requested and provided.

4.11. Log in
To allow you to log in via Apple, Google, or Facebook.

Categories of personal information we use

  • Other account information

Legal basis

Performance of a contract with you, in particular:

  • providing our services to you
  • administering your account with us
4.12. Violations
To investigate any complaints, restrict access to our services, or communicate with users who have violated our Terms of Use or otherwise violated our rights or the rights of others.

Categories of personal information we use

  • Account and identity information
  • Membership information
  • Contact information
  • Profile information
  • Location information
  • Correspondence
  • Review submissions
  • Activity information
  • Community information
  • Device information
  • Browsing information
  • Messaging

Legal basis

Pursuing our legitimate interests in:

  • ensuring appropriate conduct in connection with the use of our services
  • enforcing our terms of use and other agreements that we have in place
  • protecting the rights and freedoms of our users and other third parties
4.13. Community volunteers
To enable geocaching community volunteers and us to review geocaches prior to publication and to moderate our discussion forums.

Categories of personal information we use

  • Review submissions
  • Community information

Legal basis

  • Pursuing our legitimate interest in:
  • ensuring that your geocache meets the publishing guidelines
  • providing appropriate controls on forum discussions
4.14. Location features
To verify your location and enable location dependent features, such as to alert you when you get close to a geocache, to unlock an Adventure location, or, in Lilypad Chat, to invite you to a nearby chat group, or to notify you that a friend is nearby. We don’t store or use that real-time location data for anything else, like marketing. However, we may analyze gameplay activity after the fact—such as your location relative to a cache or Adventure location.

Categories of personal information we use

  • Location information

Legal basis

Pursuing our legitimate interests in verifying your location when you use location-dependent features, sending you information that is relevant for your location, and understanding how you use our apps in order to improve your experience.

5. DISCLOSURE OF PERSONAL INFORMATION
Except as outlined below or otherwise described in this privacy policy, we do not share or sell personal information of our users. We only disclose your personal information to the categories of parties listed below for the following purposes and based on the corresponding legal bases:

5.1. Other users

Personal information disclosed

  • Account and identity information: username
  • Membership information: membership type and date account was created
  • Profile information: only if you choose to make it public or visible to friends
  • Location information: only if you choose to make it public or visible to friends
  • Browsing information: if you participate in the discussion forums, your IP address may be shared with community volunteer forum moderators (who are registered Geocaching account holders) to help them provide appropriate controls on forum discussions
  • Review submissions: shared with community volunteer reviewers to allow them to assess whether your geocache meets the publishing guidelines
  • Activity Information

Legal basis

Pursuing our legitimate interest in:

  • providing you with the public features of our services that you have requested
  • maintaining a historical record of game-related activity
  • enhancing the community-oriented nature of the game
  • allowing other users to contact and interact with you and determine your engagement level with the game
  • ensuring appropriate conduct in connection with the use our services
  • enforcing our terms of use and other agreements that we have in place protecting the rights and freedoms of our users and other third parties
5.2. Authorized Developers
We work with developers (“Authorized Developers”) who create geocaching-related websites and applications that connect with our services using our software interface, known as an application programming interface or API.
 
Authorized Developers’ applications are not owned or operated by us. They have their own privacy policies in relation to personal information. We provide a list of our current Authorized Developers.

Personal information disclosed

  • Account and identity information: username
  • Profile information
  • Activity information: geocache and trackable listings and logs (including photos), Adventure Lab listings and activity
  • Location information: only if you use the Authorized Developer application and consent to share
  • Legal basis

Pursuing our legitimate interest and those of our Authorized Developers in creating websites and applications that extend your and other account holders’ experience of the games and services beyond what we are able to provide.

Your consent, if requested and provided.

5.3. Promotion partners (only if you choose to participate in their promotion)
Our partners’ use of your information will be covered by their privacy policies.

Personal information disclosed

  • Location information
  • Contact information
  • Activity information

Legal basis

Pursuing our legitimate interests and those of our partners in:

  • enabling your participation in the promotion
  • allowing the promotion sponsor to learn more about the general location of participants, e.g., to gauge whether the promotion was effective

Your consent to:

Sharing of contact information for purposes of marketing to you or prize fulfilment

5.4. Social media
Review the privacy policies of any social media with whom you choose to share to understand how they use your information.

Personal information disclosed

Activity information: only if you choose to share your activities to social media platforms like Facebook or Instagram via buttons that may be available on our services

Legal basis

Your consent, if requested and provided.

5.5. Advertising networks
We have ads on our site served by a third-party advertising network. Using browser cookies, these ad networks use your navigation history to serve you ads they predict will interest you. Learn more in the Cookies section.

Personal information disclosed

Browser information

Legal basis

Your consent, if requested and provided.

5.6. Vendors, contractors, and service providers, such as:
  • email services
  • commenting services
  • human resource related systems (e.g., applicant tracking, payroll, etc.)
  • customer relationship management

Personal information disclosed

The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.

Legal basis

These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.

5.7. Internal business providers, such as:
  • auditors
  • accounting service providers
  • lawyers
  • banks
  • tax consultants

Personal information disclosed

May include personal information; the type varies depending on the nature of the internal business purposes. Access only as necessary for the internal business purposes.

Legal basis

Necessary for the provision of our services

Our legitimate interest in the proper operation of our business (Art 6(1)(f) GDPR)

5.8. Legal authorities
Examples include: law enforcement, tax or other local authorities based in countries in which we operate.

Personal information disclosed

  • May include contact information, profile information, activity information, and location information; the type varies depending on the nature of the request
  • Access only as necessary for the purpose

Legal basis

If we are required to by law

Our legitimate interest in combating abuse; in prosecuting crimes; and in securing, establishing, and enforcing claims

5.9. Merger and acquisition partners
In the unlikely event that we wished to sell our business or reorganize our company, we may need to share your personal information with potential buyers or the new entity.

Personal information disclosed

May include all categories of personal information

Legal basis

  • Shared in accordance with this privacy policy and applicable data protection law
  • Our legitimate interest in changing the corporate structure of our business
5.10. Third Party account providers
Examples include: Apple, Google, Facebook. To allow you to log in to your Geocaching account via these providers (aka Single Sign-on).

Personal information disclosed

Other account information

Legal basis

Performance of a contract with you, in particular:

  • providing our services to you
  • administering your account with us
5.11. Map Providers
To enable map functionality.

Personal information disclosed

Location information (however, you are not identifiable – the information is not linked to your account)

Legal basis

Pursuing our legitimate interest in making our services available to you

5.12. Analytics Providers
Examples include: Google, Hotjar, Microsoft.

Personal information disclosed

The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.

Legal basis

These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.

5.13. Payment Processors
Examples include: Recurly, Chase Paymentech, Braintree. We use Braintree (a PayPal service) to process Shop Geocaching payments. PayPal is an independent controller for purposes of processing customer data. You can learn more by reviewing PayPal’s privacy statement.

Personal information disclosed

The information category varies depending on the services. Access to personal information is only as necessary for the specific function they were hired to perform. Other use is prohibited.

Legal basis

These entities act as our processors (see Art 28(1) GDPR) and will only process your personal information according to our instructions.

5.14. Other services
We use YouTube API Services to display video uploaded to YouTube on our mobile applications. This use does not require access to your YouTube account data. YouTube’s API Services are governed by Google’s privacy policy.
6. NOTICE OF RIGHTS FOR EEA, UK, AND SWITZERLAND
If you reside in the EEA, the UK, or Switzerland, our use of your personal information is governed by the GDPR or applicable EEA, UK, or Swiss national laws. These grant you the following rights:

  • Right of access (Art. 15 GDPR): You have the right to request confirmation of whether we are processing your personal information, along with access to that information and details about its processing (e.g., purposes or categories of data involved). You may also request a copy of your personal information.
  • Right to rectification (Art. 16 GDPR): You have the right to request correction of your personal information, as permitted by law.
  • Right to erasure (Art. 17 GDPR): Subject to the requirements of Article 17 GDPR and as permitted by law, you have the right to request the deletion of your personal information. This right may apply, for example, if: (i) the information is no longer needed for the purposes it was collected; (ii) you withdraw your consent and there is no other legal basis for processing; (iii) you object to processing based on our legitimate interests and no overriding grounds exist, or you object to processing for direct marketing; or (iv) your information has been processed unlawfully.
  • Right to restriction of processing (Art. 18 GDPR): Subject to Art. 18 GDPR, you have the right to request the restriction of our processing under limited circumstances, including: when the accuracy of your personal information is contested; when the processing is unlawful and you and you prefer restriction over deletion; and when you have objected to processing that is necessary for our legitimate interests (pursuant to Art. 21(1) GDPR) and a verification of overriding grounds is pending.
  • Right to data portability (Art. 20 GDPR): Subject to Art. 20 GDPR, you have the right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format, and to transmit it to another controller, either directly or through us, where technically feasible.
  • Right to object (Art. 21 GDPR): You have the right to object to our processing of your personal information, as permitted by law. This applies to processing based on our legitimate interests or tasks carried out in the public interest (Art. 6(1)(e) or (f) GDPR), including related profiling, as well as processing for direct marketing purposes.
  • Right to withdraw consent (Art. 7(3) GDPR): when we process your personal information based on your consent, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of any processing carried out before the withdrawal.
7. YOUR RIGHTS AND CHOICES
You can choose how your information is shared by adjusting your account Settings or by opting out in the following circumstances:

  • By signing into your account and accessing your account Settings, you can change various privacy settings and

update certain personal information, including deleting information from your profile and deleting your geocache and trackable logs. You can also contact us via our webform to request deletion.

  • You can opt out of allowing our Authorized Developers to share your Geocaching.com Profile information with their users by changing your Authorizations in your account Settings. You can also choose to allow them to share your geocaching activity with your Geocaching friends.
  • If you don’t want our newsletter or marketing messages, you can click the “unsubscribe” link at the bottom of the email or adjust your email preferences in your account Settings.
  • If you don’t want emails from us about specific geocaches or trackables, you can change your settings by logging into your account and removing them from your Watchlist or Lists. Please note that notifications for geocaches or trackables you own cannot be disabled.
  • If you have granted us access to your Facebook, Google, or Apple sign-on, you can remove authorizations by logging into account Settings, selecting the Authorizations tab, and clicking to remove access.
  • If you’ve given us consent to use your information, you may withdraw it at any time going forward. If not otherwise stated in this privacy policy, you can do so by “opting out” where provided, changing your account Settings or email preferences, or contacting us directly.
7.1. Contacting us to exercise your rights
If you wish to exercise any of the above rights, need help, or have questions, please use one of the methods provided in the in the How to contact us section or use our web form.
7.2. Personal information processed when you exercise your rights
We process the personal information provided by you when you exercise your rights under Art. 7(3) and Art. 15 through 22 GDPR, not only for the purpose of complying with these rights, but also so that we can demonstrate such compliance. This processing is based upon the legal basis of Art 6(1)(c) GDPR in conjunction with Art. 7(3) and Art. 15 through 22 GDPR.
7.3. Right to lodge a complaint with the competent data protection authority
If you live in the EEA, UK, or Switzerland, you have the right to complain to a data protection supervisory authority about our collection and use of your personal information. For more information, please contact your local data protection supervisory authority.
8. COMPLAINTS AND QUESTIONS
If you have any complaints or questions about how we use your personal information, please contact us using the details provided above – we’re happy to help.

While we encourage you to reach out to us first, you also have the right to file a complaint with your data protection supervisory authority. If you need help finding the appropriate authority or contact details, feel free to email or contact us.

9. STORAGE OF YOUR PERSONAL INFORMATION
We will keep your data only for as long as it is necessary for the specific purpose(s) for which we have collected or used them in accordance with this privacy policy.

9.1. Account deletion
If you want to permanently delete your account or have requested deletion of your personal information, we will assist you in completing that process. To do so, you will need to take the necessary steps, including adopting or removing any geocaches you own, deleting your logs, and disabling your account. Once completed, we will finalize the deletion as soon as possible. Due to how our systems are structured, it may take up to 30 days for records to be deleted or overwritten. In some cases (set out below) we may keep your personal information for longer.

Because of the nature of our services, which require a mobile data plan or GPS device and the ability to travel, our services are not intended for anyone under the age of 16. If you are a parent or guardian and discover that your child under the age of 16 has created an account without your involvement, please email or otherwise contact us so we can delete that child’s personal information.

9.2. When you stop using our services
If you stop using our services or temporarily disable your account without requesting permanent deletion, we will keep your information as long as needed to provide our services, meet legal obligations, enforce our policies, resolve disputes, or protect or defend our rights and users, and maintain the integrity of the games and the enjoyment of other players. Retention periods vary depending on the type of information, its purpose, and legal or operational requirements. For example, your geocache and trackable logs, along with associated images, will remain as part of the historic record unless you delete them. If you have provided personal information or content needed by others—such as details about a geocache you placed or logged, or instructions related to a trackable—we may retain that information as long as it supports ongoing use of the services. However, you may delete that information at any time if you wish.

We know that users sometimes take a break from using our services, so we don’t automatically delete your account and personal information if you stop using our services or temporarily disable your account. We may reach out to check if you’d like to permanently delete your information. However, after three years of inactivity, we may delete your account without further notice.

Please note that once your account and personal information are deleted, they can’t be recovered. Unless you request permanent deletion, we will retain it securely and in accordance with this privacy policy until you reactivate your account.

9.3. Information provided for a specific purpose
If you’ve provided personal information for a specific purpose, we will keep it for as long as needed to fulfill that purpose. Specifically:

  • Competition entries: as long as necessary to administer the competition, typically one year.
  • Marketing communications: We will retain your contact details if you have an account or we think you may be interested in our marketing messages. You can opt out at any time, and we will remove you from our email lists within 10 business days.
  • Forum content: If you have posted in the discussion forums, we will retain it for as long as the topic remains relevant. After that, we may delete or archive it, unless you request its removal before then.

When we collect personal information automatically (e.g., through analytics), we retain it for as long as it’s useful for improving or developing our services-typically no longer than 24 months after its original purpose is fulfilled.

In some cases, we may be required to store personal information beyond its original purpose due to:

  • legal obligation (e.g., compliance with tax and accounting laws).
  • Legal claims, including the establishment, exercise, or defense of such claims.

If a law requires us to hold onto your data, we will do so for legally mandated period. We may also retain information based on our legitimate interests, such as maintaining proper records of our business operations.

10. PROTECTION OF YOUR PERSONAL INFORMATION
We have implemented security measures to protect against the loss, misuse, and alteration of your information. Your account is secured with a password—you must keep it confidential and not share it with anyone. To protect your credit card details during transmission, we and our payment processors use transport layer security (TLS) to encrypt the information you provide.
11. HOW WE USE COOKIES AND OTHER TRACKERS
We collect data about your use of our services through tracking technologies, such as cookies, pixels, and software development kits (SDKs). These are used on our websites, in email communications, and – to a more limited extent – on our mobile app.

Cookies are small text files stored on your device when you visit our websites. They help us to: (a) recognize your device; (b) remember your preferences and settings; (c) track which of our webpages you visit and the referral sources; (d) tailor content to your interests; (e) perform analytics; and (f) support security administrative functions. For more details, visit the Cookies section of your account Settings or go to https://www.geocaching.com/account/documents/cookies.

Pixel trackers (also called web beacons or clear GIFs) are tiny tags embedded in websites, ads, or emails. They track thinks like ad impressions or clicks, and help measure the effectiveness of our content and ads.

SDKs are pieces of software code provided by our digital vendors (e.g., analytics providers) that are embedded into our mobile apps. They collect data like app usage, crash reports, and device info, and support features like login via Facebook.

11.1. Information we collect using trackers
We collect the following information from you:

  • The date and time you use our services
  • Information about your browser, system, or device configuration
  • Your IP address
  • Your interactions with our websites and the pages you visit
  • Your interactions with our mobile apps
  • Analytics information
  • Crash reporting
11.2. Managing trackers
Depending on your local laws, you may be able to choose which types of cookies and pixels to accept using the tools available on our website. You can also disable cookies and pixels through your browser settings; however, this may limit certain features or functionality of our services.

Some user profile and cache pages may include links to third-party sites added by account holders to display content. These links can include cookies and pixels from those third parties. Due to the volume of such content, we may not be able to identify or manage all of these trackers. Please consider browser-based blocking if you wish to block these types of trackers.

11.3. Types of trackers that we use

Strictly necessary trackers

Strictly necessary trackers are essential for our websites to function. They enable core features like page navigation and access to secure areas. The websites cannot function properly without these trackers.

Preference trackers

Preference trackers enable our websites to remember information that changes the way the websites behave or look, like your preferred language or the region that you are in.

Statistics (also called analytics) trackers

Statistics trackers help us to understand how visitors interact with our services by collecting and reporting information about interactions with our websites.

Advertising Trackers

Advertising trackers are used by third parties to track visitors across websites. The purpose is to display ads that are relevant and engaging for the individual user and therefor more valuable for publishers and third-party advertisers.

11.4. For users in the EEA, UK, and Switzerland
For users in the EEA, UK or Switzerland, the legal basis for using strictly necessary cookies and pixels is Article 6(1)(b) GDPR. For all other cookies and pixels, including the third-party applications listed below, we rely on your consent (Article 6(1)(a) GDPR).

If you’ve given consent, you may withdraw it at any time, effective moving forward (but not retroactively). You can do this by changing your cookie settings in your account Settings or as outlined below for specific third-party applications.

Please note that even after withdrawing consent, some trackers might not be blocked. Content that other account holders place on our websites (e.g., links on cache pages) may include third party advertising trackers. Because of the volume of this content, we cannot identify or block all of these trackers. Please consider browser-based blocking instead.

11.5. Google Services
We use the services, described below, of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, U.S. (Google). Your information is processed by Google in the U.S. Basic information concerning your personal information, as processed by Google, can be found here: https://policies.google.com/privacy?hl=en. Google provides you with the following ways to control the information it collects:

  • Ad Settings helps you control ads you see on non-Google websites and apps that use Google ad services. You can also learn how ads are personalized, opt out of ad personalization, and block specific advertisers.
  • If you are signed in to your Google Account, and depending on your Account settings, My Activity allows you to review and control data that’s created when you use Google services, including the information it collects from the sites and apps you have visited. You can browse by date and by topic, and delete part or all of your activity.
  • Many websites and apps use Google Analytics to understand how visitors engage with their sites or apps. If you don’t want Analytics to be used in your browser, you can install the Google Analytics browser add-on. Learn more about Google Analytics and privacy.
  • Incognito mode in Chrome allows you to browse the web without recording webpages and files in your browser or Account history (unless you choose to sign in). Cookies are deleted after you’ve closed all of your incognito windows and tabs, and your bookmarks and settings are stored until you delete them. Learn more about cookies.
  • Many browsers, including Chrome, allow you to block third-party cookies. You can also clear any existing cookies from within your browser. Learn more about managing cookies in Chrome.

Google Analytics

We use Google Analytics, including Google Analytics for Firebase, to understand how users interact with our services and improve their experience. Google Analytics uses cookies to collect data about your usage, including your truncated IP address. This information is sent to and stored on Google servers. We also use Google Analytics’ User-ID feature, which helps track user behavior across multiple devices and sessions. When you log in, your User ID is shared with Google to identify your interactions over time. Google Analytics collects both standard events (e.g., the page you came from) and custom events (e.g., clicking a specific button or link). Google uses this data to generate usage reports and insights for us. Google may combine this information with other data it holds, such as your search history, Google account activity, and usage across other devices. In some cases, Google may share this data with third parties, either to comply with legal obligations or if those third parties process data on Google’s behalf.

The information logged with Google Analytics is stored for two years. Once this time period has lapsed, only aggregated statistics will be retained by Google Analytics.

You can deactivate Google Analytics on our websites through an opt-out browser add-on.

Google Firebase

We use Google Firebase, a cloud-based platform that provides certain backend services for mobile applications, such as in-app messaging, notifications, analytics, performance monitoring, A/B testing, dynamic links (links that take you to a particular location in our applications), crash reporting, remote configuration, and behavior predictions using machine learning. To enable these services, we share certain data with Google, including installation IDs and UUIDs, mobile ad IDs, Apple and Android IDs, analytics app instance IDs, mobile ad IDs, IP addresses, device specifications, and crash data.

The information obtained using Firebase is stored for up to 14 months.

Google Marketing Platform

We use the Google Marketing Platform. This cookie platform enables Google and its partners to serve ads to you based on your visit to our websites and/or other sites on the internet. Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are signed into a Google account, this activity may be linked to your account. Even if you do not have a Google account or are not signed in, Google may connect this information to your IP address.

This platform also supports conversion tracking, helping us to understand whether you take certain actions on our websites after interacting with one of our ads on Google or another platform.

For more information on the Google Marketing Platform, please visit https://marketingplatform.google.com/. Please visit Google and use Ads Settings to set your preferences. The website https://optout.aboutads.info/ offers a single place to turn off targeted ad serving from any of its members.

Google reCAPTCHA

We use this tool on some cache pages and during signup to protect our services from abusive bots and spam. Types of data collected include:

  • Referrer URL
  • IP Address
  • Operating system information
  • Cookies
  • Mouse and keyboard behavior
  • Date and language settings
  • JavaScript objects
  • Screen resolution

This data is stored by Google. To minimize data sent by reCAPTCHA, you can also delete your history and cookies from your browser.

11.6. Hotjar
We use Hotjar of Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta (Hotjar).

Your information is processed by Hotjar in the U.S. We use Hotjar to better understand user behavior (e.g., time spent on pages, clicks, etc.) and improve our services based on user feedback. Hotjar uses cookies and other technologies to collect information about your device and usage (including IP address, screen size, device type, unique device identifiers, browser information, country-level location, preferred language). Hotjar stores this information in a pseudonymized user profile and is not linked to any other personal information by us or Hotjar. For additional details, please see the information provided by Hotjar.

The information collected is stored for up to 365 days.

You can opt-out of the creation of a user profile, Hotjar’s storing of personal information about your usage of our websites, and Hotjar’s use of tracking cookies on other websites on the HotJar website.

You can prevent Hotjar from collecting your information generated by the cookie and related to your use of the website, as well as the processing of this information by following Hotjar’s guide here: https://www.hotjar.com/legal/policies/do-not-track/.

11.7. Microsoft Azure Application Insights
We use the service Microsoft Azure Application Insights of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, U.S. Your information is processed by Microsoft in the U.S.

Microsoft Azure Application Insights collects mobile application performance data, and in some cases usernames, to help us diagnose problems and understand how you are using our apps.

The information collected are stored for up to 30 days.

11.8. Meta Pixel
We use the Meta Pixel from Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025\. When you navigate to one of our websites, or view an ad from our website, your browser downloads a pixel. That action triggers a request from the Meta Pixel server, providing Meta with information about your visits to our websites. Meta may use information collected through Meta Pixel to provide targeted ads on Facebook and other sites and to provide measurement services. You can learn more by visiting Meta’s Privacy Policy and can control the information shared about you by changing your Meta ad preferences.

Navigate to Settings/Adverts in your Facebook account to adjust your preferences. Learn more about the different types of Facebook cookies here: www.facebook.com/policies/cookies/

12. CHANGES TO THIS PRIVACY POLICY
We may amend this privacy policy from time to time. When we post changes to this privacy policy, we will revise the “last updated” date at the top of this page. Please review this privacy policy periodically to be informed of how we use and protect your information. If we have your email address, we may also email you with information on those changes.
13. CROSS-BORDER DATA TRANSFERS
If you access our services from Europe, then the personal information that you provide to us, or that we collect about you, will in most cases be processed and stored in the U.S. In order to ensure your personal information is protected, we comply with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the applicable DPF Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

We will offer you the opportunity to choose (opt-out) whether your data is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by you. You may opt-out of such uses of your personal data by contacting us in the How to contact us section or by using our web form.

We will not use sensitive personal data for a purpose other than the purpose for which it was originally collected, or subsequently authorized by you, without first receiving your affirmative and explicit consent (opt-in). We will treat as sensitive any personal data received from a third party where the third party identifies and treats it as sensitive.

Please see the section above called Disclosure of Personal Information for more information about the types of third-parties to whom we may transfer your data. Our accountability for personal data that we receive under one of the DPFs and subsequently transfer to a third party is described in the DPF Principles. In particular, we remain responsible and liable under the DPF Principles if third-party agents that we engage to process the personal data on our behalf do so in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage. For data received under one of the DPFs, we will obtain appropriate assurances from applicable third-parties that they will safeguard it consistent with this privacy policy.

We will take reasonable and appropriate precautions to protect personal data in our possession from loss, misuse and unauthorized access, disclosure, alteration, and destruction.

We will use personal data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by you. We will take reasonable steps to ensure that personal data is relevant to its intended use, accurate, complete, and current.

Pursuant to the Data Privacy Frameworks, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. If you want access, or want to correct, amend, or delete inaccurate data transferred to the United States under the Data Privacy Frameworks, please contact us using the contact details set out in the How to Contact Us section. If requested to remove data, we will respond within a reasonable timeframe.

Recourse, Enforcement, and Liability

In compliance with the EU-US Data Privacy Framework Principles and the Swiss-US DPF, we commit to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. EU, UK, or Swiss individuals with DPF inquiries or complaints should first contact us in the How to contact us section or by using our web form.

We have further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

We are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

We will conduct compliance audits of our relevant privacy practices to verify adherence to the DPF. Any employee that we determine is in violation of this policy may be subject to disciplinary action.

13.1. Limitations
We may be required to disclose your personal data in response to a lawful request by public authorities or in connection with a legal obligation. Our compliance with the DPF Principles may also be limited to the extent necessary to meet national security, public interest or law enforcement obligations, and to the extent expressly permitted by an applicable law, rule or regulation.
14. CALIFORNIA PRIVACY NOTICE
The California Consumer Privacy Act (CCPA) provides California consumers with rights relating to their personal information. If you are a California resident, this section applies to you.

14.1. Right to Know
You have the right to request that we disclose certain information to you about our collection and use of your personal information, including information about the source of our information, the purposes for which we collect it, and the third parties, contractors, and service providers to whom we disclose it. To protect your personal information, we are required to verify your identity before we can act on your request.
14.2. Right to Delete
You have the right to request that we delete any personal information that we have collected directly from you, unless an exception applies. To protect your personal information, we are required to verify your identity before we can act on your request. We may have a reason under the law why we may deny your request or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
14.3. Right to Opt Out of Sale or Sharing of Personal Information
You have the right to opt out of any sale or sharing of your personal information by Groundspeak to third parties. If you are a California resident, to exercise this right, please visit our Do Not Sell My Info page on the Geocaching.com website or in our mobile application settings. You may also broadcast an opt-out preference signal, such as the Global Privacy Control (GPC) on the browsers and/or browser extensions that support such a signal. Your request to opt-out using an opt-out signal will be linked to your browser identifier. Please note that your right to opt out does not apply to our sharing of personal information with our service providers or contractors, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.
14.4. Right to Correct
You have the right to request the correction of any inaccuracies in your personal information. To protect your personal information, we are required to verify your identity before we can act on your request. We may deny your request or comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
14.5. How to Submit a Request
To make a request to exercise one of your rights, please contact us at the address in the How to contact us section or by using our web form.
14.6. Categories of Personal Information That We Collect
Within the last 12 months, we have collected the following categories of personal information:

  • Identifiers – including your name, email address, contact address, username, IP address, device ID, and an ID number assigned to your account
  • Other personal information – including your phone number and billing address
  • Characteristics of protected classifications – your race or ethnicity (if you apply for a job with us) and your age
  • Commercial information – including your purchases and purchase history or tendencies
  • Internet or other electronic network activity information – including your browsing history, search history, and how you interact with our websites, applications, or advertisements
  • Geolocation data – inferred from your IP address, home GPS coordinates (if you provide them)
  • Audio and visual information – records of phone or video calls between you and us
  • Professional or employment-related information – if you apply for a job with us
  • Inferences drawn from the above information about your preferences, predispositions, and behavior in relation to our websites and apps

For more detailed information about the types of data included in these categories, please see the Categories of Personal Information section above. We do not use or disclose your sensitive personal information for any purpose other than what you would reasonably expect and do not use it to make any inferences about you.

We obtain the categories of personal information listed above from the following categories of sources:

  • Directly or indirectly from you: such as when you create an account, from your game play, or from your correspondence with us
  • Using cookies, pixels, and other automatic data collection technologies: for example, from observing your actions on our websites or apps, including by the use of cookies or from third parties such as analytics providers
  • The device you use to access our services
14.7. Purpose of Collection
We use the categories of personal information listed above for a number of purposes, which are more specifically explained in the Use of Personal Information section above.
14.8. Disclosure of Data to External Parties
We may disclose the above-listed information with our service providers and contractors, which are external parties that we engage for business purposes. Our service providers and contractors are prohibited from using Personal Information for any purpose that is not related to our engagement. The categories of service providers and contractors to whom we may disclose your information and the services they provide are described in the section above called Disclosure of Personal Information.

We do not sell your personal information as the term sell is traditionally understood. However, our use of tracking technologies and collaboration with our Authorized Developers may be considered sharing or a sale under the CCPA. We sell or share the following information:

Personal Identifiers. We provide your IP address and Device ID to our advertising partners. We also provide certain geocaching account and game activity information to our Authorized Developers, as described further in our privacy policy, for the purpose of creating geocaching applications and websites. This information includes your username, your avatar pictures, images, geocache and trackable logs. You can opt out of sharing your information with Authorized Developers in your account Settings.

Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics. Cookies dropped on your browser may collect observations about you that are shared to our advertising partners. You can opt out of advertising cookies using the tools on our site, by implementing an opt-out preference signal, or by visiting Google and using “Ads Settings” to set your preferences. The website https://optout.aboutads.info/ offers a single place to turn off targeted ads serving from any of its members.

We do not knowingly sell or share the personal information of minors under 16 years of age without legally-required affirmative authorization from the parent or guardian who owns and manages the account.

14.9. Data Retention
We generally keep your personal information for as long as needed to ensure the integrity of the game and the enjoyment of the game by other players. For more information, please see the Storage of Your Personal Information section above.
14.10. Non-Discrimination
We do not discriminate against California residents who exercise any of their rights under the CCPA.
15. NEVADA PRIVACY NOTICE
If you reside in Nevada, our use of your information is governed by Nevada law. This section applies only to Nevada residents.

15.1. Personal Information Collected and Purposes of Use
We collect certain personal information of Nevada consumers as identified in the section above called: Categories of Personal Information. We collect this personal information for the purposes identified in the section above called Use of Personal Information.
15.2. Your Privacy Rights
You have the right to access and correct your personal information and to opt-out of its sale. To review, correct, or update your information, you or your authorized representative may submit a request via email. We will respond to verified requests as soon as reasonably practicable, but no later than 60 days.

If a delay occurs, we will notify you promptly and provide a new response date.

We generally do not disclose or share personal information for profit. However, under Nevada law, you may direct us to not sell or license your personal information to third parties. To exercise this right, if applicable, please submit a request via email. The same response timeframe and notification process applies.

16. HOW TO CONTACT US
If you have any privacy questions, the best and fastest way to contact us is through our Help Center form. You may also contact us by any of the means provided on our contact page, including writing to us at: Geocaching HQ, 837 N. 34th Street, Suite 300, Seattle, WA 98103. For specific requests regarding your Shop Geocaching (shop.geocaching.com) profile, please email Shop Geocaching directly.

We aim to respond to all legitimate requests within one month. If needed, we may contact you for additional information (e.g., to confirm your identity, or to better understand, and respond to your request.

If you live in the EU: We are located in the U.S. However, we have an EU-based data protection officer and EU-based representative who you may contact as follows:

Our EU Data Protection Officer:

Email: [email protected]

Address: Data Protection Officer, Geocaching, Innere Kanalstr. 15 50823 Cologne, Germany

Our EU-based representative:

Email: [email protected]

Address: MCF Legal Technology Solutions Limited, ATTN: Groundspeak, Inc. DBA Geocaching EU Representative, Riverside One, Sir John Rogerson’s Quay, Dublin 2, D02 X576

If you live in the UK: We are not located in the United Kingdom, so we have appointed a UK-based representative to serve as a direct contact on our behalf, who can be contacted at:

Email: [email protected]

Address: MCF Legal Technology Solutions (UK) Limited, Tower 42 Level 38C, 25 Old Broad St, Cornhill, London EC2N 1HQ, United Kingdom.

If you live in California: If you would like to exercise your rights under the CCPA, you or your authorized agent can contact us using the address above or our web form. If you’re using an authorized agent, we may ask for proof that you’ve granted them power of attorney or other valid signed authorization to act on your behalf. We may also require you to verify your identity directly with us.