Privacy policy
Beta version. Last updated 24 October 2026.
This policy covers the Guess the Coaster beta (the iPhone app you install through Apple's TestFlight) and this website. Guess the Coaster is made by Ashwin Posthumus, an individual developer in California, USA. You can reach me at [email protected].
The beta has fewer features than the finished app will. Before friends, crews, duels or a paid membership arrive, this policy will be updated to cover them.
The short version
- You can play as a guest without giving any personal details.
- If you add an email, it's used only to sign you in. Other players never see it.
- No ads, no tracking across other apps or websites, no selling of data, and no analytics or advertising tools in the app.
- You can delete your account and all your game data inside the app at any time.
- Update emails are optional. If you sign up, we use your email only for those, and every one has an unsubscribe link.
1. What the app stores, and why
If you play as a guest
- A random account ID, created when you tap "Play as guest", so the server can keep your streak and results. It doesn't say who you are.
- A guest username made up automatically, like
guest_3fa9. - Your time zone (for example "America/New_York"), read from your phone's settings, so the daily puzzle changes at your midnight. The app doesn't use your location.
- Your game data (below).
If you sign in with an email
- Everything above, plus your email address, used to send you one-time sign-in codes and to recognise you, and the username you choose.
Game data
- Your puzzle rounds: the coasters you guessed, what each guess revealed, whether you solved it, how many guesses and hints you used, and when you started and finished.
- Your XP, level, streak, best streak and streak freezes.
- Past puzzles you played from the archive.
- Coasters you marked as ridden, and the month and year of your first ride if you added one.
On this website
The website has no analytics, no advertising and no tracking, and its fonts are served from this site rather than a third party. Our host keeps standard server logs (such as IP addresses) to run and protect the site. The sign-up form on the beta page uses a spam check from Cloudflare (section 2).
When you contact us
If you email support, we receive your email address and what you write, and use them only to reply.
What we don't collect
No location from location services, no contacts, photos or microphone, no advertising identifiers, no browsing history, and no analytics or crash-reporting tools of our own.
2. Update emails (optional)
You can ask for occasional emails about Guess the Coaster on the beta page. It's optional and separate from playing: the beta works the same whether you sign up or not.
- What we keep: your email address, your first name if you give it, your answer to "Where did you hear about it?", which phone you use (iPhone or Android) if you tell us, the exact wording you agreed to, and when you signed up and confirmed.
- Why: to send the updates you asked for (new features, when duels reach beta testers, the App Store launch), about once a month. Your first name is only used to say hello in those emails. We don't use your email address for anything else.
- Confirming first: we send one email with a link. You're not on the list until you tap it, and if you don't, we delete the sign-up after 7 days.
- Stopping: every update email has an unsubscribe link that works straight away. You can also email us to be taken off the list, or to have your sign-up deleted completely.
- Spam protection: the form uses Cloudflare Turnstile, which checks that a person, not a bot, is filling it in. To do that, Cloudflare processes your IP address and some details about your browser; Cloudflare says it doesn't use them to identify, profile or target anyone. Our server also keeps a scrambled (hashed) version of your IP address for up to 2 days, only to stop one connection signing up again and again.
- How long: until you unsubscribe or ask us to delete it. After you unsubscribe, our email provider keeps your address marked as unsubscribed so you're never emailed again, and we keep the record of what you agreed to and when. Email us if you'd like those deleted too.
3. TestFlight
The beta is delivered through Apple's TestFlight. Apple may share with us information about how the beta runs on your device, such as crash reports, device model and iOS version, and any feedback or screenshots you choose to send through TestFlight. Apple's own privacy policy covers what Apple collects.
4. What other players can see
In the beta there are no friends, crews or leaderboards, so the app doesn't show your profile to anyone else. When those features arrive, other players will see things like your username, level and streak, and this policy will say exactly what before they ship. Your email address and time zone will never be shown to other players.
5. Who helps us run it
These companies process data for us, only as needed to provide their service:
| Provider | What they do | What they handle |
|---|---|---|
| Supabase | Database, sign-in and server code | Everything in sections 1 and 2 |
| Apple | TestFlight and the App Store, and iCloud Mail for our support and contact email addresses | What's described in section 3, and emails you send to support@ or [email protected] |
| Resend | Sending sign-in codes, and update emails if you sign up for them | Your email address and the code; for update emails, also your first name if you gave one and whether you've unsubscribed |
| Cloudflare | Hosting this website and the spam check on the sign-up form (Turnstile) | Server logs, and for the spam check your IP address and browser details |
Links out: "Watch the POV" opens a YouTube search and the park button opens the park's own website. Those sites have their own privacy policies; we don't send them anything except opening the link. The ideas page links to our ideas board, run by Fider; if you post or vote there, Fider's privacy policy applies.
Reminders: the app's daily and streak reminders are scheduled on your phone itself, only if you turn them on. Nothing about them is sent from our servers, and you can turn them off in the app or in iOS Settings.
We don't sell or rent personal data, and we don't share it for advertising. We may disclose data if the law requires it, or to protect players and the service.
Where your data goes: Guess the Coaster is run from the United States. If you're outside the US, your data is transferred to the US and to wherever these providers run their services.
6. Why we're allowed to use it
For players in the UK, the EU and similar places: we use your data to provide the game you asked for (your account, progress and puzzles), and for our legitimate interest in keeping the game fair and working (for example, scoring every round on our server so nobody can cheat). Update emails are sent only with your consent, which you can withdraw at any time by unsubscribing; the spam check on the sign-up form is our legitimate interest in keeping bots out.
7. How long we keep it
- Until you delete your account or guest data. Deleting removes your profile and all of your game data.
- We don't keep separate backups of the beta database, so deleted data is gone straight away.
- Beta data may be reset before the App Store launch. If we do that, we'll say so in the app and on this site first.
- Support emails: as long as needed to help you, then deleted.
- Update emails: see section 2.
8. Your choices
- Delete everything: in the app, Profile, then Delete account (guests: Delete my data). It happens straight away.
- Stop update emails: the unsubscribe link in any update email.
- Ask us for a copy of your data, a correction, or deletion: [email protected].
- If you're in the EU or UK, you can also complain to your local data protection authority.
9. Children
Guess the Coaster isn't directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child under 13 has given us an email address, write to us and we'll delete the account.
10. Security
Answers and scores are worked out on our server, access rules are enforced in the database for every table, and we keep only what the game needs. No system is perfectly secure; if a breach affected you, we'd tell you as the law requires.
11. Changes
If this policy changes, the date at the top changes too. Important changes will also be announced in the app.