Privacy policy
CityPin USA is a free daily US map game by Xaplore LLC. This page explains, in plain words, what is stored when you play, why, and how to delete it. Effective October 24, 2026.
Short version: you never need an account to play, and your progress stays in your browser. If you choose to sign in with Google, you join the daily and all-time leaderboards: we store a hashed account ID, the display name you see on the board, and your daily scores. We never store your email, full name, surname or photo, and you can delete your leaderboard data at any time.
Playing as a guest
Your progress for each day (your guesses and scores) and your language choice are saved only in your browser's local storage on your device. Clearing your browser data, or private browsing, removes them. Guests never load the Google sign-in script and never contact our leaderboard server for sign-in or scores.
The game sends one anonymous play count per page load, and one anonymous share count when you press Share and the result is shared or copied (only that a share happened, never what or where; no cookies, no identifiers), as described in the Xaplore privacy policy.
Map images load from Esri (ArcGIS Online), so your browser connects to Esri, which sees your IP address and which map areas are requested. Your guesses and scores are not sent to Esri.
If you sign in with Google
Signing in is optional, Google is the only option, and it is used only for the leaderboards. Google's sign-in script loads only when you open the sign-in panel. Sign-in is not offered inside the itch.io embed; open citypin.xaplore.dev to sign in.
When you finish today's (or yesterday's) challenge while signed in, the game sends your five guesses so our server can recompute your score with the same rules as the game. The guesses themselves are not stored. Our server checks Google's sign-in token (its signature, that it was issued for this game, and that it has not expired) and then stores only:
- Account ID: a one-way SHA-256 hash of your Google account ID (not the ID itself), plus when the account was created and last used.
- Display name: by default your given name and last initial (for example "Guangya L."). You can change it to any nickname of 2–20 characters. It is never your email or your full surname.
- Scores: for each day you finish while signed in, your total score for that day and the time it reached our server (used to break ties). Only the first completed result for each day counts.
- Session: a hash of a random session token, kept for 60 days. The token itself lives in an HttpOnly cookie named
cp_sthat is sent only to this game's/apiand is used only to keep you signed in. - Abuse limits: short-lived counters keyed by a hash of your IP address or account, deleted within about a day.
Not stored: your email address, full name, surname and profile picture.
Public: your display name, daily score and rank, all-time total and number of days played are visible to anyone who views the leaderboard.
How we use it
Only to show the leaderboards and keep you signed in. No ads, no selling or sharing of data, no profiling, and no analytics tied to your account.
Who processes it
- Vercel hosts the game and forwards
/apirequests to the leaderboard service. - Cloudflare runs the leaderboard service (Workers) and the database (D1) that holds the data above.
- Google provides sign-in. We receive the sign-in token only when you sign in. Google's own privacy policy applies to your Google account.
Like any network provider, these services may keep short-lived request logs that include IP address and browser type.
How long we keep it
- Sessions expire after 60 days.
- An account and all its scores are deleted automatically after 2 years (730 days) without use.
Deleting your data
Open the account menu in the game's header and choose Delete my leaderboard data. This immediately deletes your account and every score, and signs you out on every device. The progress in your current browser stays unless you clear it yourself. You can also email support@xaplore.dev. Sign out only ends the session; your scores stay on the board.
Children
CityPin USA is not directed at children under 13. If you are under 13, please play as a guest and do not sign in.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
support@xaplore.dev · xaplore.dev · Xaplore LLC, North Carolina, USA
隐私政策
城市定位挑战 CityPin USA 是 Xaplore LLC 出品的免费每日美国地图小游戏。本页用平实的话说明：玩游戏时保存了什么、为什么保存、怎样删除。生效日期：2026 年 10 月 24 日。
简单说：玩游戏永远不需要账号，进度只保存在你的浏览器里。如果你自愿用 Google 账号登录，就会加入每日榜和总榜：我们保存一个哈希后的账号编号、排行榜上显示的昵称，以及你每天的分数。我们从不保存你的邮箱、全名、姓氏或头像，你也可以随时删除排行榜数据。
以游客身份游玩
你每天的进度（落点和分数）和语言设置只保存在这台设备浏览器的本地存储里。清除浏览器数据或使用无痕模式会让它消失。游客不会加载 Google 登录脚本，也不会为登录或分数访问我们的排行榜服务器。
游戏每次打开页面时会发送一次匿名的游玩计数；当你点“分享”并成功分享或复制成绩时，还会发送一次匿名的分享计数（只记录发生了一次分享，不含分享内容或分享到哪里；不用 Cookie、不带任何标识），详见 Xaplore 隐私政策。
地图图片来自 Esri（ArcGIS Online），因此你的浏览器会连接 Esri，Esri 会看到你的 IP 地址和请求了哪些地图区域。你的落点和分数不会发送给 Esri。
如果你用 Google 登录
登录是可选的，目前只支持 Google，而且只用于排行榜。只有你打开登录面板时才会加载 Google 登录脚本。在 itch.io 的嵌入页面里不提供登录，请打开 citypin.xaplore.dev 登录。
登录状态下完成今天（或昨天）的挑战时，游戏会把你的 5 个落点发送给服务器，由服务器按和游戏相同的规则重新计算分数。落点本身不会保存。我们的服务器核验 Google 的登录凭证（签名、是否发给本游戏、是否过期）后，只保存：
- 账号编号：你的 Google 账号 ID 经单向 SHA-256 哈希后的值（不保存 ID 本身），以及账号的创建时间和最近使用时间。
- 昵称：默认是你的名字加姓氏首字母（例如“Guangya L.”）。你可以改成任意 2–20 个字符的昵称。它绝不会是你的邮箱或完整的姓氏。
- 分数：登录状态下完成的每一天，当天的总分和分数到达服务器的时间（用于同分时排名）。每天只计第一次完成的成绩。
- 登录会话：一个随机会话令牌的哈希值，保存 60 天。令牌本身放在名为
cp_s的 HttpOnly Cookie 里，只发送给本游戏的/api，只用来保持登录。 - 防滥用计数：以 IP 地址或账号的哈希值为键的短期计数器，大约一天内删除。
不保存：你的邮箱地址、全名、姓氏和头像。
公开内容：你的昵称、每日分数和名次、累计总分以及参与天数，任何查看排行榜的人都能看到。
我们怎样使用这些数据
只用来显示排行榜和保持登录。没有广告，不出售或分享数据，不做用户画像，也没有与账号关联的统计分析。
由谁处理
- Vercel：托管游戏网页，并把
/api请求转发给排行榜服务。 - Cloudflare：运行排行榜服务（Workers）和保存上述数据的数据库（D1）。
- Google：提供登录。只有你登录时我们才会收到登录凭证。你的 Google 账号适用 Google 自己的隐私政策。
和所有网络服务一样，这些服务商可能会短期保留包含 IP 地址和浏览器类型的访问日志。
保存多久
- 登录会话 60 天后过期。
- 连续 2 年（730 天）没有使用的账号及其全部分数会被自动删除。
删除你的数据
打开游戏顶部的账号菜单，选择删除我的排行榜数据。这会立即删除你的账号和全部分数，并在所有设备上退出登录。当前浏览器里的进度会保留，除非你自己清除。也可以发邮件到 support@xaplore.dev。退出登录只结束会话，你的分数仍会留在排行榜上。
儿童
本游戏不面向 13 岁以下儿童。如果你未满 13 岁，请以游客身份游玩，不要登录。
变更
本政策如有变更，新版本会发布在本页并注明新的生效日期。
联系我们
support@xaplore.dev · xaplore.dev · Xaplore LLC，美国北卡罗来纳州