Privacy Policy

Guess What Country (“we”, “us”, “our”) is an independent geography entertainment and education project operated from Los Angeles, California, United States, published at guesswhatcountry.com and on the YouTube channel @tuchavin. We are the business responsible for — and, for visitors in the EEA or UK, the controller of — personal information processed through this website.

Privacy requests, questions and complaints: privacy@guesswhatcountry.com. Everything else: hello@guesswhatcountry.com. Postal contact is available on request to the privacy address above; we are based in Los Angeles County, California.

This policy is written to satisfy the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §§ 22575–22579) and the CCPA/CPRA (Cal. Civ. Code § 1798.100 et seq.).

You can browse episodes, country guides and the globe without giving us any personal information and without signing in. In the twelve months before the date at the top of this page we collected the categories below. We do not collect government identifiers, precise geolocation, biometric information, health information, or the contents of your private communications, and we do not collect sensitive personal information as defined by the CPRA.

Quiz play. Your guesses, streaks and revealed clues stay in your own browser's local storage. When you ask for an AI clue, the episode reference and the clue rung are sent to our AI provider so it can return a spoiler-free hint. Your name, email or account ID is not sent with that request.

We use personal information to operate, secure and improve the site and the admin portal; to authenticate team members and enforce roles; to send transactional email such as invitations, sign-in confirmations, password resets and review notifications; to import and analyse the channel's own YouTube data; to measure content performance in aggregate where you have consented; to detect and prevent fraud, abuse and security incidents; and to comply with law or to establish, exercise or defend legal claims.

For visitors in the EEA or UK, our legal bases are performance of a contract (accounts), consent (analytics and embedded media), legal obligation, and our legitimate interests in running a secure, useful site.

We have not sold personal information, and we have not shared personal information for cross-context behavioral advertising, in the preceding twelve months, and we do not do so now. We do not have actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not offer financial incentives in exchange for personal information, and we do not use your information for automated decision-making that produces legal or similarly significant effects.

We disclose personal information for business purposes only to vendors that process it on our written instructions and are contractually barred from using it for their own purposes: our application, database, authentication and hosting platform; our email delivery provider, which sends account and service email from notify.guesswhatcountry.com; Google LLC, for the YouTube Data API and YouTube embeds; and our AI provider, which generates clues, SEO drafts and content suggestions. We may also disclose information to comply with a subpoena, court order or lawful request, or in connection with a merger, acquisition or sale of assets, in which case we will note it here.

Video embeds load from the privacy-enhanced youtube-nocookie.com domain and only after you accept marketing/embed cookies. Once you press play, Google's Privacy Policy also applies. Where information is processed outside your country, transfers rely on standard contractual clauses or an equivalent safeguard.

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients;
• Delete personal information we collected from you, subject to legal exceptions such as security records we must keep;
• Correct inaccurate personal information;
• Opt out of sale or sharing — there is nothing to opt out of, because we do neither;
• Limit the use of sensitive personal information — we collect none;
• Not be discriminated or retaliated against for exercising any of these rights.

Submit a request by emailing privacy@guesswhatcountry.com with the subject line “California privacy request”. We verify requests by matching the request to the email address on file and, for account holders, by asking you to confirm from a signed-in session. An authorized agent may submit a request on your behalf with written permission that we can verify with you. We confirm receipt within 10 business days and respond within 45 days, extendable once by a further 45 days where reasonably necessary; we will tell you if we need the extension.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

Global Privacy Control. We honor the GPC signal and browser “Do Not Track” headers as a rejection of all non-essential storage; you can also change your choices at any time using cookie preferences or on our Cookie Policy.

Residents of other US states with comprehensive privacy laws, and visitors in the EEA, UK and Switzerland, may have equivalent rights of access, correction, deletion, portability, restriction and objection, plus the right to withdraw consent at any time. Use the same privacy address and we will apply the strongest right available to you. EEA and UK visitors may also complain to their local supervisory authority; we ask that you contact us first so we can put it right.

Access to the admin portal requires authentication and an assigned role. Database access is restricted by row-level security policies enforced per user, credentials and YouTube OAuth tokens are encrypted at rest, traffic is served over TLS, and security-relevant actions are written to an append-only activity log. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the California Attorney General as required by Cal. Civ. Code § 1798.82.

The site is suitable for a general audience but is not directed to children under 13, and we do not knowingly collect personal information from them, consistent with COPPA. Team accounts are limited to adults. If you believe a child has provided us personal information, email privacy@guesswhatcountry.com and we will delete it promptly.

We update this policy when our processing changes, and at least once every twelve months as the CCPA requires. Material changes are announced on this page with a revised effective date; continued use of the site after that date means you accept the updated policy. Your use of the site is also governed by our Terms of Service.