Atlas Pins

Five cities, five pins. How close can you get?

Privacy

Who runs this game

, .

Stored on your device

The puzzle you are playing (your pins so far), today's result, your average miss for your last seven puzzles, whether you bought no-ads, and your answers to the age and counting questions — kept so the game works and so we do not ask again. If you start or join a duel we keep your chosen name and up to three duels’ names and daily totals, removing each expired duel and any unneeded name when the game next runs after seven days beyond its last day. Duel links contain readable names and scores; the fragment is excluded from the game-page HTTP request, but your messaging service and anyone receiving or forwarding the link can access it. Clearing your browser removes them. Results are also sent when you enter the leaderboards.

What we count, only if you say yes

Daily tallies — — tagged with the week you started, days since your first game (in bands), and the kind of link that brought you (for example "a games forum", or "shared by a friend"). Also: that this device finished its first puzzle; whether it came back 24–48 hours and 168–192 hours after that; which test weeks it finished a puzzle in, and whether on three different days; that it played, finished a round or shared at least once; and whether it saw the pack, bought it, and played in a test month. Links shared from the game carry the kind of link and a test-group mark. If you agree after opening such a link, we count whether you finish a puzzle within a week of agreeing — only as a total for each kind of link; the link carries no name. A total for a small group can still relate to the few people in it, so before anything is published, totals that could rest on fewer than 50 devices are merged with others or held back; this lowers what the published figures could show about a few people, but does not rule it out. To work these out, your device keeps, after you say yes and not before: the time of its first finished puzzle, the time you agreed if you came through a shared link, which test groups it falls in (whether it can be followed for a day, for a week, or for sharing), short codes from our server (below), which reports it has sent and when it last tried each. To make sure a "came back" is counted only for a device whose first report arrived, our server answers some reports straight away with a short code that is the same for everyone sending the same thing; your device keeps it and sends it back with the later report. If that answer does not arrive, the report is sent again on a later visit, and our server counts such repeats. It also counts the reports it refuses: those from browsers that describe themselves as automated, and those that arrive without a matching code. Your browser's self-description is read by our code when a report arrives, to refuse automated traffic, and our code does not keep it (what the host itself records is below). Why: to learn whether the game is worth building on. Sent to while you play — the reports answered with a code, and each "came back", "three days" and "finished within a week" report at the finish it rests on — and the daily tallies when you leave the page, or on your next visit if the page closed first (a count made in the moment before the page closed can be lost); added into totals on arrival; our code stores no separate report, but host history can reveal report changes and times. keeps that history of the database at all times and lets its customers restore the database to a moment up to 30 days back; nobody opens or restores it. On the release day the database is closed to all new counts, then read once, the totals merged into coarser tables, and the database emptied. We delete the database 31 days after its final emptying, when documented customer restoration cannot reach before that emptying. This does not establish erasure of everything the provider retains. The merged tables are kept until , then emptied, and their database is deleted 31 days after that; the published figures are kept after that. EU/UK legal basis: your consent. Nothing is sent after the test ends. The game then tries to delete the tally on your device the next time it runs: usually within a minute if the game is open and your browser lets it run, otherwise the next time you open it; if your browser refuses the deletion, the tally stays until you clear this site's data in your browser. Stop at any time with "Stop counting", which stops sending and tries to delete the tally on this device; the game tells you if your browser does not delete it or does not save your answer. Your other open tabs of this site stop too, once they see the saved answer, or, if it was not saved, by a message from this tab; if your browser can do neither, the game tells you to close them. Clearing this site's data in your browser removes the tally and your answer, and nothing is counted unless you say yes again. Stopping cannot take out what was already sent: it is already added into the totals, and into the host's history until that database is deleted.

The leaderboards, only if you join

Offered only if you said you are 16 or older, and only after you finish today's puzzle and choose "Put my name on". You give a nickname and an email. A nickname is fine; your full name is not needed. Your nickname and scores are public; your email is never shown. Email is required to check address ownership, manage your entry and contact you if you win. One address holds one nickname; this does not prove one person has only one entry. Nothing goes on the leaderboards until you open a link we email to that address. Until then our server keeps what you sent (the nickname, the email, the words you agreed to, a news yes if you ticked it, a scrambled form of this device's code, and today's game) with a deadline 30 days after you sent it; the link works once, and if it is never opened all of that is deleted at the first daily clear-out after the deadline. This page gives every address the same answer, whether or not it is already on the leaderboards; only the email says which. To send at most one email to an address in 10 minutes, our server keeps a scrambled form of the address for at least 10 minutes; it is deleted by the next sign-up after that, from anyone, or else by the daily clear-out (it runs with the first leaderboard request of each day, UTC time), so on a quiet site it can stay longer than a day. The link email is sent through , which receives the address to deliver it. Another device joins a nickname already on the same way, by a link emailed to its address. If you also tick "Email me the weekly winners", we keep that yes separately, with the exact words you were shown and the time, until you unsubscribe or leave; no weekly-winners mail is sent before we choose how to send it, and the first one asks you to confirm. This device keeps a random code, your nickname once the link is opened (never your email), and the result of today's entry. Our server keeps a scrambled form of the code (a one-way hash, never the code itself), your nickname and email, the words you agreed to and when, and for each game you enter: the day, where you put each pin, the score and kilometres off it works out, how long each city took, and whether the game is on the leaderboards, the time it reached us (used to break ties) and which device sent it; also that you said you are 16 or older and when each device was added. The code joins your games up from day to day, so it is an online identifier, and we treat it and everything kept with it as personal information. Anyone can see your nickname, places, scores, kilometres off and days played on the leaderboards; people who know you may recognise your nickname. Why: to run the leaderboards, to check that an address is yours, to check a line that looks wrong (we may take a line off by hand), and to tell a winner. EU/UK legal basis: your consent, given by joining; leaving withdraws it. The leaderboards have their own server and database, apart from the counting: the code is never sent with a count, and no count is sent with an entry. To limit how many entries one place can send, our server counts what each internet address sends to the leaderboards (entries, sign-ups and opened links) in whole minutes. For each minute it keeps only the minute, the count and a scrambled form of the address mixed with the minute (a one-way hash: the same address looks different in each minute, though someone holding the database could test a guessed address). A count is deleted when the next of these arrives, from anywhere, two or more whole minutes later, or else by the daily clear-out, so on a quiet site a count can stay longer than a day. Each game entered is deleted by the daily clear-out from 1 February after its year ends; your nickname, email and news yes are deleted at the first daily clear-out after 13 months without a new game, if you have not left before. "Leave the leaderboards", on the leaderboards or just below, deletes your nickname, email, games, news yes, any unopened link asked for on this device and, once you are on, any asked for with your address, from the leaderboards' database at once, and the code and nickname on this device. We try to remove the device code and tell you if your browser refuses. Newly fetched lists may show your entry for up to two minutes; an already-open page may retain it until refreshed. As with the counts, keeps a history of the leaderboards' database and lets its customers restore it to an earlier moment, up to 30 days back, depending on plan; nobody opens or restores it, so deleted details can stay in that history for up to 30 days, depending on plan. This does not establish erasure of everything the provider retains. If you no longer have the device you played on, write to us from the email you joined with and we delete your entry.

Your internet address

It reaches (and its delivery network) with every request, as for any website. To count page views and visits, this page also sends a short note that it was opened, using its free page counter, which uses no cookies and stores nothing on your device. Legal basis in the EU/UK for that logging: running and securing the site (legitimate interests).

Ads

shows the ads; it may store and read information on your device and use your internet address to choose, limit and count ads, under its own privacy policy. You are asked first. Where its data goes: .

Buying

; it receives your card details and email. We use that only for your receipt, refunds and questions, and keep it .

Where your data is handled

— outside Australia and possibly outside your country.

Children

The game is made for teens and adults, and children may still play. Before we ask to count anything, we ask your age. If you say you are under 16, or do not answer, nothing is counted. We cannot check the answer, so our figures describe players who said they were 16 or older. The same answer decides the leaderboards: they are never offered to "under 16" or no answer.

Your rights

To ask what we hold about you, to have it corrected or deleted, to withdraw consent at any time, and to complain to us, then to the Australian privacy regulator (OAIC), or in the EU/UK to your data-protection authority. With counts kept only as totals, we may be unable to find one person's share in them; we say so if asked. For the leaderboards, "Leave the leaderboards" on the device you played on deletes your name, email, games and news yes at once; without that device, write to us from the email you joined with.

Questions or complaints

.