Last updated: 8 July 2026
This policy explains what personal data Complete the Map (completethemap.co.uk) collects, why we collect it, who we share it with, and the rights you have under the UK GDPR and the Data Protection Act 2018.
Complete the Map is a free geography quiz game operated by Callum Cleary (“we”, “us”, “our”). We are the data controller for the personal data described in this policy, except for pupil and class data managed by schools, where the school is the controller and we act as its processor (see section 4).
You can reach us about privacy at privacy@completethemap.co.uk.
What we hold depends on how you use the game.
You can play any quiz without signing in. When you play without an account, your chosen name and your personal best scores are stored only in your own browser (see Cookies & local storage) and are never sent to us.
Like any website, our hosting and CDN providers automatically process limited technical data (such as your IP address, browser type and the time of your request) to deliver the site and keep it secure. We do not use this to identify or profile you.
If you create an account to post to the public global leaderboard, we collect:
| Data | Why |
|---|---|
| Email address | To create and sign in to your account and send account emails (confirmation, password reset). |
| Password | To secure your account. It is stored in a hashed (irreversible) form by our authentication provider and is not visible to us or anyone else. |
| Display name | Shown next to your scores on the public leaderboard. |
| Scores (countries found, attempts, time, region, date) | To rank you on the leaderboard. |
Teachers create an account (email + password, as above) and may add a school name and class names. These let a teacher manage classes and view their class leaderboard.
Teachers create pupil logins for their classes. For each pupil we hold a username, a display name (usually a first name only), a class password, and the pupil’s scores (countries found, attempts, time, region, date). We deliberately ask for as little as possible: no email, no surname, no date of birth, and no contact details are required for a pupil. Pupil display names are shown on their own class leaderboard, visible to their class and teacher.
Pupil class passwords are simple passwords chosen by the teacher and are stored in a way that lets the teacher look them up again to hand them out to the class. They are not treated as secret personal credentials — please don’t reuse a password from anywhere else for a pupil login.
Under the UK GDPR we rely on the following legal bases:
Complete the Map is used by schools with children. We take this seriously and follow the principles of the ICO’s Age Appropriate Design Code: we minimise the data we collect, we do not profile or track children, we show no advertising, and pupil data is only visible within their class.
When a school or teacher uses Complete the Map to manage classes, the school is the data controller for its pupils’ data and Complete the Map is the data processor, acting on the school’s documented instructions. The school is responsible for having a lawful basis and, where appropriate, for informing pupils and parents. A teacher can add, edit or remove a pupil, and delete a whole class, at any time. Full details for schools — including our sub-processors and a Data Processing Agreement — are in our Schools & pupil data notice.
We do not sell your data or share it for advertising. We use a small number of trusted service providers (“processors”) who process data on our behalf under contract:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & account authentication (stores accounts, scores, class data) | EU (Ireland) |
| Netlify | Website hosting & content delivery (serves the game files) | Global CDN; company US-based |
| Resend | Sends account emails (sign-up confirmation, password reset) | US-based |
We may also disclose information if required to do so by law, or to protect the rights, safety or security of our users or the service.
Your account, score and class data is stored in a database hosted in the European Union (Ireland). Where a provider (such as Netlify or Resend) is based outside the UK/EU, any transfer is protected by an approved safeguard such as UK/EU Standard Contractual Clauses or an adequacy decision.
We protect data with encryption in transit (HTTPS), hashed account passwords, and database access rules that restrict each user to only their own data (for example, a teacher can only see their own classes). No system can be guaranteed 100% secure, but we take reasonable steps to keep your information safe.
Under the UK GDPR you have the right to:
To exercise any of these, email privacy@completethemap.co.uk. If you are a pupil or a parent, please contact your school or teacher first, as the school controls pupil data and can act on most requests directly (for example, correcting a name or removing an account). We will help the school where needed.
We do not use advertising or analytics cookies, and we do not track you across other websites. We use only a few strictly necessary items of local storage in your browser to make the game work:
| Name | Purpose |
|---|---|
ctm_profile | Remembers the name you chose to play under. |
ctm_bests | Remembers your personal best scores on this device. |
ctm_student_tok | Keeps a pupil signed in to their class login. |
ctm_pending_school | Temporarily remembers a chosen school while signing up. |
| Supabase auth token | Keeps a signed-in account holder logged in. |
Because these are essential to providing a service you have asked for, they do not require a consent banner. You can clear them at any time from your browser settings, or by signing out.
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top. Significant changes will be highlighted on the site.
For any privacy question or request, contact privacy@completethemap.co.uk.
If you are unhappy with how we have handled your data, you can complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first, so please do get in touch with us.