Privacy policy

Nowhere in Particular: the game, its browser player and this website. In force from 24 October 2026. Polska wersja.

In short: no account, no tracking, no ads, no analytics. What you do in the game stays on your computer. The game goes on the network only for the things listed below, when you use them. The support desk knows you only by a random id. You can download everything it has about you, or delete it, from the game: phone › Me › Your data on the server. Online: off in the settings keeps the game off the network entirely.

Who is responsible

The data controller is Michał Jaskólski, an individual developer in Poland, who makes the game. Contact about your data: [EMAIL]. There is no data protection officer: write to that address.

What stays on your computer

The game keeps these files on your computer and never sends them anywhere:

• your settings, how you look (your body, your skin's, hair's and clothes' colours) and your vehicles' paint;
• your camp, where you left it;
• the pictures you take, with the game's own EXIF tags (the place in the game world and the game's clock: the virtual spot, not yours);
• your achievements, the fitness app's walks and rides, and Mixtape's favourite stations;
• your Postcards conversations;
• your player id and its secret (below).

In the browser they are in the browser's storage. Delete my saves under the player deletes them, and Clear downloads deletes the engine, the game and the land the browser keeps. Uninstalling the game may leave these files in your user folder; delete the game's folder there to remove them.

What goes on the network, and when

The real weather

When you sync with the real world (K), and every 5 minutes while you keep it up to date (a setting), the game asks MET Norway for the forecast at the coordinates of the place you're driving in, never your own. MET Norway sees your IP address as any web server does. We receive nothing from it.

The browser player and this website

This website is plain pages hosted on GitHub Pages. GitHub sees your IP address and the pages you request, under the GitHub Privacy Statement. The browser player downloads the land around you from this site as you drive. There are no cookies, no analytics and no third-party scripts or fonts. The player keeps what it downloaded, your saves and the sound setting in your browser's own storage.

The trailer on the front page is our own picture until you press play. Only then does your browser load it from YouTube (youtube-nocookie.com, Google's player that sets no cookies until you play), and Google sees your IP address and that you watched it, under Google's Privacy Policy. Nothing is fetched from YouTube if you don't press play.

Support (the phone's Support app)

A report is sent only when you send one. With it go:

• your note;
• a screenshot of the game's view;
• the place in the game world (region, position, the street);
• the game's state: version, operating system, the renderer and graphics card (its name, maker and driver), screen and render size, frame rate, vehicle and speed, the game's time and weather, your mods (their ids and versions), and the Mixtape station and song playing, if any.

Replies you write go with the same details. A report or reply typed in the phone app is sent by the game, the same way and with the same details; the phone itself never talks to the support desk. While a report is open, the game checks for answers about once a minute.

To the support desk you are a player id, which the game makes up. It is a UUID v7: random, except that it carries the time it was made. With it goes a secret that the desk creates the first time your game contacts it, and keeps only as a hash. The desk also notes when it first and last heard from the id. It has no name and no e-mail address for you, but the id is still personal data in law, and it is treated as such.

Why: to answer your report and fix what you found. That is the service you ask for when you send one (Art. 6(1)(b) GDPR). We also have a legitimate interest in keeping the service free of abuse (Art. 6(1)(f)).

Postcards (friends, messages and roams), only if you turn it on

Nothing goes out until you turn Postcards on. Then the service keeps:

• the name you choose (any name; it need not be yours);
• a friend code it makes for you;
• your friends, requests and blocks;
• messages and roam invites until they're delivered, 30 days at most if they aren't.

Your conversations are kept on your computer, not on the server. Turning Postcards off deletes all of it from the server.

In a roam your game sends, through our relay, to the other players: about 15 times a second your position and movement, your vehicle with its lamps and signals, your pet, and your drone while it's out of the backpack; and when they change, your chosen name, your outfit and the colours you chose (your skin's tone, your hair's and clothes' colours, your vehicles' paint), what rides on your vehicle (a bike, a boat, the gear), whether you wear the backpack, where your second vehicle stands, and where your camp is, if you've set one up. The host's game sends everyone its clock and weather. The relay passes these on and keeps nothing; a roam exists only in the server's memory while it lasts. The other players see your name and where you are, in the world and as a mark on their minimap and map; Postcards' Hide my position (off until you turn it on, kept on your computer) sends a flag with your position that tells their games not to draw your mark or your name (your position still goes to them: their games draw you, or your vehicle, where you are).

A roam on someone's own server (Postcards › Server › Your own: a roam server a player runs themselves, nip-roam) isn't ours. Your game sends that server, and through it the other players, what it would send ours for a roam (above), and nothing else: not your player id, its secret or the game's key. The server gives your game a random token of its own while you're in its roam, so you can join again. We don't run it and receive nothing from it: what happens there is up to whoever runs it, who sees your IP address and what your game sends. Ask them what they keep.

Why: you asked for the social features (Art. 6(1)(b) GDPR).

Mixtape (the phone's radio)

Nowhere FM, the game's own station, plays from the game itself and connects to nothing. When you play a live station (or a mod's stream), the game connects straight to that station's own server (about a hundred stations, listed with the game from radio-browser.info). The station sees your IP address and the game's name and version, as it would for any player. We are not part of that connection and receive nothing from it.

Use my phone (the phone app, Nowhere)

The phone app links to the game over your own local network, directly: we run nothing between them and receive nothing from it. While Use my phone is on (Settings › General), the game announces itself on your local network (Bonjour) and answers phones that ask, with your computer's name, your player name and where you are in the game. To find it, the phone looks on the Wi-Fi network it's on, and only that network (Bonjour, then asking that network's addresses). The first time a phone asks, the game shows it and only links if you allow it; then the phone and the game keep a key for each other (on the phone, and in the game's own files) so they link again by themselves; Unpair in the game, or Forget on the phone, drops it. What the apps show (your vehicles, the drone's camera, the game's camera and map, your game's pictures in Gallery, your support reports and their answers) goes only between your phone and your computer. A picture leaves your phone only when you share it yourself (Share… opens your phone's own share sheet); saving one into your photos only adds it, and the app never reads your photo library.

IP addresses on our server

Like any server, the support desk sees the IP address a request comes from. The service uses it only to limit how many reports come from one place, in memory, and doesn't store it. The web server in front of it may keep technical access logs, including IP addresses, for at most [LOG DAYS] days, to keep the service running and secure (Art. 6(1)(f) GDPR).

How long it is kept

What	Kept
A support report, its replies and screenshots	Until 12 months after it is resolved or closed
Your player id and everything with it	Until 24 months after your game last contacted the desk
Postcards profile, friends and blocks	Until you turn Postcards off (or the 24 months above)
Undelivered messages and invites	Until delivered, 30 days at most
Roams	Only while they last, in memory
Technical access logs (IP addresses)	At most [LOG DAYS] days

The service deletes expired data automatically, every hour.

Who else sees it

• The people who answer support (the developer, and anyone helping with support) see reports, their screenshots and details, player ids, and a Postcards name and friend count. They sign in with an account of their own, and what they do is logged. Nobody reads your Postcards messages.
• Other players see what Postcards and roams show them (above).
• Whoever runs a roam server of their own sees what reaches it, if you roam there (above).
• Hosting: the support desk and its database run on the developer's own hardware in Poland, with no cloud provider. If that changes (a provider in the EU), this policy will name it first.
• No one else. No data is sold, shared for advertising or used for profiling. No decisions are made about you automatically.

Data held by the support desk stays in Poland. MET Norway is in Norway (the EEA). GitHub may process website requests in the USA, under the EU–US Data Privacy Framework. The radio stations are wherever they are, and you choose which one you connect to.

Your rights

Under the GDPR you may ask for access to your data and a copy of it, its correction, its deletion, restriction of its use, its portability, and you may object to its use on legitimate interest. Most of this is in the game:

• A copy: phone › Me › Your data on the server › Save a copy. You get a JSON file with your reports (with their screenshots), your Postcards profile and friends, and what is waiting for you.
• Deletion: phone › Me › Your data on the server › Delete it from the server. Your reports, screenshots, Postcards and id are gone at the desk for good, and the game starts again with a new id.
• Postcards: turning it off deletes it from the server.
• For anything else, write to [EMAIL] with your player id (phone › Me). We answer within a month.

You also have the right to complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa); you may also go to the authority where you live.

Mods

Mods are made by other people and can contain their own code. A mod could go on the network by itself, and this policy doesn't cover what it does. Install only mods you trust.

Children

The game itself collects nothing about anyone. Support and Postcards carry text you write. If you are under 16, ask a parent or guardian before you use them.

Security

All traffic to the support desk is encrypted (HTTPS). Your secret is stored only as a hash. Support staff sign in through a separate login with its own roles, and their actions are logged. The game's secret and id are kept in your user folder; anyone who can read that folder can act as you towards the support desk, so treat them like a password (phone › Me shows them).

Changes

When this policy changes, the date above changes, and anything that matters to you is in What's new.