Privacy
Last updated: 3 October 2026 · Visited, com.baddevelopergames.visited · Wersja polska
In short
Visited keeps track of which countries you have already been to and shows how much of the world you have behind you. The whole app works offline and without an account — you only create one if you want the same countries on more than one phone. The app is funded by ads, and a one-time Visited Pro purchase removes them. We do not sell your data, and which countries you tick is never used to choose an ad.
Who we are
Visited is made by Mariusz Samojlik, who is the controller of the personal data described on this page. For anything on this page, including a request to see or delete your data, write to pekeyprv@gmail.com.
What is stored and where
On your device we store the list of ticked countries — two-letter ISO codes with the time of the last change — and small app settings: the chosen view (map or list), the theme and the language. Without an account this is the only place anything exists.
In the cloud, and only once you sign in, we keep a single document in Google Cloud Firestore (Google Ireland Limited, as a processor acting on our instructions), stored under your account identifier. It contains only country codes with their change times, a data format version number and the time of the last sync. It holds no email address, no name and nothing else — this is enforced by the database security rules, which reject a document carrying any extra field. With all 195 countries that is about 10 kilobytes.
Your email address and Google display name live in Firebase Authentication and serve one purpose: recognising that it is you coming back for your countries. The app shows them on the account screen and copies them nowhere.
Accounts
An account is optional and does one thing: it gets your countries back on a new phone. Signing in is handled by the system Google account picker, so the app never runs its own form and never sees your password. We receive your Google account identifier, your email address and, if you have set one, your display name. We ask for nothing more and we do not read your contacts, calendar or files in Google.
Without an account the app is complete: the map, the list, the statistics and every setting work the same way, the data simply stays on that phone.
Ads
Visited shows ads served by Google AdMob: a banner at the bottom of the main screen, a banner at the bottom of Settings, and a full-screen ad after you leave Settings. To fetch an ad, the Google Mobile Ads package sends Google your device's advertising identifier — a resettable identifier issued by Android, not your name or email address — together with the technical shape of the request: device model, system version, language, screen size and the IP address it came from, which tells Google your approximate location. Google uses this data as an independent controller, under its own policy for sites and apps that use its services. None of it comes back to us.
Which countries you have ticked plays no part in this. The ads package cannot read your map or your list, and we send none of it along with an ad request. A travel agency ad is a coincidence, not a consequence of where you have been.
If you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent before it fetches the first ad, using Google's consent form. You can accept personalised ads or decline them, and you can change your mind at any time under Settings → Ad consent. Declining does not remove ads — it means they are chosen without building a profile of you.
The advertising identifier belongs to the device, not to Visited: you can reset or delete it for all apps at once in Android Settings, under Privacy → Ads.
Visited Pro
Visited Pro is a one-time purchase, not a subscription: you pay once, nothing renews and there is nothing to cancel. It removes ads. Payment is handled entirely by Google Play. We never see or store your card number, your billing address or the email address attached to your Google account. Google Play tells us exactly one fact: whether the Google account signed in on your phone owns Visited Pro.
We keep that fact on your device and nowhere else. It is not linked to your Visited account and it never passes through our database — which is why Visited Pro works whether or not you are signed in. It still travels with you to a new phone, because Google Play remembers the purchase against your Google account: install Visited, open “Remove ads” and tap Restore purchase. While Visited Pro is on, the app fetches no ads at all, so the advertising identifier is never read for advertising purposes.
Refunds are Google's process, not ours. If Google refunds you, Play stops reporting the purchase as owned and the app turns Visited Pro off the next time it asks — nobody tells us separately and we have nothing on our side to delete.
Diagnostics
Production builds send crash reports (Firebase Crashlytics) and usage counters (Firebase Analytics). Development builds send neither.
The counters never carry which countries you ticked. They record that something happened and what shape it had: that a country was ticked or unticked and whether it happened on the map, in the list or in the detail sheet; that the view was switched; that the map was zoomed and how — by gesture, by button or by double tap; that a country sheet was opened; that a section was collapsed or expanded; that search was used — how long the term was and how many results it returned, but never the term itself; that a filter was used; that Settings or the ad-free screen was opened; that the theme was changed; that you signed in, signed out or deleted your account; and that a sync did not go through and how many changes were waiting for it.
Alongside them we keep a few slow-moving facts about the installation: which range the number of ticked countries falls into (for example “6–20”, not the exact figure), which theme you use, which view you usually sit in, and whether you are signed in.
If you want the exact list, it is in the source code: every event and every parameter is declared
in a single file, Analytics.kt, together with a test that fails if a parameter could
ever carry a value from outside a fixed set — and neither a country name nor a search term belongs
to any of those sets.
Crash reports carry the same kind of context, so that a crash can be diagnosed: which screen was open, how many changes were waiting to sync, and how many countries were ticked. Crash reports are not linked to your account — we do not attach your user identifier to them.
What allows us to do this
If you are in the EEA or the UK, these are the legal bases we rely on under the GDPR:
| What | Basis |
|---|---|
| Storing and syncing your ticked countries, signing in | Performance of a contract — it is the service you asked for (Art. 6(1)(b)) |
| Personalised ads | Your consent, given in the form before the first ad, withdrawable at any time in Settings (Art. 6(1)(a)) |
| Non-personalised ads that fund the free version | Our legitimate interest in being paid for the app (Art. 6(1)(f)) |
| Crash reports and usage counters | Our legitimate interest in the app working and not falling over (Art. 6(1)(f)) |
| Whether your Google Play account owns Visited Pro | Performance of a contract — without it we cannot deliver an ad-free app (Art. 6(1)(b)) |
Your rights
You can ask us to show you the data concerning you, to correct it, to delete it, to hand it over in a portable format, or to restrict how we process it. You can also object to anything we do on the basis of legitimate interest. Where we rely on consent, you can withdraw it without giving a reason, and withdrawing is as easy as giving it.
- The fastest route to deletion is in the app: Settings → Account → Delete account. It works immediately and needs no request to us.
- For everything else write to pekeyprv@gmail.com. We reply within 30 days.
- If you believe we mishandled your data, you can complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (uodo.gov.pl).
Where the data goes
Visited has no servers of its own. Everything it stores sits in Google services — Cloud Firestore, Firebase Authentication, Crashlytics, Analytics, AdMob and Google Play — and Google may process that data outside the European Economic Area, under the safeguards described in the Google data processing terms, which include the European Commission's standard contractual clauses. We add no other recipients: no ad network besides AdMob, no analytics vendor, no data broker and nobody who buys data.
How long it is kept
Ticked countries are kept until you untick them, delete your account or clear the app's data. There is no automatic deletion here — it is a record of your travels, so it stays for as long as you want it to.
We do not store the advertising identifier at all; it leaves with the ad request and stays with Google, under Google's retention rules. Firebase Analytics reads it too — to count installs and users, not to choose an ad; with Visited Pro on that is its only use, because no ad is fetched. Whether you own Visited Pro is kept on your phone until the app's data is cleared, and at Google Play for as long as Google keeps the purchase; we hold no copy. Crashlytics keeps crash reports for up to 90 days.
Deleting everything
In the app: Settings → Account → Delete account. This deletes your cloud document and your account. The countries ticked on this phone stay — you return to the no-account mode without losing your progress. If you want those gone too, clear the app's data in Android Settings or uninstall it.
Signing out alone deletes nothing: the ticked countries stay on the phone, and the cloud copy is left untouched and comes back when you sign in again. Signing out only stops the syncing.
Children
Visited is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.
Changes to this policy
When the app changes what it does with your data, this page changes with it, and so does the date at the top. If a change is one you would rather be told about than discover, we will say so in the app before it takes effect.
Contact
Questions, exercising your rights, or a deletion request: pekeyprv@gmail.com.