Mapolis

Geography Quiz Game

Who's playing?

←

Create Profile

😊

Correct!

Credits & Acknowledgments

Mapolis is built with care using open-source tools, public domain data, and the work of talented artists and educators.

📚 Academic Standards

Our content tiers meet or exceed nationally recognized K–12 geography curriculum standards. We use these frameworks as a minimum bar — then go further with engaging content that sparks curiosity beyond the textbook:

Core Knowledge Sequence

The Core Knowledge Foundation's content guidelines for Grades K–8 geography specify which countries, rivers, mountains, and physical features students should know at each grade level. Our tiers 1–9 meet or exceed the CK grade-by-grade sequence.

Geography for Life: National Geography Standards

Published by the National Council for Geographic Education (NCGE), these 18 standards define geographic literacy across K–12. Our upper tiers (10–13) draw from the geography benchmarks in this framework.

🗺️ Map & Geographic Data

Natural Earth — Tom Patterson & Nathaniel Vaughn KelsoPublic Domain

world-atlas — Mike BostockISC

⚙️ Open-Source Libraries

D3.js — Mike Bostock / ObservableISC

TopoJSON — Mike BostockBSD-3

🧑 Avatar Art

Avatar styles sourced from DiceBear open-source packages by Florian Körner.

Adventurer — Lisa WischofskyCC BY 4.0

Face Generator — The Visual TeamCC BY 4.0

Big Smile — Ashley SeoCC BY 4.0

Croodles — vijay vermaCC BY 4.0

Fun Emoji — Davis UcheCC BY 4.0

Miniavs — WebpixelsCC BY 4.0

Personas — DraftbitCC BY 4.0

Avataaars — Pablo StanleyFree

Lorelei — Lisa WischofskyCC0

Bottts — Pablo StanleyFree

Pixel Art — DiceBearCC0

Thumbs — DiceBearCC0

Notionists — Florian KörnerCC0

Blobby — Original art by GnalopeyOriginal

🦊 Animal Art

Animal Preserve illustrations from Microsoft Fluent Emoji 3D via @lobehub/fluent-emoji-3d on unpkg CDN.

Fluent Emoji 3D — Microsoft CorporationMIT

✏️ Typography

Fredoka One — Google FontsSIL OFL 1.1

Nunito — Google FontsSIL OFL 1.1

Space Mono — Google FontsSIL OFL 1.1

Privacy & Safety

No tracking. No targeting. No data to sell. Just geography. · Gnalopey LLC · April 2026

🔒 How We Think About This

🪪

Handles, not names

Every user picks a handle. No real name is ever collected, stored, or displayed — from anyone.

📉

Minimum viable data

We collect what's needed to make the game work and nothing more. If a field isn't doing a job, it doesn't exist.

🧑‍🏫

Classrooms are sealed

An educator sees only their own students' progress. Row-level security makes this structural, not just policy.

📝

No open chat

Student messages are selected from fixed templates. No free-text field where personal information could slip through.

🚫

Zero third-party tracking

No analytics SDK, no session replay, no advertising identifiers. Nothing you do in Mapolis is observed by any third party.

🏫

Schools always ad-free

Any account linked to a classroom never sees an ad — now or in the future, regardless of payment status.

🛡️

Moderated namespace

Every handle passes a 195-word filter with leetspeak normalization and real-name detection before it's accepted.

📍

No location data, ever

We ask your home country once, for the leaderboard. No GPS, no IP-based location, nothing precise.

🇺🇸 US Federal

COPPA Met

Children's Online Privacy Protection Act. Anonymous profiles, data minimization, no third-party behavioral tracking, parental email for under-18 accounts. 2024 amendments (AI training restrictions, tighter consent) satisfied by architecture.

FERPA Met

Family Educational Rights and Privacy Act. EdTech vendor role — no student PII, no cross-classroom access, educator-scoped data. Data Processing Agreements with school districts before classroom deployments.

FTC Act §5 Met

Prohibits deceptive data practices and dark patterns. Privacy posture matches privacy policy exactly. Parental gate is a real cognitive task, not a speed bump.

CIPA Met

Children's Internet Protection Act. No harmful content, no open-form communication, no external links from the student experience, fully moderated handles.

🏛️ US State Laws

CCPA / CPRA Monitoring

California Consumer Privacy Act. Gnalopey LLC currently qualifies for the small business exemption. No user data is sold or shared regardless of threshold status.

SOPIPA Met

Student Online Personal Information Protection Act + 20 state equivalents. Classroom mode permanently ad-free. No student data for targeting. No data sold.

CA CAADCA Partially Enjoined

California Age-Appropriate Design Code. Partially enjoined; 9th Circuit partially reinstated March 2026. Architecture meets the code substantively regardless of legal status.

CA DAGA Jan 2027

Digital Age Assurance Act. OS-level age signals required at app launch. Birth-year gate already provides equivalent assurance. Platform APIs integrated at native app submission.

TX SCOPE Act Partially Enjoined

In-force provisions (locked age registration, no geolocation, no targeted ads) met. Feature flags ready if enjoined provisions are reinstated.

TX TDPSA Monitoring

Texas Data Privacy and Security Act. Small business exemption currently applies. Data minimization applied structurally regardless.

Utah App Store Act May 2026

Compliance responsibility sits with Apple and Google as the app stores. Education classification supports an exemption; legal review in progress.

📱 Platform Policies

Apple App Store §1.3, §5.1.4 Met

No disallowed SDKs. Parental gate before purchases and external links. No PII to third parties. 2025 rating system completed at iOS submission. Declared Age Range API planned for native build.

Google Play Families Policy Met

No persistent advertising identifiers. Data minimization throughout. Parental gate before purchases. IARC questionnaire completed at Android submission.

AdMob Child-Directed Treatment At Launch

Ads fully stubbed in beta. Before public launch: child-directed treatment flags enabled, human-reviewed contextual units only — for all users.

🌍 International

EU GDPR Architecture Met

Data minimization, purpose limitation, privacy by design, deletion rights, no third-party sharing. Before EU-scale launch: EU data residency, sub-processor DPAs, GDPR privacy notice.

UK Children's Code Architecture Met

All 15 standards met: maximum privacy by default, data minimization, no advertising profiling, no geolocation. DPIA and child-friendly privacy section before UK-targeted launch.

🚫 What We Will Never Do

🚫 Sell user data — to any third party, from any user

🎯 Behaviorally target anyone — no interest profiling, no ad identifiers

📍 Collect location data — no GPS, no IP-based location

📸 Collect real names or photos — handles and avatars only

🤖 Train AI on your data — gameplay stats never used for ML training

👁️ Let third parties watch — no analytics SDKs or trackers in the app

📋 Your Data Rights

Know

Request a summary of everything stored: handle, birth year, gameplay history, home country.

Delete

Request complete deletion of your account and all data at any time.

Correct

If anything is wrong — including a registered age — contact us and we'll fix it.

Parent / Guardian

All the same rights apply. Reference the recovery email on the account.

📬 Contact

[email protected] — include your handle and recovery email. We respond within 5 business days.