Privacy Policy
Last updated: October 2026. Plain-English first. Requires review by qualified legal counsel before launch.
What we collect and why
- Quiz content (questions, answers, your name as creator) — to provide the service. Deleted when the quiz is deleted or auto-expires.
- Player names and scores — to show leaderboards and results.
- Scrambled abuse-prevention signals (a one-way hash of your IP with a rotating salt — never the raw address) — to stop spam, bots, and fraud. Kept 90 days, then aggregated.
- Coarse country (from your connection, e.g. "PK") — for analytics. No precise location.
- Cookie-consent records — where the law requires proof of consent.
What we don't collect
No email addresses (unless you optionally claim quizzes later), no phone numbers, no precise location, no contacts, no photos, no passwords — there are no accounts to have passwords for.
Cookies
We use a minimal set: a consent cookie, a security cookie, and — where you consent — analytics and advertising cookies. See our Cookie Policy. In the EEA, UK, and Switzerland we use a Google-certified consent banner before any advertising or analytics cookies are set.
Your rights
Because there are no accounts, your quiz's manage link is your key: with it you can view, edit, or permanently delete your quiz (via My quizzes). To remove a player's score, use the report form with the quiz link, nickname, and approximate time. If you lose your manage link we cannot verify you — please keep it safe.
Children
The service is not directed at children under 13. Creators must confirm they are at least 13, and quizzes about under-18s are prohibited. If you believe a child is using the service or is the subject of a quiz, report it immediately — we act at once.
Data sharing
We don't sell your data. Processors (hosting, security, analytics, advertising) only receive what they need to operate, under contract. We disclose data only when required by law.
Retention
Quiz data lives until you delete it or 100 days of inactivity pass. Abuse-prevention logs are kept 90 days, then aggregated. Backups (if any) age out within 30 days of deletion.
Contact
Privacy questions or requests: contact us.