Privacy Policy

Information we collect

• Account data: your email address, display name, preferred language, how you sign in (email/password or Google), and the date you joined.
• Gameplay data: the games you host (team names, scores, mode, language, timer, result and timestamps), the categories you pick, the questions served during play, and the questions you have already seen (so we avoid repeating them).
• Credits data: your credit balance and a ledger of credit changes (grants and adjustments, with the reason and time).
• Technical data: device and browser information, approximate location inferred from your IP address, and diagnostic data when something goes wrong.
• Usage data: anonymous, aggregate analytics about how the Service is used — collected only if you accept analytics (see "Cookies and analytics").

How we use your data, and our legal bases

• To provide the Service — create your account, run games, and keep your credit balance (basis: performance of our contract with you).
• To keep the Service secure and working — error monitoring, abuse prevention, and debugging (basis: our legitimate interests).
• To understand and improve the Service — product analytics (basis: your consent, which you can withdraw at any time).
• To meet legal and accounting obligations once payments are enabled — keeping transaction records (basis: legal obligation).

Cookies and analytics

We use a small number of cookies and similar technologies. Strictly necessary ones keep you signed in (your authentication session) and remember your language and your cookie choice. These are always on because the Service cannot work without them.

Analytics are optional and off by default. We ask for your consent before loading Vercel Web Analytics and Speed Insights, which give us privacy-friendly, aggregate usage measurements. You can accept or decline from the banner, and decline later by clearing the consent cookie. We use Sentry for error monitoring to keep the Service stable and secure; it processes technical diagnostic data and does not record session replays.

Who we share data with

We do not sell your personal data. We share it only with service providers ("processors") who help us run the Service, under contracts that limit them to our instructions:

• Supabase — our database and authentication provider (data hosted in the United States, US West / Northern California).
• Vercel — application hosting, and (with your consent) analytics and performance measurement.
• Google — only if you choose to sign in with Google.
• Sentry — error monitoring and diagnostics.
• Cloudflare — bot mitigation (Turnstile) on our sign-in, sign-up, and password-reset forms; processes a challenge token and limited technical signals to tell humans from bots.
• Lemon Squeezy — our Merchant of Record for purchases (payment processing and sales-tax/VAT handling), once paid features are enabled.

International transfers

Our providers may process data in countries other than yours. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep data

We keep account and gameplay data for as long as your account is active. If you delete your account, we delete the associated data promptly (see "Your rights"). We may retain limited records where the law requires it — for example, transaction records once payments are enabled.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our use of your data, to data portability, and to withdraw consent. You can exercise the two most common rights yourself, right now:

• Export my data
• Delete my account

For any other request, email us. If you are in the EEA or UK you also have the right to complain to your local data-protection authority. We do not sell or "share" personal data as those terms are defined under California law.

Children

The Service is not directed to children under the age required by your country (for example, 16 in much of the EEA, 13 elsewhere). We do not knowingly collect data from children below that age.

Changes to this policy

We may update this policy as the Service evolves. We will change the "last updated" date above and, for material changes, give a more prominent notice.

Contact us

For any privacy question or to exercise your rights, email: