Privacy policy

Who handles the data

The site is run by a private individual, not a company. Data is never sold and is not shared with third parties for advertising.

Contact

No email for requests is published yet. Until one is, you can reach us through the Facebook page linked in the menu.

What we collect

• Account — Email, display name, avatar (an emoji or an uploaded picture) and password. The password is only ever stored as an irreversible hash (scrypt) — it exists nowhere in readable form.
• Country — A two-letter country code, derived from your network address when you sign up, so a flag can appear beside your avatar. We do not keep the address itself, nor a city.
• Language — Which language you chose, so the same one greets you next time.
• Gameplay — Games played, answers, points, level, coins, achievements and guild membership.
• Chat — The messages you write, along with your name and avatar. Other players can see them.
• Suggested questions — If you suggest a question, it is stored together with who submitted it.
• Visits — Which pages are opened and when, tied to a random browser identifier. It powers the "players online" number and general statistics.
• Notifications — Only if you turn them on — the technical address your browser receives notifications at.

On what basis

Account and gameplay data are processed so the service can exist at all — without them there is no profile, no ranking and no playing with friends. Visit statistics and the language preference rest on a legitimate interest in running and improving the site.

Cookies

• trivia_session — Keeps you signed in. Valid for 30 days and not readable by scripts. Signing in cannot work without it.
• trivia_lang — Remembers the language you chose. Valid for one year.
• Google Analytics — General visit statistics (identifier G-D5CWSJWY6T). It sets its own cookies from Google’s domain.

Who else sees the data

• Vercel — The hosting that serves the site. It is also what determines the country from the network address.
• Turso — The database holding everything described above.
• Google Analytics — Visit statistics.

For how long

Account data is kept for as long as the account exists. Visit records and chat messages are kept while they remain useful for statistics and moderation. Database backups are taken automatically and the most recent fourteen are retained.

Your rights

Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict processing, to portability and to object. If you believe your rights have been breached you may complain to your national data protection authority — in Bulgaria, the CPDP (cpdp.bg).

Children

The game is not aimed at children under 14 and does not knowingly collect data from them.