Privacy policy

Who we are

Trivia is run by [operator legal name, address]. We are the controller of the personal information described here. For anything about your privacy, email privacy@trivia.local.

What we collect, and why

• Players who join with a room code give a nickname and an avatar, nothing else. Their device keeps a seat token so a reload doesn't lose their place.
• Members give an email address, a display name, a month and year of birth (to check age, never shown) and a password, which we store only as a one-way hash. Signing in with Google or Apple gives us your name and email from them; we don't keep your photo or contacts. Optional: a username, a bio, an avatar picture and favourite categories for your profile.
• What you do in Trivia: games you host and play, your answers and scores, packs you create, buy, rate or report, achievements and stats, and your settings.
• Payments go through Stripe. We keep what you bought and your Trivia+ status; Stripe handles your card, and we never see the number.
• AI question generation: the topic you type and the questions it produces.
• Teachers give their school name and school email address when they apply. Their classes hold students' first names or nicknames; see the children's privacy notice.
• Security records: sign-in sessions (with the device and IP address they came from), rate-limit counters, error reports and an audit log of admin actions.

We use this to run the game and your account (our contract with you), to keep Trivia secure and working (our legitimate interest), to send emails you've turned on (consent, which you can withdraw in Settings) and to keep records the law requires.

What we never do

No ads, no advertising or analytics trackers, no selling or sharing of your information for advertising, and no third-party scripts on any page. Cookies are only for signing in and settings: see cookies.

Who helps us run it

These companies process information for us, under contract, and only for us:

• Render: hosting, database and servers (United States).
• Cloudflare R2: question pictures, sounds and avatars.
• Stripe: payments and subscriptions.
• [Email provider]: sending sign-in, verification and notification emails.
• [Error monitoring provider], if enabled: error reports, with no names, emails or account ids in them.
• AI questions are written by a model we run ourselves. If it's down, and only if our admins have it turned on, the topic and questions go to [fallback AI provider].
• Google and Apple, only if you choose to sign in with them.

Our servers are in the United States. Where the law requires it, transfers are covered by standard contractual clauses.

How long we keep it

• Your account: until you delete it.
• After you delete it: you disappear from every public page at once; 30 days later we erase the account and everything tied to it. Games you were in stay for the other players, with your seat made anonymous. Published packs others have played stay, unlisted and without your name.
• A live game: 6 hours after it ends.
• Sign-in sessions: 30 days after last use.
• Operational counters and error reports: about a day; server logs: [log retention].
• Children's and students' accounts have shorter limits, set out in the children's privacy notice.
• Payment records: as long as tax law requires, held by Stripe.

Your rights

Wherever you live, you can:

• Get a copy of everything we hold about you: Settings → Account → Download my data, in a format other services can read.
• Correct it: your profile and settings are yours to edit.
• Delete your account: Settings → Account.
• Object to or limit how we use it, or withdraw consent: email privacy@trivia.local.

In the EU and UK you can also complain to your data protection authority. In California (CCPA/CPRA) you have the right to know, delete and correct, and to opt out of the sale or sharing of personal information. We don't sell or share it, so there's nothing to opt out of; we honour Global Privacy Control signals all the same. Using these rights never costs you anything or changes the service you get.

Children

Children under 13 need a parent's consent, or a teacher's class, to have an account, and get a restricted one. Read the children's privacy notice.

Security

Passwords are hashed with Argon2id, everything travels over HTTPS, and access to personal information is limited to the admins who need it, with every admin action recorded. If something goes wrong, we'll tell you and the authorities as the law requires.

Changes

If we change this policy in a way that matters, we'll email members before it takes effect. The date at the top shows the latest version.

Contact us

Email privacy@trivia.local.