1. Who is responsible for your data
Quizzas is the data controller for the personal data described here. We operate from Spain and process personal data under the EU General Data Protection Regulation (GDPR).
For anything in this policy — including a request to see, correct, export or delete your data — write to privacy@quizzas.com.
2. What we collect
We collect four kinds of data, and no more than we need to run a match.
- Account data. If you sign in with Google or Apple, we receive the email address and display name that provider releases to us — never your password with them. If you register with email and password, we store your email address and a one-way hash of your password. We never see or store the password itself.
- Profile data. Your display name, the character you play as, and any cosmetic items you own or have equipped.
- Gameplay data. Matches you have played, the answers you submitted and when the server received them, your scores, XP, account level, season level, ranking points, leaderboard position, and your friends list.
- Purchase data. Purchases are taken by Apple or Google, not by us. Our purchase provider passes us an app-specific subscriber identifier and which entitlements you own. We never receive your card number, billing address or full payment record.
- Technical data. Device model, operating system version, app version, language setting, and the IP address our servers see when your device connects. Crash and error diagnostics may include a stack trace and the state of the app when it failed.
3. Why we use it, and on what legal basis
- To run the game (performance of a contract). Creating your account, matching you with opponents, scoring answers, keeping your progression and leaderboard position, delivering what you bought.
- To keep it fair and working (legitimate interests). Detecting cheating and abuse, diagnosing crashes, understanding which parts of the game are used so we can improve them, and securing our systems.
- To meet legal obligations. Tax and accounting records for purchases, and responding to lawful requests.
- With your consent. Anything optional, such as product emails, if and when we offer it. You can withdraw consent at any time without affecting what we did before you withdrew it.
4. What other players can see
quizzas! is a multiplayer game, so some of your profile is visible to the people you play with and to anyone reading a leaderboard: your display name, your character and equipped cosmetics, your score in a shared match, your account level, and your season ranking position.
Your email address is never shown to other players. Choose a display name you are comfortable being public.
5. Who we share it with
We do not sell your personal data, and we do not share it with advertising networks. We use a small number of service providers who process data strictly on our instructions:
- Hosting and database. Our application servers and database, which hold your account, progression and match history.
- Object storage. Images and other binary assets served to the app.
- Purchase infrastructure. Our in-app purchase provider, which verifies receipts with Apple and Google and tells us what you own.
- Sign-in providers. Google and Apple, if you choose to sign in with them. Their own privacy policies govern what happens on their side.
6. International transfers
Some of our providers operate outside the European Economic Area. Where that happens, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision, and we require a comparable level of protection to the one you have in the EEA.
7. How long we keep it
- Account and profile data — for as long as your account exists.
- Match and progression history — for as long as your account exists, because it is what your level, rank and history are made of.
- Purchase records — for the period tax and accounting law requires, which may outlast your account.
- Server logs and diagnostics — a rolling window measured in weeks, then deleted.
When you delete your account, everything personal goes with it — your profile, your progress, your leaderboard entries, your friends, anything you authored, and your whole match history. The one exception is the purchase record above: the transaction survives with your identity stripped from it, because tax law requires us to keep records of sales. How to delete your account explains both in full.
8. Your rights
Under the GDPR you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything inaccurate;
- delete your account and the data attached to it;
- export your data in a portable, machine-readable format;
- restrict or object to processing we base on legitimate interests;
- withdraw any consent you previously gave.
9. Complaints
Write to privacy@quizzas.com first — we would rather fix it. If you are not satisfied, you have the right to complain to your national data protection authority. In Spain that is the Agencia Española de Protección de Datos (www.aepd.es).
10. Children
quizzas! is not directed at children under 14, and we do not knowingly collect personal data from them. If you believe a child under that age has created an account, contact us and we will delete it.
11. Security
Traffic between the app and our servers is encrypted in transit. Passwords are stored only as one-way hashes. Access to production data is restricted to the people who need it to operate the service. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant authority as the GDPR requires.
12. Changes to this policy
If we change this policy we will update the date at the top of this page, and for anything material we will tell you in the app before the change takes effect.
13. Contact
Privacy questions and data requests: privacy@quizzas.com. Anything else: hola@quizzas.com.