QuizBet Privacy Policy

Who is responsible for your data?

QuizBet is the service responsible for the processing described in this policy. Privacy questions and requests can be sent to privacy@quizbet.app.

Data we process

• Account data: email address, nickname, internal user identifier, activation status and a secure password hash. QuizBet never stores your password in plain text.
• Content you provide: optional avatar, QuizbetAI chat messages, quiz descriptions, generated or imported questions and answers.
• Gameplay data: lobby and invitation participation, bets, selected answers, scores, game history and a game-scoped nickname and session identifier for guest players.
• Technical data: authentication, CSRF and guest-session cookies, request and action identifiers, application errors, performance traces, browser or device information and connection metadata processed by hosting and security providers.

Why we use data

We use data to create and secure accounts, provide multiplayer games and quizzes, generate requested quizzes, send activation and password-reset messages, prevent abuse, diagnose failures and maintain the reliability of QuizBet. We do not sell personal data, show targeted advertising or track users across other companies' apps or websites.

Legal bases

Where the GDPR applies, account and gameplay processing is necessary to provide the service you request. Security, abuse prevention and privacy-safe diagnostics are based on QuizBet's legitimate interest in operating a safe and reliable service. Optional content, such as an avatar, is processed when you choose to provide it and can be removed by deleting your account.

Service providers

Data is disclosed only when needed to providers acting for QuizBet: Cloudflare for network delivery and security, Google Cloud for application and database hosting, Sentry for error and performance diagnostics, OpenRouter and its selected model providers for QuizbetAI requests, Paddle as merchant of record for web payments, and the email provider for account messages. QuizbetAI messages and quiz requirements are sent to OpenRouter; passwords and authentication cookies are not. Providers may process data in other countries using safeguards required by applicable law.

Retention and deletion

• Account and current gameplay data is kept while the account is active and as needed to provide the service.
• QuizbetAI chat messages are automatically deleted after 30 days.
• Guest access sessions expire after two hours. A guest nickname and game result may remain in the relevant game history so the result remains understandable to the participants.
• You can permanently delete your account from My Profile or at quizbet.app/account-deletion. Email, password hash, avatar, reset tokens, AI chat history and unused quizzes are deleted. Finished-game records and quizzes already used in games remain only after being detached from your account and anonymized so other players' results remain consistent.
• Security and diagnostic records are retained only for the configured provider retention period or as long as reasonably necessary to investigate incidents and protect the service, then deleted or aggregated.

Security

QuizBet uses encrypted network connections, hashed passwords, restricted access, HttpOnly and Secure authentication cookies, CSRF protection and privacy-safe diagnostic identifiers. No method of storage or transmission can guarantee absolute security.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, objection or portability of your personal data and may complain to your data-protection authority. You can delete the account directly in the app. For other requests, contact privacy@quizbet.app. We may need to verify your identity before completing a request.

Changes to this policy

We may update this policy when QuizBet or legal requirements change. The current version and its update date will remain available at this address and inside the app.