Privacy Policy

Quiz8 processes the data needed to provide the game, manage accounts and subscriptions, protect the service and, only with the consent required, measure usage and display advertising.

Controller and contact

The Quiz8 service is operated by the controller reachable at [email protected]. You may use this address to ask about data processing or exercise your rights.

Data processed

• Nicknames and session identifiers
• Answers, scores and timings
• Email, account ID and technical usage data, including security and diagnostic logs

Purpose

We process data to perform the requested service and manage your account or subscription; for our legitimate interests in security, abuse prevention and error diagnosis; to comply with legal and tax obligations; and, where required, on the basis of consent for analytics and advertising. Consent can be withdrawn at any time through cookie settings.

Retention

Accounts and hosted games remain available while the account is active or until the user requests deletion. Security and diagnostic logs are kept only as long as needed; tax and payment data are retained for the periods required by law and by the merchant of record. Providers also apply the periods stated in their settings and terms.

Third parties

We share with each provider only the data needed for its function:

• Supabase: database, authentication and real-time features (accounts, sessions, questions, participants, answers and scores).
• Vercel: hosting, delivery, technical logs, Web Analytics and Speed Insights.
• Google Analytics, Google Ads and Google AdSense: measurement, attribution and advertising according to the preferences recorded in Google's certified consent management platform.
• Lemon Squeezy: checkout, payments, invoices and subscription management as merchant of record; it receives the email address and account ID needed to attribute the purchase.
• Sentry: error reporting and technical diagnostics; Quiz8 does not enable session recordings and does not deliberately send email addresses or nicknames.
• DeepSeek API: question generation; it receives only the topics entered after an automated check for obvious identifiers. Quiz8 does not send prior free-text answers to it. Do not enter personal or sensitive data in topics.

International transfers

Some providers may process data outside the European Economic Area. Where applicable, the transfer is governed by an adequacy decision, standard contractual clauses or other safeguards stated in the relevant data processing agreement.

Authentication

To create an account we collect your email and generate an internal user ID (UUID). If you choose Google OAuth we receive the minimal profile claims (verified email, provider ID) used only to let you sign in.

Security

Access tokens are handled by Supabase client libraries and stored locally in the browser (localStorage) for session continuity. We use basic rate limiting and server logs to prevent abuse. To count a night's free VIP games we store a one-way hash of the IP address with the game, never the address itself.

Your rights

You may request access, correction, deletion, restriction, portability or object by writing to [email protected], and you may withdraw consent without affecting earlier processing. We normally respond within one month, subject to extensions allowed by law. You may also lodge a complaint with the competent supervisory authority.

Account deletion

You can delete your account at any time from the Account page. Deletion removes the account and hosted session data (sessions, questions, participants, answers, metadata) except minimal security logs retained temporarily.

Local storage items

We use localStorage for strictly functional data such as your chosen nickname, device identifier for duplicate prevention, auth tokens (Supabase) and language preference.

• player_nick – remembers last nickname used.
• player_device_id – deduplicates joins from the same device.
• locale – remembers language preference.
• supabase auth keys – managed by Supabase to keep you signed in.

Contacts

For privacy requests: [email protected]