Privacy Policy
Last updated: 2026-10-14
Draft text — it has not been reviewed by a lawyer yet and may change before launch.
1. What we collect
For a nickname account: the nickname, a password (stored only as a one-way hash), a recovery code (stored only as a hash), and your play records such as points, level and which questions you have solved. We do not ask for your e-mail address, phone number or real name.
2. Cookies and browser storage
We use a visitor cookie (qb_vid, up to one year) that holds a random ID, and a login cookie (qb_at, 30 days) if you log in. Both are strictly necessary and HttpOnly. Guests' solved-question lists are kept in your browser's local storage. We do not use advertising or analytics cookies at this time.
3. IP address and device information
We use your IP address only to protect the service (rate limiting and bot defence). It is converted with a secret that changes daily into a hash, and the original address is not stored. The visitor ID is likewise stored only as a hash and is used to count visitors, limit abuse such as repeated reports, and detect several accounts on one device.
4. Question reports
If you report a question we store the reason, an optional note of up to 200 characters and a hash of your device, so that the same question is not reported again and again. Reports are anonymous.
5. Service providers
We use Cloudflare (including its Turnstile bot check, which can process your IP address and browser information), a hosting provider and a database provider to run the service. They process data on our behalf.
6. How long we keep data
Round details are deleted after 7 days. Daily visitor and rate-limit records are deleted after a few days. Accounts that have not been used for 12 months are deleted automatically, unless a moderation case exists. When you delete your account in the settings, your records are deleted immediately.
7. Your choices
You can change your password, issue a new recovery code, log out of all devices and delete your account in the settings. Because we hold very little personal data, we may not be able to identify you for requests that need more than your nickname and password.
8. Children
QuizBite is meant to be usable by teenagers, and we do not ask for information beyond a nickname and a password. Please do not use your real name or contact details as your nickname.
Contact
A contact address will be published here before launch.