Privacy Policy — Trivia Blitz

Short version: We collect only what we need to run the game. We do not sell your data. We do not show ads. Anonymous play is the default — we never require an account to play.

1. Who we are

Trivia Blitz ("we", "us", "our") is an independent mobile application developed and operated by its owner. You can reach us at [email protected] for any privacy-related questions.

2. Scope of this policy

This policy applies to the Trivia Blitz mobile application (iOS and Android) and the marketing website. It does not apply to third-party services we link to (Apple App Store, Google Play Store).

3. Data we collect

3.1 What you provide

Display name — chosen by you when you first play. Not required; you can remain anonymous.
Apple ID or Google Account — only if you choose "Sign in with Apple" or "Sign in with Google" for cross-device sync. We receive only the account identifier and, if Apple permits, an email address. We do not access your contacts, photos, or any other account data.
Support messages — if you contact us, we retain your message and email address to resolve your issue.

3.2 What we collect automatically

Anonymous session identifier — a randomly generated ID created the first time you start a game. This is not linked to your real identity unless you sign in with Apple or Google.
Game activity — scores, categories played, room participation (to operate the leaderboard and game mechanics).
App events — anonymised usage events (e.g., "game started", "theme purchased") sent to PostHog, our analytics provider hosted in the EU. These events do not include question text, display names, or room content. We do not identify you in analytics until you have completed your first game.
Crash reports — collected via Sentry. Session replay is enabled but all text, inputs, and media are masked before transmission.
Purchase receipts — when you buy a theme pack, Apple or Google's payment systems process the transaction and notify us via RevenueCat. We store the record of what you purchased (not payment card details — we never see those).
Device attestation — on iOS we use Apple App Attest, on Android we use Google Play Integrity, to verify that requests come from genuine, unmodified versions of our app. These checks do not transmit persistent device identifiers to us.

3.3 What we do not collect

Your real name (unless you type it as your display name).
Your precise location.
Your contacts, camera, or photos.
Health or biometric data.
Data from children under 13 — our app is rated for ages 13 and up and we do not knowingly collect data from younger users.

4. How we use your data

To operate the game — storing scores, syncing multiplayer room state, maintaining leaderboards.
To verify purchases — confirming entitlement to paid theme packs you have bought.
To improve the app — anonymised analytics help us understand which features work and which need improvement.
To prevent abuse — rate limiting and device attestation protect the game from bots and abuse.
To respond to support requests.

We do not sell your data. We do not use your data for advertising targeting. We do not share your data with third parties except as described below.

5. Third-party services

Supabase (supabase.com) — database, authentication, and backend. Data hosted in their EU region.
Ably (ably.com) — real-time multiplayer messaging. Room messages pass through Ably's infrastructure; they are not stored beyond the session.
RevenueCat (revenuecat.com) — purchase verification and entitlement management.
PostHog (posthog.com) — product analytics, EU-hosted. No personal data in event payloads.
Sentry (sentry.io) — crash reporting and masked session replay.
Apple / Google — payment processing; Sign in with Apple / Google authentication.

6. Data retention

Anonymous session data: retained indefinitely to power leaderboards. You can request deletion at any time (see §8).
Purchase records: retained for the duration required by applicable tax and accounting law, with your identity pseudonymised upon account deletion.
Support messages: deleted after 12 months or when your issue is resolved, whichever comes first.
Crash reports: automatically purged by Sentry after 90 days.

7. Your rights

Depending on where you live (EU/EEA under GDPR, California under CCPA, or elsewhere), you may have the right to:

Access the data we hold about you.
Correct inaccurate data.
Delete your data (see §8).
Port your data in a machine-readable format.
Object to or restrict certain processing.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Account and data deletion

You can delete your account and data at any time from within the app: Settings → Delete Account. This:

Removes your profile and display name.
Anonymises your leaderboard entries (score is retained but display name is removed).
Deletes your active game rooms.
Retains pseudonymised purchase records for tax and refund purposes (your identity is replaced with an irreversible hash).

Deletion is processed immediately. The pseudonymised purchase record cannot be re-linked to you.

9. Children's privacy

Trivia Blitz is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

10. Security

We use industry-standard measures including TLS encryption in transit, row-level security in our database, and regular dependency audits. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy as the app evolves. We will note the "last updated" date at the top. For material changes, we will display a notice in the app. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

Questions or concerns? Email us at [email protected].