Privacy policy

1. Data controller

The data controller for the processing of personal data on this website is:

We are not required to appoint a data protection officer (DPO) under Article 37 GDPR.

2. What information do we collect?

When you use QuizBold, we may collect the following types of personal data:

• Account information: If you create an account, we store your name, email address and, where available, the profile picture from the social login provider (Google, Meta Platforms Inc. (Facebook) or Apple Inc.). If you use Apple’s Hide My Email feature, we only receive an anonymous relay address from Apple and not your real email address.
• Game data: Your answers, scores, statistics and achievements in the game.
• Technical information: Information about your device, browser and IP address for technical and security purposes. IP addresses are used solely for security and error logging in our own application data, and are deleted or anonymised within 30 days at the latest unless there is a specific security incident. IP addresses may also appear in technical logs held by our hosting and infrastructure providers (for example Vercel), which process that information as data processors in accordance with their own documented logging and deletion policies.
• Pseudonymised device identifier: A technically derived identifier based on the characteristics of your device and browser (for example the browser’s “user agent” and what are known as “client hints”). The identifier does not contain your IP address and cannot be attributed directly to you as an individual. It is used to ensure fair play and prevent abuse (for example multiple accounts), and is deleted when you delete your account.
• Cookies: We use cookies to improve your experience. See section 6 for more information.

3. Purposes of the processing

We process your personal data for the following purposes:

• To provide and improve our service
• To administer your user account
• To show your scores on leaderboards (your username and score may be visible to other users of the service, and your email address is never shown). Leaderboards are an integral part of the game experience and cannot be opted out of without deleting the account.
• To enable social features such as friend lists (when you use social features, your username and game-related data may be visible to the users you choose to interact with)
• To send in-app notifications about your achievements and activity (for example friend requests, daily highlights). These notifications are part of the service’s core functionality and are not sent by email or push without your consent.
• To analyse use of the service with PostHog and Vercel Analytics (only with your consent)
• To monitor and improve the stability of the service through error tracking (Sentry) under our legitimate interest
• To ensure fair play and prevent abuse through pseudonymised device identification under our legitimate interest

4. Legal basis

We process personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent (Article 6(1)(a)): For analytics cookies.
• Performance of a contract (Article 6(1)(b)): To provide the service you asked for by creating an account, including recording your answers and statistics, showing scores on leaderboards, social features and in-app notifications. The use of necessary cookies to deliver the service also rests on this basis.
• Legitimate interests (Article 6(1)(f)): To improve our service, to protect against abuse (including pseudonymised device identification for anti-cheating), and to monitor the stability of the service through error tracking. Error tracking (Sentry) and device identification collect only technical information that cannot be attributed directly to an identifiable person.

5. Data retention

We retain your personal data for as long as you have an active account with us. If you delete your account, your personal data will be deleted within 30 days unless we are required by law to keep it longer.

Anonymised game data may be retained indefinitely for statistical purposes once it can no longer be attributed to an identifiable person.

You can delete your account yourself, both in the app and on the website. See the guide to deleting your data.

6. Cookies

We use cookies and (depending on the feature) similar technologies for the following purposes:

• Necessary cookies: To remember your login status and preferences (for example theme).
• Functional cookies: To save your game state and progress.
• Analytics (only with consent): We use PostHog and Vercel Analytics to understand how users use our service. These tools are only activated once you give your consent via the cookie banner. No analytics cookies or data are collected before you have accepted.

Necessary cookies are used to deliver the service and do not require consent.

You can change your cookie preferences at any time via this page, the cookie banner or your browser settings. Analytics is only activated once you give your consent.

7. Security

We use appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or misuse. This includes:

• Encryption of data in transit (HTTPS/TLS)
• Access control for databases and systems
• Regular security updates of our systems
• Use of secure authentication methods

8. Sharing of data

We share your personal data with the following categories of recipients:

Hosting providers may keep technical operational and security logs, which may contain IP addresses and which are retained in accordance with their documented log retention policies.

• Hosting providers: Our data is hosted on Supabase and Vercel, which process data in accordance with the GDPR and with whom we have entered into data processing agreements.
• Authentication providers: Google, Meta Platforms Inc. (Facebook) and Apple Inc., if you choose to sign in via those services.
• Email provider: Resend (Plus Five Five, Inc.), which sends the email notifications you have turned on yourself and therefore processes your email address. We do not use Resend for marketing.
• Analytics providers: PostHog (EU-hosted) and Vercel Analytics, which process usage data (only with your consent). No analytics data is sent before you have given consent.
• Error tracking: Sentry (EU-hosted), which receives technical error information to help us identify and fix problems. Sentry does not collect personally identifiable information and runs under our legitimate interest in ensuring the stability of the service.

We never sell your personal data to third parties.

9. Transfers to third countries

Some of our data processors are located outside the EU/EEA (for example the USA). In those cases we ensure an adequate level of protection, typically through the European Commission’s standard contractual clauses or by using providers certified under the EU-US Data Privacy Framework.

10. Your rights

You have the following rights under the GDPR:

• Right of access: You can be told what information we process about you.
• Right to rectification: You can have inaccurate information corrected.
• Right to erasure: You can ask to have your information deleted.
• Right to restriction: You can ask us to restrict the processing of your information.
• Right to data portability: You can receive your information in a machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: You can withdraw a consent at any time.

To exercise your rights, please contact us at kontakt@quizbold.dk.

You can exercise the right to erasure straight away without contacting us: how to delete your data.

11. Complaints

If you are unhappy with our processing of your personal data, you have the right to lodge a complaint with:

12. Children and age limit

QuizBold is not directed at children under 13, and we do not knowingly collect personal data from children below that age. If you are a parent or guardian and become aware that your child has given us personal data, please contact us so we can delete it.

In Denmark the digital age of consent is 13.

13. Changes to this policy

We may update this privacy policy from time to time. In the event of material changes we will inform you by email or by a notice on our website. We recommend that you review this page regularly to stay up to date.

14. Contact

If you have questions about this privacy policy or our processing of your personal data, you are welcome to contact us: