Privacy Policy

We collect the following, depending on how you use Quizpato:

• Account data — your email address and sign-in details, handled by our authentication provider (Supabase). You can sign up with an email and password or, where available, with Google; if you use Google, we receive your email address from Google. Passwords are stored by that provider, never by us in plaintext.
• Profile data — a pseudonymous alias (generated for you, and you can change it), the categories you pick as favorites, your settings (such as your daily goal and notification preferences), and your time zone, so streaks and daily goals roll over at your local midnight.
• Profile image — optional. If you upload one, we store it in our file storage (Amazon Web Services) and you can remove it at any time.
• Gameplay data — the questions you answer and whether you got them right, your scores, XP, streaks, rating, league placement, achievements, and progress per category.
• Question feedback — if you vote on a question or report one as wrong or unclear, we store your vote or report (and any note you add) so we can fix the content.
• Contact messages — the name, email address, and message you send through our contact form.
• Push notification data — if you turn on push notifications, we store the push subscription your browser gives us (an endpoint URL and encryption keys from your browser's push service, such as Google, Mozilla, or Apple), plus your notification preferences and language, so we can send the reminders you asked for (like a streak reminder). This is off until you enable it, and we delete it when you turn push off or your browser revokes it.
• Usage and device data — pages viewed, actions taken (for example, starting or finishing a quiz), the page that brought you to us, approximate location (from your IP address), and browser and device information, collected through analytics tools and similar technologies.
• Error data — if something breaks, technical details about the error (such as the page, browser, and stack trace) may be sent to our error-monitoring provider.

• Run the game — score your answers, keep your streaks, XP, rating, leagues, and achievements, and show your progress.
• Personalize — favor the categories you picked when choosing questions and suggestions.
• Notify you — send the reminders and updates you choose to receive, in the app and, if you turn them on, as browser push notifications. You can turn them off at any time in your notification settings or your browser.
• Communicate — answer your messages and send service emails such as account confirmation and password-reset links. We don't send marketing emails.
• Improve — understand how the Service is used, which content people enjoy, and fix questions that players report.
• Security and fair play — prevent abuse, spam, and cheating, and keep leaderboards fair.
• Legal — comply with applicable law.

Quizpato is a game with leaderboards, so some of your activity is visible to other players:

• Leaderboards and leagues show your alias, your profile image (if you added one), and your scores or rating. They never show your email address.
• Public profile — off by default. If you turn it on, a page at quizpato.com/u/<your-handle> shows your alias, your profile image, the date you joined, and whichever of these you choose to display: your progress by category, your rating, your streak, and your achievements. Anyone with the link can view it, it may be linked from leaderboards, and search engines may index it. It never shows your email address. You can change what it shows, or make it private again, at any time in your profile settings.

We use cookies and browser storage for essential functions (keeping you signed in, remembering your theme and a few display choices) and for analytics. Our analytics providers are Mixpanel and Google Analytics, which help us understand how the Service is used. We filter out automated traffic, so analytics doesn't run for the bots and crawlers we detect. When you are signed in, we link analytics events to your account ID, and we share your email address and alias with Mixpanel so we can understand usage per account.

You can control cookies and site data through your browser settings; blocking some of them may affect how the Service works.

Our stories and questions are drafted with the help of AI (OpenAI) from public sources, such as Wikipedia, and are checked before they're published. No information about you is sent to OpenAI: the AI only works with public reference material, never with your account, answers, or messages.

We do not sell your personal information, and we don't show ads. We share information only with:

• Service providers who process data on our behalf — hosting (Vercel), database and authentication (Supabase), file storage and content-generation infrastructure (Amazon Web Services), analytics (Mixpanel and Google Analytics), error monitoring (Sentry, when enabled), and your browser's push service if you turn on push notifications. They may use the data only to provide their services to us.
• Other players — only what's described in "What other players can see" above.
• Legal and safety — when required by law or to protect our rights, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data.

We keep your information while your account is active and as needed to provide the Service. Contact messages are kept as long as needed to handle them. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or fraud-prevention purposes. See our Data Deletion page for details.

Quizpato is operated from Costa Rica and uses providers that may process data in other countries, including the United States. Where required, we rely on appropriate safeguards for cross-border transfers.

Depending on where you live — for example, under Costa Rica's Law No. 8968 on the Protection of Individuals with Regard to the Processing of Their Personal Data, the GDPR, or similar laws — you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit your alias, profile image, favorite categories, public profile, and notification settings in your account at any time.

To exercise these rights, email hello@quizpato.com or use our contact form at www.quizpato.com/contact. We may need to verify your identity before acting on a request.

Quizpato is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child under 16 has created an account, contact us and we'll delete it.

We use technical and organizational measures to protect your data, including encryption in transit, access controls, private file storage, and least-privilege database access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this policy from time to time, for example when we add a feature. We will change the date above and, for material changes, provide a more prominent notice. Continued use of the Service after changes take effect means you accept the updated policy.

Questions about privacy? Contact Quizpato — email hello@quizpato.com or use our contact form at www.quizpato.com/contact.