QUIZR Privacy Policy
This is a translation of the French version, which is the original text. The French version prevails. Lire la version française
QUIZR is a competitive quiz game for mobile. This page explains what data we collect, why, who we share it with and how to exercise your rights. We collect the minimum needed to run the game, sell in-app purchases and show the ads of the free version.
1. Who is responsible for your data
QUIZR is published by Mathias FOUCAULT, sole proprietor (entrepreneur individuel, EI), 8 Rue de la République, Bureau 3, 13001 Marseille, France, who is the controller of your data. Full identity: legal notice (in French).
Contact: support@playquizr.app
2. The data we collect
When you create an account:
- Your e-mail address (sign-in by e-mail code, by Google or by Apple).
- Your username and your friend code.
- Your profile photo, if you choose to add one.
Your language and your country:
- The app language (French, English or Brazilian Portuguese). It follows the language of your phone; you can change it at any time in Settings → Language. It is saved on your account and is used to choose the language of the questions and the opponents you are matched with. It is not shown to other players.
- Your country. When you sign in, the app reads the time zone set on your phone (if no time zone can be read, the region of your phone's language) and deduces a country from among those supported by QUIZR. Only this country is sent to our servers: the time zone is neither sent nor stored. The country is saved once on your account and is then no longer changed automatically. If your time zone does not match any supported country, no country is saved and no flag is shown. This is not a precise location: QUIZR uses neither GPS nor your IP address to determine it.
- Your country is shown publicly as a flag next to your username, see section 6.
When you play:
- Your matches: questions asked, answers, response times, scores.
- Your progress: ranks by theme, rank points, level, experience, Season Pass progress.
- Your items: Boosters, boosts, Fragments, frames, banners, titles and reactions; for subscribers, the monthly gifts collected (month and contents).
- Your preferences: favorite themes, last theme played, date of last sign-in.
When you use the social features:
- Your friends list and your friend requests.
- The messages you send to your friends.
- The players you block and the reports you make.
If you allow notifications:
- Your device's notification token (a technical identifier created by Apple, or by Google on Android, passed on by the Expo notification service), the device type (iPhone or Android) and the date the token was registered. It is used only to tell you when a friend challenges you, sends you a friend request or writes to you. At most 5 devices per account.
- The queue of notifications to send: who triggered it, the type of event and the sending date.
- You can turn notifications off at any time in your phone's Settings. The token is deleted when you sign out or delete your account.
When you make an in-app purchase (see section 4):
- The product purchased, the date, the App Store transaction identifier, the status of your subscription (active, renewed, cancelled, refunded) and its end date.
- We never receive your bank details: payment is handled entirely by Apple.
When you see an ad (free version, see section 5):
- Your consent choices (choice window at first launch).
- The data that Google AdMob receives to serve and measure ads: IP address (from which Google infers an approximate location, at city or region level), technical identifiers of the device and of the app installation, device model and system, language, app version, ads displayed and your interactions with them, ad delivery performance data (details in section 5).
- For rewarded ads: the reward chosen, the date and the identifier of the ad watched, to credit you and apply the daily limits.
When you write to us:
- Bug reports (category, description, app version, device).
- The e-mails you send to our contact addresses.
When the app crashes or encounters an error, it automatically sends us a diagnostic and performance report, through our provider Sentry (Functional Software, Inc., data hosted in the European Union):
- The technical description of the error and the place in the code where it occurred.
- The app version, the device model and the system version.
- The last technical steps of the app before the error.
- A random identifier created when the app is installed, used only to count the devices affected by the same bug.
These reports contain neither your e-mail, nor your username, nor your photo, nor your account identifier: they are not linked to your identity. They are used only to fix bugs.
Anonymous usage statistics. To understand where new players stop and to improve the game, the app sends usage statistics to our provider PostHog (PostHog, Inc., data hosted in the European Union):
- The sign-up and introduction screens you see.
- When a sign-in with Apple or Google starts, succeeds or is cancelled.
- The username step: shown, refused (with the rule that was not met, never the username you typed) or confirmed.
- Your matches: start of your first match, end of each match (mode, player or bot opponent, theme, result).
- Opening the offers screen, opening a Booster (rarity obtained) and your answer when asked to turn on notifications.
- App opens.
- Technical information: app version, operating system and version, device type, screen size, phone language and time zone.
These statistics are anonymous: they are never linked to your account. They do not contain your email, your username, your account ID, your messages, anything you type or your location, and the app never records your screen. They are grouped by a random identifier created by the app on your phone, renewed at least every 13 months and each time you sign out. Your IP address is technically received when the data is sent, but it is not used to locate you and it is not kept. They are never used for advertising and are never combined with any other data. You can turn them off at any time in the app: Settings → USAGE STATISTICS.
QUIZR does not ask for your phone's location and collects neither your precise position (GPS), nor your contacts, nor your microphone, nor your camera. Only an approximate location (city or region), inferred from your IP address by Google AdMob, is used to serve and measure ads (section 5). We never sell your data.
3. Why we use it
- To run the game: sign you in, organize matches, calculate your scores and ranks, display leaderboards, manage your items and your friends (performance of the service you request).
- To offer you the questions in your language and match you with compatible opponents, using the app language (performance of the service you request).
- To display your flag next to your username, so that the players in a duel, a leaderboard or a friends list can see where each person plays from (legitimate interest: giving an international dimension to a competitive game, using only the country and no precise location).
- To deliver your purchases: activate your subscription, credit your Boosters and your founder pack, restore your purchases, process refunds (performance of the contract); to keep the sales history (accounting and legal obligations).
- To show the ads of the free version, only non-personalized ads, measure their delivery, and credit you the rewards of the ads you choose to watch (your consent choices apply, see section 5).
- To protect players: process reports, block abusive behavior, prevent cheating and fraud in purchases or rewards (legitimate interest).
- To improve the game: fix bugs and monitor the app's performance (notably through crash reports), measure the difficulty of questions from players' answers (legitimate interest).
- To send you the notifications for the social features you have allowed (your consent, given in your phone's permission window).
- To answer you when you contact us.
4. In-app purchases
QUIZR+ and QUIZR+ PREMIUM subscriptions, the founder pack and Booster packs are bought only with your Apple account, through the App Store. Apple collects the payment and sends you the receipt; its own privacy rules apply to this data (apple.com/legal/privacy).
To know what you have bought, we use RevenueCat (RevenueCat, Inc., United States). RevenueCat receives your QUIZR account identifier, your App Store transaction information (product, date, price, store country, renewals, cancellations, refunds) and technical information about the device and the app. It then passes these events on to us to activate or remove your benefits. RevenueCat receives neither your e-mail nor your username.
The terms of sale (prices, renewal, cancellation, refunds) are detailed in our terms of use.
5. Advertising and consent
The free version of QUIZR shows ads provided by Google AdMob: an ad after every 3rd completed game (never during a game), and rewarded ads that you choose to watch. QUIZR+ and QUIZR+ PREMIUM subscribers and founder pack holders see no forced ads.
QUIZR shows only non-personalized ads, for all players and whatever their age: they are not chosen based on your profile or your activity in other apps or on other sites. QUIZR does not display Apple's app tracking prompt (ATT), does not use your device's advertising identifier (IDFA) and does not track you from one app to another.
- Choice window (Google UMP). At first launch, before any ad, and if the regulations of your country require it (as is the case in the European Union), a Google window asks for your agreement to the use of data for advertising purposes, for example storing information on your device and measuring ads. You can accept everything, refuse everything or choose purpose by purpose. Your choices are saved on your device. Depending on your choices, Google shows non-personalized or limited ads.
- Change your mind at any time: in the app, Settings → Manage my privacy choices.
- Rewarded ads. When you watch a rewarded ad to the end, Google notifies our server directly with the ad identifier and a single-use token created for your request; this message is what credits your Booster, your Fragments or your season XP. The app cannot grant itself a reward.
What Google AdMob receives, to serve and measure ads:
- your IP address, from which Google infers an approximate location (city or region); QUIZR never passes it your phone's GPS position;
- technical identifiers of the device and of the app installation, excluding Apple's advertising identifier (IDFA);
- advertising data: the ads requested and displayed, and your interactions with them (click, watching a rewarded ad to the end);
- performance data: loading times, delivery errors, technical information about the app and the device.
For serving and measuring ads and fighting fraud, Google acts as a separate controller. Its rules: how Google uses data from sites and apps that use its services. The ad categories for gambling, dating, alcohol and politics are blocked in QUIZR.
6. Who can see your data
Other players see your username, your photo, your flag, your ranks, your equipped items and your position in the leaderboards. Only your friends see your messages and your last sign-in. Your purchases are visible to no other player, except the items you choose to equip.
Flag: the flag of your country is shown next to your username, publicly, in duels (face-off screen and results), leaderboards, friends and recent players lists and friend rooms, including to players who are not your friends. Only the country is visible, never the time zone or a more precise location. With no country saved (see section 2), no flag is shown. Your app language is not shown to other players. You can ask for your flag to be removed permanently (see section 8).
Recent players: in the “Recent” tab of the Friends screen, each player sees the last 10 players they faced (ranked games and friend matches). If you are among a player's last 10 opponents, they see your username, your photo, your frame, your title, as well as the theme and result of your last match against them, and can send you a friend request or report you. You never appear in the Recent list of a player you have blocked or who has blocked you, nor after your account is deleted.
Our technical providers, only to run the service:
- Supabase (hosting of the database and accounts);
- Google and Apple (if you choose to sign in with them);
- Apple (payment for in-app purchases, through the App Store);
- RevenueCat (tracking of purchases and subscriptions);
- Google AdMob and the Google UMP consent platform (advertising in the free version);
- Cloudflare (website and e-mail reception);
- Resend (sending of e-mails);
- Expo (650 Industries, Inc., United States), with Apple and Google (sending of notifications);
- Sentry (crash reports, hosted in the European Union).
Some of these providers process data outside the European Union, notably in the United States; they then do so with the safeguards provided for by the GDPR (adequacy decision, including the EU–US Data Privacy Framework, or standard contractual clauses).
7. How long we keep it
- Your account and game data: as long as your account exists.
- Your app language and your country: as long as your account exists, then deleted with it. The country is saved only once; your phone's time zone is never kept.
- When you delete your account, your personal data is deleted. Some match data may be kept in anonymous form (with no link to you) for the game's statistics.
- Purchase history: as long as your account exists, then, after its deletion, detached from your account, for a maximum of 10 years (accounting, refunds, number of founder packs sold). Deleting your account does not cancel a subscription in progress: cancel it in iPhone Settings.
- The rewarded ads log: deleted with your account.
- The data received by Google AdMob: kept by Google under its own rules (see the link in section 5); we have no access to it.
- Your advertising consent choices: on your device, until you change them or delete the app.
- Reports and bug reports: the time needed to process them, then at most 1 year.
- Crash reports: at most 90 days.
- The notification token: until you sign out of the device, delete your account, or as soon as Apple or Google tells us it is no longer valid. The notification queue: at most 7 days.
- Waitlist data: see section 11.
8. Your rights
You can at any time access your data, correct it, delete it, object to its use, request a copy of it, and change your advertising consent choices (Settings → Manage my privacy choices).
- Delete your account: directly in the app: Settings (gear icon) → Delete my account, or by e-mail to support@playquizr.app from your account's address. See also playquizr.app/delete-account (in French).
- Change the app language: Settings → Language.
- Correct your country (for example if your phone's time zone does not reflect your country): the country cannot be changed in the app; write to support@playquizr.app from your account's address, stating the country to display, and we will correct it.
- Remove your flag: write to support@playquizr.app from your account's address; we will remove it permanently. No flag is then shown next to your username and it is never restored automatically.
- Any other request: support@playquizr.app. We reply within 30 days.
- You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority. If you live in Switzerland, Luxembourg or Canada, you have equivalent rights: write to us at the same address, or contact the data protection authority of your country.
Your rights outside France
QUIZR's publisher is based in France. Wherever you live, you can exercise the rights described above by writing to support@playquizr.app; we reply within 30 days. You can also contact the data protection authority of your country:
- United Kingdom: you have the rights provided by the UK GDPR and the Data Protection Act 2018. You can lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.
- Portugal and other European Union countries: the GDPR applies. In Portugal, you can lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD): cnpd.pt. In another EU country, with your national authority (list of authorities), or with the CNIL.
- Brazil: the General Data Protection Law (LGPD, Law No. 13,709/2018) gives you in particular the right to confirm that processing exists, to access your data, to have it corrected, to request the anonymization, blocking or deletion of unnecessary or excessive data, portability, to be informed about data sharing and to withdraw your consent. You can lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD): gov.br/anpd.
- Other countries: you benefit from the rights that the law of your country grants you. Write to us at the same address, or contact the data protection authority of your country.
9. Minimum age
QUIZR is intended for people aged 13 and over. In France, if you are under 15, a parent's consent is required to create an account. In-app purchases go through the Apple account: a parent can block or approve them with Family Sharing and Screen Time. Ads are non-personalized for all players, whatever their age.
10. Changes
If this policy changes, we will update this page and its date. In case of an important change, we will notify you in the app.
11. Waitlist
If you sign up for the waitlist on playquizr.app to be notified when QUIZR is available on your phone, we record:
- your e-mail address and your phone type (iPhone or Android);
- your optional answer to “How did you hear about us?”;
- the language of the site at the time of signing up (French, English, Spanish or Brazilian Portuguese), so that we can write to you in that language;
- where your visit came from, when known: the campaign parameters of the link that brought you to the site (utm_source, utm_medium, utm_campaign) and the address of the page you came from (referrer);
- the date of your sign-up and that of your confirmation.
This data is used only to send you the confirmation e-mail and, if needed, its reminder, then the welcome e-mail, and to count sign-ups by language and by source (knowing which posts or sites bring in sign-ups). Legal basis: your consent, which you give by submitting the form and then clicking the confirmation link.
After you sign up, we send you a confirmation e-mail. If you have not confirmed your address 24 hours later, we send you a single reminder, with a new link; without confirmation, we write nothing else to you. Each confirmation link is single-use and expires after 7 days; we keep only a non-reversible fingerprint of it. A sign-up that is never confirmed is deleted 30 days after its first link expires. Once your address is confirmed, we send you a single welcome e-mail, according to the phone you indicated. E-mails are sent from contact@playquizr.app by our sending provider Resend (Resend, Inc., United States), which receives your e-mail address only to send them to you.
We keep this data until QUIZR launches on your phone type (iPhone or Android) or until you unsubscribe, then we delete it. To unsubscribe, use the “Unsubscribe” link in every e-mail, including the reminder and the welcome e-mail (your address is deleted immediately), or write to contact@playquizr.app: we delete your address.
To limit abuse, the form is protected against bots by Cloudflare Turnstile (a service of our host Cloudflare, which checks that the sign-up comes from a real browser), and a non-reversible fingerprint of your IP address is kept for at most one hour, with no link to your e-mail. The country of your connection, indicated by Cloudflare, is used only to choose the display language and is not recorded. The list is hosted at Cloudflare. The site uses no cookies and no audience measurement tool: it only keeps in your browser your language choice and, for the duration of your visit, where the visit came from, which is sent to us only if you sign up.