Privacy Policy

Last updated 4 August 2026

QuizCaster is a free web game that turns quizzes into a game, for learners of all ages. It is also made to be friendly and safe for children. This policy explains what information the game collects, how it is used, and the choices families have. It is written for players and, where the player is a child, their parents and guardians. In this policy, "we" and "us" mean the team behind QuizCaster.

The short version

• The game can be played without an account. Progress is then kept in the browser on that device.
• Where Family Profiles are available, a parent or guardian may create an account to back up progress and keep separate profiles for one or more children. A child profile has no email, password, birthdate, or direct messaging.
• We ask for a nickname and game-avatar choices for each child profile. Parents should use a nickname, not a child's full or real name.
• Cloud backup includes game and learning progress. Some review records include question text, correct-answer text, whether the player answered correctly, and response time. We do not send that text, parent account identifiers, or child profile identifiers to our analytics provider.
• We collect gameplay analytics to improve the game. These are not linked to a parent account or child profile. Adult-submitted update emails and feedback are handled as separate events without the analytics device code. Outside Europe we save one random device code in the browser. In Europe we save nothing on the device for analytics.
• We do not sell personal information and do not show third-party advertising in this build.

Information we collect

1. Game data stored on your device

Progress, settings, custom quizzes, selected quizzes, learning history, chosen outfit, and parental-lock configuration are saved in the browser's local storage. Clearing browser data removes this local copy. If a parent enables Family Profiles, the categories listed below may also be backed up to the cloud. Login sessions and the active-profile selection are also stored in the browser so the family does not have to sign in on every visit.

2. Parent accounts and Family Profiles

Family Profiles are optional, are created and controlled by a parent or guardian, and may not be available in every region. A parent can create more than one child profile, called a "spellcaster," under the same account.

For a parent account, we process:

• Login information: the adult's email address, an account identifier, authentication records, and security information needed to operate the login. If the adult uses a password, Supabase Auth processes it and stores a protected password credential, not a readable copy. If the adult chooses Google sign-in, Google may provide Supabase with basic account information such as email, name, Google account identifier, and profile image. QuizCaster uses the email and account identifier to operate the account.
• Account activity: email confirmation status, Family Profiles notice and consent status, last cloud-profile activity, and any inactivity-deletion notice date.

For each child profile, we process:

• Profile details: a parent-entered nickname, a generated profile identifier, color, player-avatar outfit choices, and a small image generated from the in-game character.
• Game progress: progression, statistics, achievements, high scores, run history, earned coins, owned and equipped cosmetics, and related gameplay state.
• Learning progress: study settings, mastery and spaced-repetition state, practice and review history, question and correct-answer text needed for those review features, whether an answer was correct or timed out, and response time. The cloud progress record does not include the exact response a player typed.

Child profiles do not have their own email, password, birthdate, grade, school, or contact feature. The adult signed in to the parent account can see, switch, and manage every child profile under that account. Children using a shared signed-in device can switch among the profiles available on that device.

3. Usage analytics

We use PostHog to see how people play the game and to improve it. We keep gameplay analytics separate from Family Profiles. We do not send PostHog a parent account identifier, child profile identifier, profile nickname, avatar image, question text, correct-answer text, or exact typed response. We do not add a login email to gameplay events. If an adult sends an update email or feedback message on its own, that email or message goes in a separate event. That event does not include the persistent analytics device code. What we store for analytics depends on where the game is played:

• In Europe (EU/EEA, the UK, and Switzerland): analytics use no cookies. We store nothing on your device for analytics. We estimate visitor counts in a way that does not recognize you from one day to the next.
• Everywhere else: we save one random code (a "device code") in your browser's local storage. It is a random number we make up on the spot - it is not a name, email, parent account, or child profile. We use it solely to support the internal operations of the game: measuring whether practicing in the game helps players improve over time, keeping our usage statistics accurate, and debugging. It is not used to contact anyone, not used for advertising of any kind, and not linked to a Family Profile. It is kept separate from email and feedback submissions. If the region check fails, we treat the player as if they were in Europe and store nothing for analytics. The device code can be deleted by clearing browser data.

Which path applies depends on the country of the network connection. A VPN or proxy can make that country look different from where you actually are.

Examples of events we collect:

• How the game is navigated and played - screen views, runs started or ended, quiz and upgrade choices, share link activity, quiz create or delete, and tutorial or parental-lock milestones.
• Gameplay outcomes - time survived, player level, and weapons or upgrades chosen.
• Aggregate learning performance - number correct, average response time, difficulty tier, and content-free question identifiers.
• Context - general subjects practiced, and general device or browser type.

We may add similar product and performance events over time.

We do not collect in gameplay analytics:

• the text of any question
• the specific answers a player gives
• names
• precise location
• parent account identifiers
• child profile identifiers
• profile nicknames
• avatar images

To estimate visitor counts, our analytics provider makes a one-way code (a hash) from technical details such as your IP address and browser type. That code is used only to count visits. It is not stored as a lasting identifier. It is not used to identify you.

4. Feedback you send

If you use the in-game "Feedback" button, the message you type is sent to us so we can read and act on it. Please do not include a child's personal information. For a privacy or account request, an adult may include the email address used for the parent account so we can locate and verify the request.

5. Other adult-provided email uses

• Get Updates: if an adult enters an email to receive occasional product updates, we may use that email to contact them. Marketing preferences are kept separate from child profile data.
• Parental-lock PIN recovery: if a parent sets up the optional Quiz Library lock, they may provide an email used only to help reset a forgotten PIN.

6. Quiz sharing

Custom quizzes remain on the device unless a user chooses a feature that sends them to us (for example a share or challenge link, or an account quiz-library backup). Before we store that text, we run an automated check for prohibited or offensive words in the quiz title, questions, answers, distractors, and any chosen share-card text. If the check fails, we reject the upload and do not store the content. When someone creates a share or challenge link and the check passes, the quiz title, questions, answers, distractors, and any chosen share-card information are sent to our Cloudflare sharing service. Anyone with the link may be able to view or import that content. Do not put personal or sensitive information in a quiz, challenge name, or feedback message.

7. Optional adult support payments

If an adult chooses "Support us," Stripe collects and processes the payment method and related billing information. QuizCaster and its payment service receive the chosen amount, payment status, and transaction identifiers needed to process and account for the payment. Card numbers are collected in Stripe-hosted fields and do not pass through QuizCaster's game code or payment server.

How we use information

• To create and secure parent accounts.
• To create, separate, back up, restore, and sync child profiles and their progress.
• To personalize practice, review, and game features for the selected child profile.
• To provide quiz sharing when a user asks us to create a share link.
• To process optional adult support payments.
• To run, maintain, secure, troubleshoot, and improve the game.
• To understand, in aggregate and anonymously, how features are used.
• To respond to feedback.
• To send account, security, confirmation, recovery, retention, or requested product-update emails to adults.
• To comply with law, enforce our terms, and protect players, the public, and the service.

We do not use information for third-party advertising, and we do not sell or rent personal information.

How information is disclosed

A parent account's information is available to the adult signed in to that account. We do not make child profiles public and do not disclose child profile information for advertising or another company's independent use. We may disclose information:

• To service providers that operate the game for us, under instructions to protect it and use it only to provide their service.
• When a user intentionally creates or opens a public share or challenge link.
• If reasonably necessary to comply with law, respond to valid legal process, enforce our terms, investigate abuse or security incidents, or protect rights and safety.
• As part of a merger, financing, reorganization, or sale of the service, subject to this policy and applicable law.

Service providers

We currently use the following providers. Providers processing information on our behalf are permitted to use it only to provide their service to us, not for their own advertising:

• Supabase - provides parent authentication, account records, database hosting, access controls, and cloud-profile storage and sync.
• Google - provides optional Google sign-in when an adult chooses it. Google's own handling of the adult's Google account is governed by Google's policies.
• Resend - sends adult account confirmation, magic-link, Family Profiles notice and consent, recovery, account-deletion, and inactivity-deletion emails.
• Stripe - processes optional adult support payments and payment information. Stripe's own handling of payment information is also governed by its privacy policy.
• PostHog - processes the gameplay analytics, adult-submitted update emails, and feedback events described above on our behalf.
• Cloudflare - runs our sharing service (when you share or open a shared quiz) and the region check that decides whether the device code described above is allowed. The region check looks only at which country a connection comes from; we do not receive or store your IP address from it. A VPN or proxy can change that country result.
• Vercel - hosts and delivers the QuizCaster website and legal pages.

Hosting, authentication, email, analytics, and security providers may automatically process technical information such as IP address, browser information, timestamps, and request logs to deliver and secure their services. We will update this policy when our provider practices materially change.

Children's privacy

QuizCaster is for players of all ages. Because it is also appealing to and used by children, we minimize the information used for child profiles. Only a parent or guardian creates the account. A child does not receive separate login credentials and is not asked for an email, birthdate, grade, school, phone number, address, or real name.

A parent supplies the profile nickname and controls the profile. Before the first child profile can be created or cloud progress can be written, we email the adult a direct notice describing the child-profile information, why we use it, our service providers, retention, and deletion choices. The parent must open the time-limited link in that email to confirm. We record the date and version of that confirmation.

We do not ask for more child information than is reasonably needed to provide the profile, cloud backup, learning, and safety features. If a future change requires new consent, we will block new cloud writes until the parent receives and confirms the updated notice.

A parent or guardian may review the profile in the game, remove one child profile, use "Delete all family data," or permanently delete the parent account and adult email. Deleting a profile may make cloud backup, cross-device restoration, and personalized learning history unavailable.

Depending on where you live, laws such as the U.S. Children's Online Privacy Protection Act (COPPA) and the EU/UK GDPR (including protections for children) may give you specific rights. Family Profiles are not offered in the EU/EEA, UK, or Switzerland at launch. Local play remains available there.

Security

We use reasonable administrative and technical safeguards designed to protect account and child profile information. These include encrypted network connections, authenticated sessions, database access controls that restrict each account to its own records, limited operational access, and data-minimizing product design. No internet service can guarantee absolute security. Parents should protect their login method, use a unique password when password sign-in is selected, sign out on untrusted devices, and contact us if they suspect unauthorized access.

Data retention

• On-device data: remains until it is cleared through the game or browser settings.
• Child profiles and cloud progress: remain until the parent removes that profile, uses "Delete all family data," or the parent account is deleted.
• Parent login record and email: remain until the account is deleted. "Delete all family data" removes child profiles, cloud progress, and the account quiz library, but keeps the adult login. "Delete parent account" emails the adult a time-limited confirmation link and, after confirmation from the signed-in browser, deletes the adult login record and email together with associated cloud data.
• Inactive Family Profile accounts: after 24 months with no recorded cloud-profile activity, we send the adult a deletion notice. If the account remains inactive for another 30 days, we delete the parent login and associated cloud profiles and account data.
• Analytics: are generally retained for no more than about 24 months, then deleted or de-identified.
• Share links: are generally removed after about 30 days without access. Content that is referenced by a related challenge record may remain longer while that record is active.
• Payment records: are retained by Stripe and, where applicable, by us for transaction processing, accounting, fraud prevention, and legal obligations.
• Feedback and other adult emails: are retained only as long as reasonably needed for the purpose provided, legal obligations, security, or dispute handling.

Your choices and rights

• Play without creating an account.
• Review the child profiles and progress available under the signed-in parent account.
• Remove one child profile or use "Delete all family data" in Parental Controls.
• Use "Delete parent account" in Parental Controls to request a time-limited email confirmation link that permanently deletes the adult login, email, and associated cloud data.
• You can clear on-device data at any time through your browser settings.
• Ask us to access, correct, or delete parent account information, or to stop collecting information for a child profile, through the "Feedback" button. An adult may include the parent account email for verification but should not include child personal information.
• Unsubscribe from optional product updates using the instructions in those emails or ask us to remove the update email.

We may need to verify that the requester controls the parent account before acting. Depending on where you live, you may also have rights to receive a copy of information, object to or restrict certain processing, appeal a request decision, or complain to a privacy regulator. We will not discriminate against anyone for exercising a privacy right, although deleting necessary data may prevent an account feature from working.

Changes to this policy

This is an early ("pre-alpha") product and this policy may change as the game evolves. We will update the date at the top when we make changes. If a change materially affects how existing parent account or child profile information is used, we will provide any additional notice or choice required by law before applying that change.

Contact

For a privacy question, child-data request, or parent-account request, use the "Feedback" button on the main menu. An adult may include the parent account email so we can locate and verify the account. Do not include a child's full name or other personal details.