Privacy policy

QuizTavern at quiztavern.com is run by Odd Little Games, a sole trader. For your information on QuizTavern, we're the "data controller", and you can reach us any time at [email protected].

Your account

When you sign up, we store your display name, email address, and password. Your password is kept only as a secure hash, never as the password itself. We also store your timezone, any avatar you upload, and your two-factor or passkey settings if you turn them on. We keep a normalised copy of your email address so one person can't open several accounts.

When you play

We record your answers, how long each one took (measured by our servers), your scores, rating, streak, and league-table positions. If you report a question, we store the report and any note you add.

Playing without an account

If you play without signing in, we put a random identifier in a cookie on your browser, so your results stay together. It isn't linked to your name or email. If you later create an account in that browser, we move those results onto it.

Private quizzes

When you join a quiz in the snug, we store the name you play under and your results in that quiz. If you give an email address so we can tell you when a new round opens, we store that too.

If you connect Patreon

If you link your Patreon account, Patreon sends us your Patreon ID, your membership tier and status, and access tokens so we can keep your supporter features up to date. We never receive your payment card details — those stay with Patreon.

Email delivery

If an email to you bounces, is marked as spam, or you unsubscribe, we keep a record of that address so we stop sending to it.

Technical and security data

When you're signed in, your session stores your IP address and browser type. We also use IP addresses to limit repeated sign-in attempts and to record suspicious requests in our security logs.

Once you've verified your email, anyone can see your display name, avatar, and the results shown on league tables and your player profile, such as your rating and stats. Accounts that haven't been verified aren't shown publicly.

In a private quiz, the name you play under and your scores can be seen by the other people in that quiz. They can also appear on the big screen if the host is running it live.

We never show your email address to other players.

We don't run advertising cookies, and we don't build profiles of you across other sites. The cookies we use are:

• Session and security cookies, which keep you signed in and protect forms from being submitted by other sites.
• A guest cookie (quiztavern_guest), which keeps your results together when you play without an account. It lasts up to a year.
• A quiz-player cookie for each private quiz you join without an account, so the quiz remembers you're one of its players.
• Matomo analytics cookies, whose names start with _pk_, which tell a returning visitor from a new one. We only set these if you accept them.

The first three are essential and are always set. The analytics cookies are optional: we ask the first time you visit, and you can change your mind at any time from Cookie settings in the footer. If you choose "Essential only", we still count the page view, but without a cookie, so we can't tell whether you've visited before. In the Android app we never set the analytics cookies, so there's nothing to choose.

We use Matomo, an open-source analytics tool, to count visits and see which pages are popular. We run it on our own server at stats.oddlittlegames.com, so the data stays with us. It isn't sent to Google or any other analytics provider, and it isn't used for advertising.

Your browser also stores three small preferences for us: whether you picked light or dark mode, whether you've dismissed the prompt to install the app, and your cookie choice. They stay on your device.

You can clear or block cookies in your browser settings at any time. If you block the essential cookies, you won't be able to sign in or keep guest results.

We use your information to:

• run your account, the quizzes, scoring, ratings, and league tables;
• keep the game fair and the site secure — preventing duplicate accounts, limiting sign-in attempts, and checking for unusual play;
• send the emails the site needs — verifying your address, resetting your password, and reminders for private quizzes you've asked to hear about;
• turn on supporter features if you connect Patreon;
• look into question reports and fix wrong questions;
• understand how the site is used, so we can make it better;
• reply when you get in touch, and meet our legal obligations.

Under UK and EU data-protection law, we rely on:

• contract, to provide the account and the game you signed up for;
• legitimate interests, to keep the game fair and secure, to let people play as guests, and for analytics;
• consent, where we ask for it, which you can withdraw at any time;
• legal obligation, where a law requires us to keep records.

We'll only send you marketing email if you've agreed to it, and every one will include a way to unsubscribe.

Your rating is calculated automatically from your results against everyone else's who played the same quiz.

We also run automated checks for unusual patterns — for example, accuracy far above everyone else's on the same questions, combined with answers that consistently arrive late in the time limit. A check only flags an account for a person to review. It doesn't remove results or take any other action on its own. If we do act on a review, you can ask us to explain the decision and to reconsider it.

We don't sell your information. We share it only with the services that help us run QuizTavern, and only as far as they need it:

• Hosting and storage — the servers, database, and file storage that run the site and hold avatars.
• Email — Mailgun sends our emails from its EU region, so it receives your email address and the message.
• Patreon — only if you connect your account, under Patreon's own privacy policy.
• Discord — only if you join our community for support, under Discord's own privacy policy.
• Analytics — no one. We run our own Matomo server.

We may also share information if the law requires it, or to protect the rights and safety of QuizTavern, its players, or others.

We keep your account information for as long as your account is open. You can delete your account at any time from your settings. That removes your account and everything on it, including your scores, streak, rating, and any quizzes you built.

A few things stay after that, for good reason:

• If an address bounced, complained, or unsubscribed, we keep that record so we never email it again.
• Reports you sent stay attached to the question they were about, without your account.
• Totals worked out from everyone's play, such as how many people got a question right, aren't about you and are kept.

Guest results are tied only to the random identifier in your browser. Clear your cookies and they're no longer connected to you. Sign-in sessions expire after a period of inactivity. Analytics data stays on our own Matomo server and we look at it in aggregate. Emails you send us are kept while we're talking and for a reasonable period after.

If you're in the UK or EU, you have the right to:

• access the information we hold about you;
• correct it;
• delete it;
• restrict or object to how we use it;
• move it elsewhere;
• withdraw consent at any time.

You can change your name, email, and avatar, or delete your account, from your settings. For anything else, email [email protected] and we'll respond within the time the law allows.

If you think we've handled your data poorly, you can complain to the UK Information Commissioner's Office at ico.org.uk (opens in a new tab), or to your local data-protection authority.

QuizTavern is intended for people aged 13 and over. We don't knowingly collect personal information from children under 13. If you're a parent or guardian and think a child under 13 has an account or has sent us their information, email [email protected] and we'll delete it.

Some of the services we use, such as Patreon and Discord, may store data outside the UK. Where that happens, we rely on those providers using recognised safeguards, such as standard contractual clauses, to protect your information to a comparable standard.

We take reasonable steps to protect your information:

• the site is served over HTTPS;
• passwords are stored only as secure hashes;
• you can turn on two-factor authentication or passkeys;
• messages from Patreon and Mailgun are checked to prove they're genuine;
• we limit who can access the systems behind the site.

No way of sending or storing data over the internet is completely secure, so we can't guarantee absolute security.

We'll update this page when what we do with your information changes, and revise the effective date. For significant changes, we'll try to give a clearer heads-up on the site or in our Discord.

Questions, requests, or corrections: [email protected]. See also our terms & conditions.