Privacy

This notice covers the website quizyou.fun and the browser edition of the game at quizyou.fun/app. Everything that works the same way in the browser as it does in the app – account, progress, leaderboard, analytics, deletion – is covered by the full QuizYou privacy policy, which also names the controller and sets out your rights.

GuruSense UG (haftungsbeschränkt), Eichelsheimer Straße 5, 68163 Mannheim, daniel.defiebre@gurusense.de. Full details are in the legal notice.

These pages are static and are served through Firebase Hosting (Google Ireland Limited). This produces the usual server logs (IP address, time of access, address requested, volume of data transferred, browser identifier). The legal basis is Art. 6 Abs. 1 lit. f DSGVO (GDPR) – without this processing a page simply cannot be delivered.

The website runs no analytics tools, no advertising tools and no third-party embeds. The fonts are hosted on our own server; no connection to a font service is opened. That is also why there is no consent banner here: there would be nothing to consent to.

Playing at /app means using the same application as on a phone. On top of what the app privacy policy describes, the browser adds the following processing:

reCAPTCHA Enterprise (abuse protection)

To keep our database from being scraped by third-party scripts, the browser identifies itself with a Firebase App Check token. Google issues that token through reCAPTCHA Enterprise and processes the browser IP address and interaction data for this purpose. On a phone, Play Integrity and App Attest do the same job. Legal basis: Art. 6 Abs. 1 lit. f DSGVO (protection against abusive use).

Purchases through Stripe (RevenueCat Web Billing)

There is no app store in the browser to handle billing. Additional categories are therefore paid for through RevenueCat Web Billing, with the payment processed by Stripe. You enter your payment details with Stripe alone – we never see them. All that comes back to us is the information that a purchase took place, together with a purchase identifier. Legal basis: Art. 6 Abs. 1 lit. b DSGVO (performance of a contract).

You provide your email address during checkout. It is needed to send you your receipt and to keep your purchase accessible to you; it is stored with RevenueCat and Stripe. We retain the receipt, the date of purchase and the amount for as long as commercial and tax retention periods run (Art. 6 Abs. 1 lit. c DSGVO, §§ 147 AO, 257 HGB – the German Fiscal Code and the German Commercial Code).

The processors are RevenueCat, Inc., 234 Front St, San Francisco, CA 94111, USA, and Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. For transfers to the USA we rely on the European Commission’s standard contractual clauses.

Error reports (Sentry)

If something crashes, an error report goes to Sentry – the error message, the call stack, the program version and the last few steps taken in the program. The report contains no game content and no names. Sentry processes the data for us within the EU (ingest address ingest.de.sentry.io). Legal basis: Art. 6 Abs. 1 lit. f DSGVO (error-free operation).

Storage in the browser

The game stores in your browser what it needs in order to run: your name and your settings, the questions it loaded most recently and the game characters it has drawn. This uses your browser’s local storage and cache storage rather than cookies, and the data never leaves your device. You can remove it at any time through your browser settings (“clear site data”). This storage is strictly necessary for the service you have expressly requested (§ 25 Abs. 2 Nr. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act) and therefore requires no consent.

If you send messages after a duel, we process the message text, sending time and both participants’ user IDs. The server records membership of that specific game so that only its participants can read and report messages and block their partner, including after someone has left the lobby.

We do not include message text in our analytics events or error logs.

Accepted messages and the participant record are deleted at the first nightly cleanup after three days have passed since the conversation’s first accepted message. Reports retain the original text and the sender’s and reporter’s IDs for support review; they are deleted at the first nightly cleanup after 30 days. Deleting an account also removes the related conversations and reports.

Access, rectification, erasure, restriction, data portability and objection – the details and how to exercise them are set out in the full privacy policy. An informal message to daniel.defiebre@gurusense.de is all it takes.