Privacy Policy
1. Who We Are
Team Quiz is operated by Kadasolutions Hungary Kft., 1139 Budapest, Kartács utca 24-26. 1. em. 15., Hungary ("we", "us"). We are the data controller for the personal data described in this policy, except where we act as a processor on a host's behalf — see the Data Processing Agreement.
Questions or requests: [email protected].
2. What Data We Collect
Account data. Your email address, name, and optionally a username, display name and profile image. If you register with a password, we store a salted hash of it — never the password itself. If you sign in with Google, we store the identifiers and tokens Google returns for your account, plus the email and profile data of the Google account. If you tick the marketing email box when registering, we record your choice and when you made or changed it.
Guest players. If you join a game as a guest, we create a temporary anonymous account holding only the display name you type. No email address is collected.
Quiz and game data. Quizzes, questions and answer options you author; games you host or join; the answers you submit during a game, your scores, and timing data. In SMART quizzes, the free-text inputs players give to collection prompts are stored and used as input for question generation within that game.
Billing data. Your plan, credit balance and usage records, plus the customer and subscription identifiers assigned by Stripe. Card numbers are entered directly into Stripe and never reach our servers.
Technical data. For each active session, the IP address and browser user agent, so you can see and revoke your own sessions. Our servers also produce operational logs (request paths, timestamps, error traces) used for debugging and abuse prevention.
Usage data. If you accept analytics cookies, we record how you use Team Quiz: pages viewed, clicks, device and browser type, approximate location, and session recordings of your screen in which text typed into form fields is masked. IP addresses are not stored. If you accept marketing cookies, the Meta Pixel reports page views and sign-ups to Meta. If you decline, we only count visits without cookies (see the Cookie Policy).
Error reports and product events. Independently of cookies, our servers send error reports and a small set of product events (sign-up, email verification, quiz created, lobby created, game finished) to PostHog, linked to your account ID. We use them to fix bugs and to see whether the product works.
3. Why We Process It, and On What Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating your account, hosting and playing games | Performance of a contract (1)(b) |
| Sending verification, password reset and magic-link emails | Performance of a contract (1)(b) |
| Processing payments and keeping accounting records | Contract (1)(b), legal obligation (1)(c) |
| Keeping the service secure, preventing abuse | Legitimate interests (1)(f) |
| Sending marketing emails (only if you opted in) | Consent (1)(a) |
| Answering support requests | Legitimate interests (1)(f) |
| Error reports, product events, cookieless visit counts | Legitimate interests (1)(f) |
| Product analytics and session replay (PostHog, Google Analytics) | Consent (1)(a) |
| Measuring and optimising our ads (Meta Pixel) | Consent (1)(a) |
We do not sell your data, and we do not use it for profiling or automated decision-making with legal effect. With your consent, the Meta Pixel lets us measure and optimise our ads on Meta's platforms.
4. AI Features
When you use AI-assisted generation, the topic, prompt and instructions you provide are sent to our LLM provider (Google Gemini) to produce questions or images. We do not include player names, email addresses or game results in those requests, and under the Gemini API terms your prompts are not used to train Google's models. Details and links are on the Subprocessors page.
AI output can be wrong. You are responsible for reviewing generated content before you publish a quiz.
5. Cookies
We set the cookies needed to keep you signed in, protect against cross-site request forgery, and remember your language. Analytics cookies (PostHog, Google Analytics) and marketing cookies (Meta Pixel) are only set with your consent, which you can change or withdraw at any time via Cookie settings in the footer or, when signed in, in your account menu. See the Cookie Policy.
6. Who We Share Data With
We share data only with the processors we use to run the service — hosting, AI generation, payments, transactional email and product analytics. Each is listed, with its purpose and location, on the Subprocessors page, and each is bound by a data processing agreement.
Meta. If you accept marketing cookies, Meta Platforms Ireland Ltd. receives data from the Meta Pixel (page views, sign-up events, browser and device information, and cookie identifiers). For collecting and transmitting this data, we and Meta are joint controllers under Art. 26 GDPR, as set out in the Meta Controller Addendum. Meta is solely responsible for its further processing, described in Meta's Privacy Policy. You can exercise your rights against either of us.
We may also disclose data where we are legally required to do so, or to establish or defend legal claims.
7. International Transfers
Our infrastructure and database run in the EU. Some processors (for example Stripe, Google Analytics and, depending on region, the Gemini API) may process data in the United States, and Meta may transfer Pixel data there. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
8. How Long We Keep Data
- Account data: until you delete your account, then removed from live systems within 30 days.
- Quiz and game data: as long as the owning account exists; deleting a quiz or game deletes its questions, participants and answers.
- Guest accounts: kept with the game they were created for, and removed with it.
- Sessions: until they expire (30 days) or you revoke them.
- Billing and accounting records: 8 years, as required by Hungarian accounting law.
- Operational logs: short-lived, typically no more than 30 days.
- Session recordings: 30 days.
- Analytics data (PostHog, Google Analytics): according to the retention period configured in each tool, after which it is deleted.
- Meta Pixel data: according to Meta's own retention rules, see Meta's Privacy Policy.
9. Your Rights
Under the GDPR you may request access to your data, correction of inaccurate data, erasure, restriction of processing, a portable copy, and you may object to processing based on our legitimate interests. Most of this is available directly in your account settings; for anything else, email [email protected] and we will respond within one month.
Where we rely on your consent, you can withdraw it at any time: for cookies via Cookie settings in the footer or your account menu, for marketing emails in your account settings, via the unsubscribe link in each email, or by contacting us. Withdrawal does not affect processing that took place before it.
If you believe we handle your data unlawfully, you can lodge a complaint with the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
naih.hu · [email protected]
You may also complain to the supervisory authority of your own country of residence.
10. Security
Traffic is encrypted with TLS. Passwords are stored as salted hashes. Access to production data is limited to the people who need it, and the database and file storage sit in EU regions of Google Cloud Platform with access control and encryption at rest. No system is perfectly secure; if a breach affects your personal data, we will notify you and the supervisory authority as required by Art. 33-34 GDPR.
11. Children
Team Quiz is not intended for children under 16. If you are under 18, you need consent from a parent or guardian to use the service. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this policy as the service changes. The date at the top reflects the latest revision, and we will notify account holders of material changes by email or in the app before they take effect.