Privacy Policy

Scope & who we are

This Privacy Policy describes how Friend Quiz (“we”, “us”) handles information when you use the website at https://friendquiz.org/ (the “Service”). It applies to visitors, quiz creators, and players who interact with the Service directly - not to third-party apps or sites you visit after you leave.

Where local privacy laws apply, they may give you extra rights; we aim to honor valid requests consistent with law. If anything in this policy conflicts with a mandatory rule where you live, the mandatory rule wins for you.

What we intentionally don’t want you to submit

The Service is not designed for confidential, regulated, or high-risk data. Please do not include in quizzes, nicknames, messages to us, or anywhere on the Service: government ID numbers, payment card data, account passwords, precise location histories, health diagnoses, genetic data, racial/ethnic origin, political opinions, union membership, religious beliefs, sexual life/orientation (beyond what you casually choose to type), criminal records, or children’s personal data beyond what’s reasonably needed for casual play.

If you submit such information anyway, you understand we may delete it, restrict processing, or disable related content where necessary to reduce risk.

Categories of information we collect

Depending on how you use the Service, we may collect:

• Quiz & gameplay data: display names or nicknames, quiz prompts and answer choices you configure as creator, responses and scores from players, session identifiers, and related metadata needed to score and display results.
• Technical & security data: IP address, approximate location derived from IP where available, browser/device type, language, timestamps, referrer URLs where transmitted, abuse signals, and diagnostic logs.
• Communications: contents of messages you send via our contact form (for example name, email, subject, body).
• Optional notifications: if you opt in to quiz-related email alerts, your email address and messages necessary to deliver those alerts until you unsubscribe.
• Cookies & similar technologies: see Section 6.
• Third-party tools: advertising networks, analytics vendors, push-notification providers (for example OneSignal where loaded), fonts, or embedded widgets may collect data under their own policies.

Purposes & legal bases

We use information to:

• Operate the Service (create quizzes, host pages, calculate scores, show scoreboards).
• Deliver optional transactional or notification emails you requested.
• Maintain reliability, debug errors, measure aggregate usage, and plan capacity.
• Detect, investigate, and prevent fraud, spam, abuse, security incidents, and violations of our Terms & Conditions.
• Comply with law, respond to lawful requests, and establish or defend legal claims.
• Show ads or sponsored placements where configured.

For visitors in the EEA/UK where GDPR applies, we rely on one or more of: contract (providing the Service you request), legitimate interests (security, anti-abuse, aggregate analytics, service improvement - balanced against your rights), and consent where required (for example certain non-essential cookies or marketing technologies). You may withdraw consent where applicable using browser controls or by contacting us.

Automated decisions

Scoring quizzes is automatic arithmetic based on answers you and players provide; it is not intended to produce legal or similarly significant effects about you under GDPR-style definitions. We do not use your data for automated credit, employment, or housing decisions.

Cookies & similar technologies

We use cookies, local storage, pixels, or similar technologies for essential operation (session stability, security, load balancing), preferences where offered, and - where enabled - analytics and advertising. You can control many cookies via browser settings; blocking strictly necessary cookies may break parts of the Service.

Advertising & “sale / sharing” wording

Third-party ad partners may process identifiers (such as cookie IDs or device signals) to measure delivery, frequency cap, or personalize ads. Their processing is governed by their own notices and choices.

California residents: certain transfers of personal information for cross-context behavioral advertising may qualify as “sharing” or “selling” under the CPRA/CCPA even when no money changes hands. We provide the disclosures and rights described in Section 12. Industry opt-out tools (for example the Digital Advertising Alliance or Global Privacy Control, where recognized) may help limit some uses.

We do not knowingly sell personal information of minors under 16 without affirmative authorization where required by law.

How we share information

We may disclose information to:

• Vendors & service providers that host infrastructure, send email, provide security tools, analytics, customer-support tooling, or payment-related services if ever offered - under contractual confidentiality and processing terms.
• Professional advisers (lawyers, accountants, insurers) where bound by duties of confidentiality.
• Authorities & others when we believe disclosure is required by law, regulation, legal process, or governmental request; to enforce our terms; to protect rights, safety, or security; or to detect/prevent fraud or abuse.
• Business transfers: an acquirer or successor in a merger, asset sale, financing, or restructuring, subject to applicable notice requirements.

We may publish or share aggregated or de-identified information that cannot reasonably identify you.

International transfers

We may process and store information in countries other than your own. Where transfers from the EEA/UK/Switzerland require safeguards, we aim to implement appropriate mechanisms (such as standard contractual clauses) as required by applicable law.

Retention

We retain personal information only as long as necessary for the purposes above, including security backups, dispute resolution, and legal obligations. Retention periods vary by data type; some logs roll off automatically. Deletion may lag in backups or cached systems for a limited period. We may retain minimal records where needed to prevent re-registration by banned actors or to defend legal claims.

Security

We implement reasonable administrative, technical, and organizational safeguards appropriate to the nature of the Service. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You use the Service at your own risk as described in our Terms.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing, withdraw consent, appeal our responses, or receive a portable copy of information you provided.

California residents: you may have rights to know categories/sources/purposes of collection; request deletion; correct inaccuracies; and opt out of certain sales/sharing for cross-context behavioral advertising, subject to verification and exceptions (for example completing transactions or detecting security incidents).

EEA/UK/Switzerland: you may lodge a complaint with your local supervisory authority.

Submit requests via our contact page. We may need information to verify your identity and may deny requests that are fraudulent, excessively repetitive, or manifestly unfounded under applicable law.

Children

The Service is not directed at children under 13 (or the minimum digital-consent age in your jurisdiction). We do not knowingly collect personal information from children below that threshold without appropriate parental consent where required. Parents or guardians who believe we have collected a child’s information should contact us promptly; we will take appropriate steps, which may include deletion.

Third-party links & embedded content

Links to social networks or other sites are not endorsements. Embedded players, widgets, or scripts may collect data independently; please review their policies.

Changes

We may update this policy from time to time. We will revise the “Last updated” date above and, where required by law or reasonably appropriate, provide additional notice (for example a banner or email for material changes affecting previously collected data).

Contact

For privacy inquiries or to exercise rights, use the contact page. We do not publish a direct inbox address here to reduce scraping.