Privacy Policy
How we handle personal information when you use QuizBunch.
Last updated:
QuizBunch is operated by Asetral (Asetral Software), an online software brand and publisher with team members working remotely in multiple countries. Our primary website is quizbunch.com. For questions about this document, contact contact@quizbunch.com.
Introduction
This Privacy Policy explains how Asetral (Asetral Software) ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit or use QuizBunch(the "Service"), including websites, applications, and related services operated at the QuizBunch domain and its subdomains.
We are an online software brand and publisher with team members working remotely in multiple countries. We develop and publish digital entertainment products for users worldwide. By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Service.
This policy should be read together with our Terms of Use.
Who is responsible for your data
Asetral (Asetral Software) operates QuizBunch as an online software brand and publisher with team members working remotely in multiple countries. We do not maintain a public storefront or mailing address; privacy and legal requests are handled by email at contact@quizbunch.com or through our Contact form.
For purposes of applicable data protection law, Asetral is the data controller for personal information processed in connection with QuizBunch, except where a third party acts as an independent controller (for example, Google when you interact with their advertising or analytics services, or Formspree when you submit our contact form).
Information we collect
We collect information in the following categories, depending on how you use the Service:
Information you provide
- Account information: If you create an account, we process your email address, display name (if you choose one), authentication identifiers, and credentials managed by Firebase Authentication (we do not store your password in plain text).
- User-generated content: Custom quiz packs, Know Me challenges and answers, display names and chat messages in multiplayer rooms, host-judge sessions, stream or audience votes, trivia and This-or-That room participation, daily and pack leaderboard submissions, play history and favorites when signed in, comments on community packs, emoji reactions, and related metadata you submit through the Service.
- Contact form: Name, email address, subject, and message when you use our Contact form (processed through Formspree).
- Newsletter: Email address when you explicitly opt in using the footer subscribe form (checkbox required; processed through Google Forms).
- Communications: Information you send when you contact us at contact@quizbunch.com.
Information collected automatically
- Usage and device data: Pages viewed, features used, approximate location derived from IP address, browser type, operating system, referring URLs, and timestamps.
- Log and security data: IP address, request metadata, and similar technical data used to operate the Service, prevent abuse, and enforce rate limits on API requests.
- Cookies and similar technologies: See the Cookies section below.
- Browser storage: The Service may store data in your browser's localStorage (for example, cookie consent choices, daily challenge streaks, favorite packs, play history, and daily mission progress) or sessionStorage (for example, multiplayer room state, host credentials, or mash-up play queues). This data remains on your device unless you clear site data or sign in to sync certain preferences to your account.
- Photo quiz (browser only): When you use photo quiz modes, map pin coordinates and year guesses are processed in your browser to score rounds. We do not send your pin placement to our servers for routine solo play; map tiles are loaded from OpenStreetMap contributors as described below.
Information from third parties
When you sign in, Firebase Authentication provides us with your account identifier and email. Analytics and advertising partners may provide aggregated or pseudonymous reports about how users interact with the Service.
How we use information
We use personal information to:
- Provide, maintain, and improve the Service, including solo play, party and multiplayer rooms, daily challenges, photo quiz, tournaments, and shared challenges;
- Create and manage accounts and sync profile data you choose to save when signed in;
- Host user-generated quizzes, Know Me content, comments, reactions, and community features you publish;
- Operate leaderboards, daily boards, streaks, favorites, and game sessions where enabled;
- Respond to contact form and newsletter submissions;
- Monitor performance, debug errors, and protect against fraud, abuse, and security incidents;
- Understand aggregate usage through analytics;
- Display advertising, including personalized advertising where enabled and permitted;
- Comply with legal obligations and enforce our Terms of Use;
- Respond to your requests and communicate with you about the Service.
Legal bases (EEA, UK, and similar regions)
If you are in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, we rely on the following, as applicable:
- Performance of a contract: To provide the Service you request, including account features and multiplayer functionality.
- Legitimate interests: To secure and improve the Service, prevent abuse, understand aggregate usage, and operate our business, balanced against your rights.
- Consent: Where required for non-essential cookies, certain analytics, personalized advertising, or newsletter sign-up. You may withdraw consent through browser controls, Google settings, our cookie preferences control, or by contacting us.
- Legal obligation: Where we must retain or disclose information to comply with law.
Advertising and analytics
Google Analytics
When you allow analytics cookies, we use Google Analytics 4 to understand how visitors use the Service in aggregate. Google may use cookies and similar technologies and process data in the United States and other countries. You can learn about Google's practices at How Google uses information from sites or apps that use our services. You may install the Google Analytics Opt-out Browser Add-on or use browser privacy settings.
Google AdSense
When you allow advertising cookies, we may display advertisements through Google AdSense. AdSense uses cookies and similar technologies to serve ads, including personalized ads based on your visits to this and other sites. Google and its partners may use advertising identifiers and device information. You can manage ad personalization in your Google Ads settings and through industry tools such as the Digital Advertising Alliance (US) or Your Online Choices (EU).
Where your browser sends a Global Privacy Control (GPC) or similar opt-out preference signal, we treat it as a request to opt out of sale or sharing of personal information for cross-context behavioral advertising to the extent required by applicable law, in addition to choices made in our cookie banner.
For California residents, certain ad-related data uses may be considered "selling" or "sharing" under state law. See the California section below for your opt-out rights.
Firebase and cloud storage
Account sign-up and sign-in use Firebase Authentication. Saved data (profiles, rooms, leaderboards, Know Me, custom packs, and community features) is stored in Google Cloud Firestore and accessed only through our application servers — not through direct browser access to the database. This includes account retention data (streaks, favorites, play history, missions), multiplayer room state, room chat, Know Me profiles and attempts, leaderboard entries, and community pack data you publish.
Many solo modes work without an account. Features that require sign-in or cloud save depend on our hosting providers and may be unavailable during outages or maintenance. Data is processed by Google as our infrastructure provider subject to applicable terms and safeguards.
International data transfers
We operate internationally. Your information may be processed in the United States, the European Union, and other countries where our service providers and remote team members work, including countries where our infrastructure is hosted. These countries may have different data protection laws than your own.
When we transfer personal information from the EEA, UK, or Switzerland to countries not deemed to provide adequate protection, we rely on appropriate safeguards such as Standard Contractual Clauses where applicable, or other mechanisms recognized by applicable law.
Data retention
We retain personal information for as long as needed to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type:
- Account data is retained while your account is active and for a reasonable period afterward;
- Room and gameplay data may be deleted or anonymized after sessions end or after a defined period;
- Know Me and user-published content may remain available until you delete it or request deletion;
- Comments and reactions may be retained while the related pack exists or as needed for moderation records;
- Contact form and newsletter data are retained as needed to respond and maintain mailing lists;
- Logs and analytics data are retained for shorter operational periods unless law requires longer storage.
You may request deletion as described in Your rights.
Security
We implement technical and organizational measures designed to protect personal information, including access controls, encrypted transport (HTTPS), server-side validation for sensitive operations, and rate limiting on API routes. Firestore data is accessed from our servers rather than exposed for direct client-side database writes. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Children
The Service is not directed to children under 13 years of age (or the minimum age required in your country, such as 16 in some jurisdictions). We do not knowingly collect personal information from children below that age. If you believe a child has provided us personal information, contact contact@quizbunch.com and we will take steps to delete it.
Deleting your account and content
You can limit or delete personal information we hold in several ways:
- Browser storage: Clear site data for QuizBunch in your browser settings to remove localStorage and sessionStorage items (for example, consent choices, streaks, favorites, and unsynced play history).
- Cookie and ad choices: Use Cookie preferences or Do Not Sell or Share in the site footer to turn off analytics and advertising cookies.
- Account deletion: Email contact@quizbunch.comfrom the address on your account with the subject "QuizBunch account deletion request" (or use the link on your account page). We will delete or anonymize account-linked data within a reasonable period, subject to legal retention needs.
- User content: You may be able to delete custom packs, Know Me challenges, or comments through the Service where those controls exist. Otherwise, email contact@quizbunch.com with links or identifiers for the content you want removed.
- Newsletter: Unsubscribe using the link in our emails or contact us to remove your address from the list.
Deletion requests are also covered under Your rights below. We may retain limited information where required by law, for security, fraud prevention, or dispute resolution.
Your rights (all users)
Depending on where you live, you may have the right to:
- Access personal information we hold about you;
- Request correction of inaccurate information;
- Request deletion of your information;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Receive a portable copy of information you provided, where technically feasible;
- Lodge a complaint with a supervisory authority where applicable.
To exercise these rights, email contact@quizbunch.com or use our Contact form with enough detail for us to verify your request. We may need to confirm your identity before responding. We will respond within the timeframes required by applicable law.
Additional rights (EEA and UK)
If you are in the EEA or UK, you have the rights described above under the GDPR and UK GDPR. Our legal bases are set out in the Legal bases section. You may contact your local data protection authority if you believe our processing violates applicable law.
For EEA users, supervisory authorities are listed by the European Data Protection Board. UK users may contact the Information Commissioner's Office (ICO) at ico.org.uk.
Additional rights (California and US states)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may provide you with additional rights, including:
- Right to know the categories and specific pieces of personal information collected;
- Right to know the categories of sources, purposes, and recipients;
- Right to delete personal information, subject to exceptions;
- Right to correct inaccurate personal information;
- Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising;
- Right to limit use of sensitive personal information where applicable;
- Right to non-discrimination for exercising privacy rights.
In the preceding twelve months, we may collect identifiers, internet activity, geolocation (approximate from IP), and user-generated content as described in this policy. We use this information for the business purposes listed above. We disclose information to service providers and may allow advertising partners to collect information through cookies for cross-context behavioral advertising when you consent, which may be considered "selling" or "sharing" under California law.
To opt out of sale/sharing for advertising, click Do Not Sell or Share or Cookie preferences in the site footer and turn off Advertising (and Analytics if you prefer), adjust Google ad settings, use the DAA opt-out tools linked above, enable GPC in your browser where supported, or email contact@quizbunch.comwith the subject line "California privacy request."
Additional rights (Turkey)
If you are in Turkey, your personal data is processed under the Law on Protection of Personal Data (KVKK) No. 6698. You may contact us at contact@quizbunch.com to exercise rights including learning whether your data is processed, requesting information, learning the purpose of processing, knowing third parties to whom data is transferred, requesting correction or deletion, and objecting to processing where permitted by law. You may also apply to the Turkish Personal Data Protection Authority (KVKK Kurulu) if you believe your rights have been violated.
Other regions
If you are in Asia-Pacific or other regions with local privacy laws (including Australia, Singapore, Japan, South Korea, India, Brazil, or Canada), you may have additional rights under those laws. Contact contact@quizbunch.com to exercise rights available in your jurisdiction. We will honor applicable mandatory local requirements to the extent required by law.
Third-party links and services
The Service may link to third-party websites, games, or services (including partner properties such as GuessBeat.com). We are not responsible for their privacy practices. Review their policies before providing personal information.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated through the Service or by other appropriate means. Continued use after changes take effect constitutes acceptance of the updated policy where permitted by law.
Contact us
For privacy questions, requests, or complaints, contact Asetral at contact@quizbunch.com or via our Contact form.