Privacy policy
Last updated 13 August 2026
This page explains what Quiz Ludiaz collects, why, and how to see or delete it. It's written to be read, not skimmed past — if anything is unclear, write to us and we'll fix the wording.
Contact: quiz.ludiaz@gmail.com. Full publisher details (legal name, address) are on the legal notice page, as French law requires.
If you never create an account
The Play tab — solo, with friends, or in teams — needs no account and sends us nothing to store. Nothing here changes for you.
If you create an account
An account is only needed for the daily quiz, because its rankings are shared across every player. Creating one means we hold:
| Data | Why we have it |
|---|---|
| Email address | Signing in and recovering your account. |
| Username | Shown next to your scores on the public leaderboard. |
| Password, as a hash | Your password is transformed on your device before it ever leaves it, then hashed again on our server. We never store — or see — it in a form that could be reversed. |
| Account created / updated dates | Basic account bookkeeping. |
| Points per language: daily, weekly, season | These are the numbers the leaderboards are built from. |
| One row per day you play: the date, language, your score, which questions you got right or wrong, and when you submitted | Scoring the daily quiz, and letting you look back at a past run. |
What we don't collect
No contacts, no photos, no microphone or camera access, no health data. The app never asks for your device's location.
Usage analytics
The app reports a short list of events to Google Analytics for Firebase, so we can see which modes are actually played and where people stop. What's sent is counts and settings, never content: how many questions and players a game had, whether the timer was on, which language you chose, whether a daily run was submitted and how many answers were right.
No player or team name ever leaves your device. Those are typed in by whoever is holding the phone and are usually other people's real names, so the app counts players rather than naming them. Question text, your answers and your messages are never sent either.
Firebase attaches its own technical data to each event, as any analytics tool does: a randomly generated identifier for your installation of the app, your device model, operating system and app version, and the country your connection appears to come from. If you're signed in, your account number goes with it so that several sessions can be recognised as the same player — never your email address or your username.
Analytics follows the same consent choice as ads. Refuse, and collection is switched off inside Google's SDK rather than filtered afterwards, so nothing is gathered in the background. Where that consent prompt applies to you, you can reopen it at any time from the app's settings and change your answer, and the change takes effect immediately.
On your device
Separately from anything sent to our server, the app keeps a few things locally:
- A sign-in token, valid for 30 days, stored in your device's secure credential storage (Keychain on iOS, Keystore on Android) — not in ordinary app storage.
- Your language preference, cached question packs, which packs you've unlocked, and timestamps used to space out ads, stored in the app's regular local storage.
None of this leaves your device unless the app talks to our server as part of normal use (signing in, submitting a run, checking for pack updates).
IP addresses
Our server sees the IP address of every request, the way any server does. It's held in memory only, for as long as it takes to enforce a rate limit against abuse, and is never written to a log or a database. We don't keep an access log.
Why we're allowed to process this
Account data (email, username, password hash, scores, run history) is processed because it's necessary to provide the account and the daily quiz you asked for — that's a contractual basis under GDPR. Rate-limiting IP addresses rests on our legitimate interest in keeping the service available. Ads and usage analytics both rest on the consent choice described above and below — refuse it and neither collects anything.
Who else sees it
A short list, and nothing beyond it:
| Service | What it's for | What it gets |
|---|---|---|
| Google AdMob | In-app advertising | Your device's advertising identifier, subject to the consent you give through Google's consent prompt (and, on iOS, the App Tracking Transparency prompt beforehand). Decline, and you'll still see ads — just less tailored ones. |
| Google Analytics for Firebase | Seeing which parts of the app are used | The events described above, plus an identifier for your installation, your device model, your operating system and app version, and your approximate country — and your account number if you're signed in. Nothing at all if you refuse consent. |
| Brevo | Sending password-reset codes | Your email address, only when you ask to reset your password. |
| Oracle Cloud | Hosting our server and database | Everything in the tables above, as the infrastructure it runs on. Region: Paris, France (Oracle Cloud's "France Central" region). |
| Cloudflare | DNS, and hosting this website | Standard connection metadata (like your IP address) as your device reaches our domain — the same as any DNS or hosting provider sees. |
We don't sell your data, and we don't share it with anyone not on this list.
How long we keep it
For as long as your account exists. Delete it, and it's gone — see the next section.
Deleting your account
Deletion is immediate and permanent: your account, your scores, and your run history are all removed in one action, with nothing kept afterward. Details and the exact steps are on the account deletion page.
Your rights
Under GDPR, you can ask us to let you see, correct, delete, or export your data, or to stop processing it. Write to quiz.ludiaz@gmail.com and we'll respond within one month (GDPR allows extending that to three months for complex requests, but we'll tell you if that happens). If you're not satisfied with our answer, you can complain to France's data protection authority, the CNIL, or the supervisory authority in your own country.
Children
Quiz Ludiaz isn't directed at children under 13. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If what we collect changes, this page changes with it, and the date at the top will move. We won't quietly expand what we collect without updating this text first.