Privacy policy
Last updated 9 August 2026
This page explains what Quiz Ludiaz collects, why, and how to see or delete it. It's written to be read, not skimmed past — if anything is unclear, write to us and we'll fix the wording.
Contact: quiz.ludiaz@gmail.com. Full publisher details (legal name, address) are on the legal notice page, as French law requires.
If you never create an account
The Play tab — solo, with friends, or in teams — needs no account and sends us nothing to store. Nothing here changes for you.
If you create an account
An account is only needed for the daily quiz, because its rankings are shared across every player. Creating one means we hold:
| Data | Why we have it |
|---|---|
| Email address | Signing in and recovering your account. |
| Username | Shown next to your scores on the public leaderboard. |
| Password, as a hash | Your password is transformed on your device before it ever leaves it, then hashed again on our server. We never store — or see — it in a form that could be reversed. |
| Account created / updated dates | Basic account bookkeeping. |
| Points per language: daily, weekly, season | These are the numbers the leaderboards are built from. |
| One row per day you play: the date, language, your score, which questions you got right or wrong, and when you submitted | Scoring the daily quiz, and letting you look back at a past run. |
What we don't collect
No location, no contacts, no photos, no microphone or camera access, no health data. There is no analytics SDK in the app — we don't track how you use it beyond what's needed to run the daily quiz described above.
On your device
Separately from anything sent to our server, the app keeps a few things locally:
- A sign-in token, valid for 30 days, stored in your device's secure credential storage (Keychain on iOS, Keystore on Android) — not in ordinary app storage.
- Your language preference, cached question packs, which packs you've unlocked, and timestamps used to space out ads, stored in the app's regular local storage.
None of this leaves your device unless the app talks to our server as part of normal use (signing in, submitting a run, checking for pack updates).
IP addresses
Our server sees the IP address of every request, the way any server does. It's held in memory only, for as long as it takes to enforce a rate limit against abuse, and is never written to a log or a database. We don't keep an access log.
Why we're allowed to process this
Account data (email, username, password hash, scores, run history) is processed because it's necessary to provide the account and the daily quiz you asked for — that's a contractual basis under GDPR. Rate-limiting IP addresses rests on our legitimate interest in keeping the service available. Ads are shown on the basis of the consent choice described below.
Who else sees it
A short list, and nothing beyond it:
| Service | What it's for | What it gets |
|---|---|---|
| Google AdMob | In-app advertising | Your device's advertising identifier, subject to the consent you give through Google's consent prompt (and, on iOS, the App Tracking Transparency prompt beforehand). Decline, and you'll still see ads — just less tailored ones. |
| Brevo | Sending password-reset codes | Your email address, only when you ask to reset your password. |
| Oracle Cloud | Hosting our server and database | Everything in the tables above, as the infrastructure it runs on. Region: Paris, France (Oracle Cloud's "France Central" region). |
| Cloudflare | DNS, and hosting this website | Standard connection metadata (like your IP address) as your device reaches our domain — the same as any DNS or hosting provider sees. |
We don't sell your data, and we don't share it with anyone not on this list.
How long we keep it
For as long as your account exists. Delete it, and it's gone — see the next section.
Deleting your account
Deletion is immediate and permanent: your account, your scores, and your run history are all removed in one action, with nothing kept afterward. Details and the exact steps are on the account deletion page.
Your rights
Under GDPR, you can ask us to let you see, correct, delete, or export your data, or to stop processing it. Write to quiz.ludiaz@gmail.com and we'll respond within one month (GDPR allows extending that to three months for complex requests, but we'll tell you if that happens). If you're not satisfied with our answer, you can complain to France's data protection authority, the CNIL, or the supervisory authority in your own country.
Children
Quiz Ludiaz isn't directed at children under 13. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If what we collect changes, this page changes with it, and the date at the top will move. We won't quietly expand what we collect without updating this text first.