Privacy

Playing without an account

Every quiz works without an account. Your quiz progress, finished runs and theme choice are kept in your browser’s storage on your device, not on our servers. Clearing this site’s data in your browser removes them.

Multiplayer

When you play with friends, the name you enter for the room, your answers and your score are stored with the room on our servers. Rooms close after 24 hours and are deleted soon after.

Each finished game is kept so it can appear in the players’ account histories, with every player’s room name and score. A cookie keeps your seat in a room for 30 days. If you play as a guest, a scrambled copy of that cookie lets you add those games to an account you create in the same browser.

Your account

You can sign in with Google, Apple, Discord, or an email address and password. We receive your email address and an account ID from the service you choose, along with any name or picture it shares. The site doesn’t show that name or picture; your public name is the display name you choose. Passwords are kept only as secure hashes by Supabase, our sign-in service.

Your account keeps your username, display name, profile visibility and the quiz results you save: scores, answers, settings, hints, times and dates.

Account emails, such as sign-up confirmations and password resets, are sent through Resend. We don’t send newsletters or marketing email.

What other people can see

When you create an account, you choose whether your profile is public or private, and it stays private until you do. A public profile shows your display name, username, join date and quiz statistics, and you can share links to single results. You can change this anytime in Profile settings: choosing Private hides your profile and all your shared links from everyone else. Your email address and full quiz history are never public.

Cookies

The site sets only the cookies it needs: one keeps you signed in, and one keeps your seat in multiplayer rooms. There are no advertising or analytics cookies, and nothing follows you across other sites.

Browsers can send a Do Not Track signal. The site doesn’t track your activity across other websites and doesn’t let other companies do so here, so it works the same whether or not your browser sends one.

Services that help run the site

Vercel hosts the site and handles the requests your browser makes, which include your IP address. Supabase stores accounts, saved results and multiplayer games in the United States and handles sign-ins, which also include your IP address. Resend delivers account emails and receives mail sent to our privacy address, which is forwarded to our Gmail inbox. If you sign in with Google, Apple or Discord, that service’s own privacy policy also applies. We don’t sell your data or share it with anyone else.

Vercel, Supabase, Resend and Google are based in the United States, so your data is handled there. Transfers from the EU and UK rely on the EU–US Data Privacy Framework, which Vercel, Resend and Google are certified under, and on the European Commission’s standard contractual clauses, which are part of Supabase’s data processing terms.

Why we use your data

We use your account details and saved results to run the account you asked for: signing you in, keeping your results and sending account emails. Under the GDPR, this is necessary to perform our agreement with you.

Your profile and shared links are public only if you choose that. That choice is your consent, and you can withdraw it anytime by making your profile private.

We keep finished multiplayer games in the other players’ histories, keep request and sign-in logs to protect the site and accounts, and read and answer email you send us. These rely on our legitimate interest in running a working, secure site, and you can object to them by emailing us.

How long we keep it

Your account details, profile and saved results stay until you delete them or your account. Finished multiplayer games stay in the players’ histories while the site runs. Vercel and Supabase keep request and sign-in logs under their own retention rules. We keep email you send us for as long as we need it to handle your request.

Deleting your data

You can delete single results from My profile, or delete your whole account under Profile settings there. Deleting your account removes your profile, saved results and share links right away. Multiplayer games you played stay in the other players’ histories under the name you used in the room, no longer linked to you.

Your rights

On My profile you can see your saved results, change your display name, username and profile visibility, and delete results or your whole account. You can also email us to get a copy of your data, including in a format you can take elsewhere, to correct or delete anything else, or to ask us to limit or stop how we use it. We’ll answer within a month.

If you live in the EU or UK and think we’ve handled your data wrongly, you can also complain to your local data protection authority.

Children

Accounts are meant for people aged 13 or older; anyone can play without one. If you think a child under 13 has made an account, email us and we’ll delete it.

Contact

pkmntrivia is run from the United States.

For questions about your data or any request on this page, email privacy@pkmntrivia.com.

If these practices change, this page and its date change with them.