Quizrael Privacy Policy
Draft for review. This policy describes what the Quizrael app does today. It is not legal advice; a lawyer should review it before monetization at the latest.
Last updated: [PLACEHOLDER: date of publication]
Quizrael is a trivia game about the geography of Israel. This policy explains what information the app and its servers collect, why, who handles it for us, how long we keep it, and the rights you have. We wrote it in plain language. If anything is unclear, write to us at support@quizrael.com.
Who we are
Quizrael is operated by [PLACEHOLDER: the owner's full legal name, or the business name and registration number], [PLACEHOLDER: postal address], Israel ("we", "us"). We are the controller of the database of player information described here (in Israeli law, the "database owner").
Contact for anything about privacy: support@quizrael.com.
The short version
- You play without giving us your name, email or phone. The app creates an anonymous account for your phone.
- We keep your game progress on our server so it is there next time.
- There are no ads, no advertising identifiers and no tracking, and no analytics company receives anything.
- If you agree when the app first asks, it sends us usage statistics (which screens you open, how long things take) to our own server. You can switch this off in Profile at any time.
- A display name and a hometown are optional, and are shown on leaderboards unless you hide yourself.
- Feedback you send, with its screenshot, is emailed to us.
- Crash reports are sent without your account or device identifiers.
- You can ask us to delete everything, at any time.
What we collect and why
Your anonymous account
When you first open the app, it creates an account with a random identifier (the "player id", shown at the bottom of Profile). This identifier links your progress to you. We do not know who you are unless you tell us.
When the app talks to our sign-in service, that service records the IP address and the device's user agent of the request, to keep the account secure and to limit abuse.
Your game
To run the game and keep your progress we store: the games you play (topics, difficulty, language, start and end time), each question you were asked and your answer, whether it was right, how long it took, and the points and XP it earned; your level, XP, mastery tiers, badges, quests, streak, the places you have "lit" on the map, and your hearts and hints. If you type an answer that our matcher nearly accepted, we keep what you typed so we can improve how answers are recognised. We record which encyclopedia entries are opened, to protect the service from automated scraping.
Your settings
The time zone your phone reports (so that the game day, quests and streak follow your clock), Shabbat mode if you turn it on, and the settings below.
Leaderboards
If you choose a display name and a hometown (one of the places in the app), other players see on the leaderboards: your rank, your display name (or "Player #" and a four-digit number), your XP, your hometown and the badge you chose to show. They never see your player id. A display name must pass a basic filter. You can hide yourself from every leaderboard in Profile at any time, and you are removed at once.
Feedback you send
When you send feedback with the feedback button, we receive the text you write, a screenshot of the app screen (you can remove it before sending), and technical details: the app version and build, your phone's operating system and version, its model, the app language, the text size, the screen size, the screen you were on, and the time. We store the report on our server and email it, with the screenshot, to the app's inbox.
Crash reports
If the app crashes or hits an error, it sends a report to our crash-reporting provider so we can fix it: the error and where in the code it happened, the app version, recent steps in the app (such as which screen was open; never what you typed), and technical details of the phone (operating system, model, memory, language, time zone). The app removes your account id, your device's identifier and your device's name before sending, and does not send your IP address.
Usage statistics (only if you agree)
On the first page of the app's introduction we ask whether you want to help us improve the game by sending usage statistics. Nothing is sent unless you say yes. You can change your answer at any time in Profile, with the "Share usage statistics" switch; we will not ask again.
If you say yes, the app records events such as: the app being opened and closed and how long it was open, which screens you visit and how long they take to appear, the steps of the introduction, when a game is set up but not started, when a game cannot start (for example, no hearts left), when a game is left part-way and at which question, what you tap on the results screen, which features you open, whether the feedback form was sent, which error message was shown (its code, not its text), the update prompt, and how long you waited for a game, an answer or a screen, with whether the phone was on Wi-Fi, on mobile data or offline at the time (the kind of connection only, never the network's name). Each event comes with the app version, the phone's operating system and its major version, the app language, a rough text size, and a random number that changes every time the app is opened.
The statistics never include your display name, hometown, anything you typed, your IP address, or any identifier of your phone or for advertising. They are linked to your anonymous player id, so that deleting your account deletes them too.
We use them only to understand how the game is used and to make it better: which parts are hard to find, where people stop playing, and what is slow. They stay on our own server in Frankfurt, Germany; no analytics or advertising company receives them. We look at totals, not at individual players, and we make no decision about you from them.
Our server also keeps short technical logs of each request (which function, whether it worked, how long it took, the app version). These logs contain no player id and no IP address, and are kept for 7 days. A count of server errors per hour, with no player in it, is kept for 90 days.
Notifications
If you turn on the streak reminder, the app asks your permission and schedules the reminder on your phone. We do not send push notifications and we do not collect a push token.
On your phone
The app keeps your sign-in session, your settings and some cached numbers on the phone. They stay on the phone; uninstalling the app removes them.
This website
quizrael.com sets no cookies and runs no scripts or analytics. Our host, Cloudflare, processes the IP address of each visit to deliver the page and protect it from attacks.
If you sign in (when available)
Signing in is not available yet. When it is, you will be able to link an email address, or an Apple, Google or Facebook account, so your progress can be restored on another phone. We will then receive your email address and an identifier from that provider (Apple lets you hide your real email). Your progress stays the same account.
What we do not do
We do not sell your information. We do not use it for advertising. We do not build a profile of you, and we make no decision about you by automated means. We do not ask for your location, contacts, photos or microphone.
Is giving the information required?
No law requires you to give us any of this. Without the anonymous account and your game records the game cannot work. The display name, hometown, feedback, reminder and usage statistics are optional; without them you can still play.
Our legal grounds
We process your information to provide the game you asked to use (your account, your progress, your settings), on the basis of our legitimate interest in keeping the service secure, fixing crashes and improving questions, and on the basis of your choice for the optional features (display name, hometown, feedback, reminder, and sign-in when available). Where the law of your country requires consent, you give it by using the feature, and you can withdraw it by switching the feature off or asking us to delete the information.
Usage statistics are collected only on the basis of your consent, which you give by answering yes when the app first asks. You can withdraw it at any time with the switch in Profile; from then on nothing more is sent. Withdrawing does not affect what was collected before; to have that deleted too, delete your account or write to us.
Who handles your information for us
We use these service providers. Each acts on our instructions and only for the purpose described:
- Supabase (Supabase Inc.): our database, sign-in service, server functions and file storage, including the usage statistics. Servers in Frankfurt, Germany.
- Sentry (Functional Software Inc.): crash reports. Stored in its EU region, Germany.
- Resend (Resend Inc.): sends the feedback email. [PLACEHOLDER: USA, or the region of the sending domain].
- Cloudflare (Cloudflare Inc.): our domain, this website, and forwarding of email sent to our addresses. Global network.
- Google (Google LLC): the email inbox where feedback and email to us are read.
- Apple and Google: distribute the app through their stores; if you sign in with them (when available), they confirm your identity.
No one else receives your information, unless the law requires us to disclose it.
Transfers outside Israel
Our main servers are in Germany, in the European Union, a destination to which Israeli regulations permit the transfer of personal information. Feedback emails and our inbox may be processed in the United States by Resend and Google, and crash reports may pass through Sentry's global network. We use these providers under their data processing terms, which commit them to protect the information and use it only for us. By sending feedback or email to us you agree to this transfer.
How long we keep it
- Your account and game progress: for as long as the account exists. If you uninstall the app without deleting your data, the anonymous account stays on our server; we intend to delete accounts that have been inactive for a long time [PLACEHOLDER: retention period, recommended 24 months] and will update this policy when we do.
- Encyclopedia reading records: 7 days in detail, then a daily count for up to 400 days.
- Feedback reports and screenshots: until your account is deleted. Copies in our email inbox are deleted when you ask us to delete your data.
- Usage statistics: 180 days. After that only daily totals are kept, with no player id in them.
- Sign-in service records and server logs (including IP addresses): as kept by Supabase, typically days. Our own request logs (no player id, no IP): 7 days. Hourly counts of server errors (no player): 90 days.
- Crash reports: according to our crash-reporting plan, typically up to 90 days.
Your rights
You have the right to see the information we hold about you, to ask us to correct it, and to ask us to delete it. Much of it is already in the app: Profile, achievements and the map show your progress, and you can change or remove your display name and hometown, hide from leaderboards, and switch off the reminder and the usage statistics at any time.
Deleting your data
- In the app: Profile → Delete account (or Delete my data). This removes your account and everything linked to it from our server immediately and permanently, and resets the app on your phone. [PLACEHOLDER: remove this note once in-app deletion is visible to every player: Until sign-in is available, this option may not appear; use email below.]
- By email: write to support@quizrael.com with the player id shown at the bottom of Profile (tap it to copy). We delete the account and all its information, including feedback screenshots and the emails they came in, within 30 days and confirm by reply.
Deletion cannot be undone. Information with no person in it (for example, how many players answered a question correctly, or a town's total XP) is kept.
To exercise any other right, write to the same address. We may ask you to confirm the player id so that we only act for the account's owner. If you are not satisfied with our answer, you may complain to Israel's Privacy Protection Authority (הרשות להגנת הפרטיות), or, if you are in the European Union, to your local data protection authority.
Age
Quizrael is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has used the app, write to us and we will delete the account.
Security
All communication between the app and our servers is encrypted (HTTPS). Each player can read only their own records; feedback and the information behind leaderboards cannot be read from the app at all. Access to the server is limited to us. No method is perfectly secure, but we work to protect your information and will notify you and the authorities of a serious breach as the law requires.
Changes to this policy
When we change this policy we will update the date at the top, and for an important change we will tell you in the app before it takes effect.
Language
This policy is published in Hebrew and English. If the two differ, the Hebrew version prevails.
Contact
support@quizrael.com · [PLACEHOLDER: the owner's full legal name or business name], [PLACEHOLDER: postal address].