Privacy Policy

1. What we collect

• Account: your handle, your password (stored only as a salted hash, never in readable form), your email address if you give one, when the account was created and when you last signed in.
• Game data: rating, rank, experience and level, wars played and won, your answers (how many were correct, by category), war history, medals, orders, the cosmetics you own and wear, and your balances of soldă and diamonds with their changes.
• What you send us: reports about questions or players, votes on questions, and emails you write to us.
• Moderation records: sanctions on your account and their reasons, messages our staff send you, and entries about your account in our staff action log.
• Technical data: your IP address and browser details in our server logs, the IP address of staff members in our staff action log, and a sign-in token kept on your device.
• Purchases, when paid items are offered: the item, price, payment reference and, as with any blockchain payment, the sending wallet address; also your confirmation that you live in the United States, the US state you choose, and the country of your internet connection at checkout. Our payment processor handles the payment itself.

If you play without an account, your progress is kept only in your own browser and we receive no personal data about those games.

2. Why we use it and on what legal basis

• To run the game and your account, including online wars, leaderboards, public profiles and profile banners: performance of our contract with you (GDPR Art. 6(1)(b)).
• To keep the game fair and secure: rate limits, investigating reports, and automatic checks that flag unusual accounts (for example many accounts from one place) for a person on our staff to review. No decision about your account is taken automatically. Legal basis: our legitimate interest in a fair and safe game (Art. 6(1)(f)).
• To keep accounting and tax records of purchases: legal obligation (Art. 6(1)(c)).
• To check that purchases are made only by people who live in the United States, and to keep proof of it: our legitimate interest in selling only where we operate and our legal obligations (Art. 6(1)(f) and (c)).
• Your email address is used only for account recovery and important notices about the Service. We do not send marketing emails.

3. What other players can see

Your handle, portrait, rank, rating, level, wars and victories, medals and recent wars are public: they appear in online wars, on leaderboards, on your public profile and in profile banners that anyone can embed on other websites. Your email address is never shown publicly.

4. Who we share it with

We do not sell your data and we do not use advertising networks or third-party analytics. We share data only with:

• our hosting provider, which runs our servers on our behalf;
• our payment processor, when you make a purchase;
• authorities, when the law requires it.

5. Where your data is processed

We are based in the United States, so your data is processed by us in the United States. Where your data is passed to a service provider outside your country, we use the safeguards the law requires, such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Account and game data: until you delete your account.
• Sign-in sessions: 30 days, or until you sign out.
• Server logs: a short time, after which they are rotated away automatically.
• Reports, sanctions and the staff action log: as long as needed to handle disputes and prevent repeated abuse. When an account is deleted, these records keep only the handle as text.
• Purchase records: as long as tax law requires.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw any consent you gave.

On your profile page you can download your data and delete your account yourself. For anything else, write to legal@quizvasion.com; we answer within one month.

If you live in the European Union, you can also complain to a data protection authority, for example the one in your country or, in Romania, ANSPDCP (www.dataprotection.ro).

If you live in a US state with a privacy law, you have similar rights and can use them the same way. We do not sell or share personal information for targeted advertising.

8. Children

The Service is not meant for anyone under 16. If we learn that someone under 16 has an account, we delete it. If you believe a child has given us data, please write to legal@quizvasion.com.

9. Security

Connections are encrypted (HTTPS), passwords are stored only as salted hashes, and staff access is limited by permission levels and recorded in our action log.

10. Changes

We will announce important changes to this policy in the game before they take effect. The date at the top shows the current version.