Privacy Policy

1. What we collect

• Account information: your name, email, the display name you choose to be credited as, and any affiliations (clubs/leagues) you add.
• Contributed content: any questions, answers, and media you submit, plus provenance details (writer, club, year, licence).
• Game activity: which games you play, scores, and pass history.
• Basic technical data: standard web server logs (e.g. IP address, browser type) generated by our hosting provider.

We do not collect your password in readable form — authentication is handled securely by our infrastructure provider, and we never see it.

2. Why we collect it

To run your account, correctly credit your contributions, run games you join, keep the platform secure, and contact you about your account (e.g. confirming your email, responding to a support request).

3. Who else sees it

We don't sell your data. A few trusted service providers process it on our behalf, only as needed to run QuizCommons:

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• Resend (sending account emails)
• LiveKit (live game video, once the game room launches)

Some of these providers may process data on servers outside India. We only use providers with reasonable security practices, and only for the purposes described here.

Any question you contribute that gets approved is, by design, published on the public corpus under the licence you chose for it — that's the whole point of QuizCommons. Your account email and password are never made public.

4. How long we keep it

We keep account data while your account is active. For contributed questions, we keep a permanent audit log (what changed, when, by whom) even after a question is withdrawn — this is for provenance and to keep the credit system trustworthy, not to keep content public against your wishes.

5. Your rights

You can ask us at any time to: see what data we hold on you, correct it, delete your account, or withdraw anything you've contributed. Withdrawing a question removes it from QuizCommons going forward; it can't undo copies already made by others under an open licence before withdrawal. Email hello@quizcommons.org for any of this.

6. Cookies

We use one essential cookie to keep you signed in. We don't currently use advertising or third-party tracking cookies.

7. Children's privacy

QuizCommons does not currently have an age requirement or age-verification system. If you believe a child has provided us personal data, contact us and we'll delete it.

8. Security

Access to your data is restricted at the database level — for example, only our editor can see questions still pending review, and this is enforced by the database itself, not just application code.

9. Changes to this policy

We may update this policy as the platform grows. We'll post the updated date here.