Privacy

Jonathan Ilk, trading as JMilk Software, is the controller. Contact details are in the legal notice.

Purposes and retention

  • Access and security: connection details, including IP addresses and device information, are processed to provide and protect the service. Our abuse-prevention records expire within a day; application logs are retained for 30 days by Google and seven days by Fly.io. Google separately retains hosting IP data for a few months and authentication IP data for a few weeks. The basis is our legitimate interest in operating a secure service (Article 6(1)(f) GDPR).
  • Accounts and quizzes: account, authentication and quiz data are processed to provide the requested service (Article 6(1)(b) GDPR). Accounts and quizzes are retained until deletion; guest accounts and their quizzes expire after seven days without use. Firebase Authentication's deletion cycle, including backups, can take up to 180 days.
  • Pictures: uploaded pictures are processed as part of your quizzes (Article 6(1)(b) GDPR). Unused pictures become due for deletion after 24 hours; pictures on an account become due 30 days after its last pass ends, unless renewed before then, or when the account is deleted. Expired data is removed through automated cleanup.
  • Sounds: sounds you add to questions are processed as part of your quizzes (Article 6(1)(b) GDPR). Only the part you cut, at most 10 seconds, is sent to us. The rest of the file stays on your device. So do its name and the details stored in it, such as the title, artist or where it was recorded. Unused sounds become due for deletion after 24 hours. Sounds on an account become due 30 days after its last pass ends, unless renewed before then, or when the account is deleted. Expired data is removed through automated cleanup. A browser that played a sound can keep its own copy for up to seven days after we delete it. Phones send us nothing about a sound, not even when a player plays it again.
  • Saved colours: up to 10 pairs of colours you save for the Business theme, each with an optional name, are processed to provide that theme (Article 6(1)(b) GDPR). They are retained until you delete them or the account is deleted.
  • Play and history: names, answers and scores are processed for live play. For quizzes hosted by an account, History is retained for the host. It keeps the quiz title, each question's text and answers, statistics for each question, poll votes, the most common words of each word cloud, all final scores without names, and the names of the players on the podium and of the award winners. If the host has Pro, Detailed History is on unless the host turns it off for a quiz. History then also keeps every player's name, final score and place and, for each question, what the player answered (including typed text, poll votes and word cloud entries), whether it was right, the points earned and the time taken. While Detailed History is on, players are told in the waiting room that the host keeps their name and answers. The host can view it in History and download it as a spreadsheet. History, including this detail, expires seven days after the quiz ends, or 30 days after a pass held then or bought since ends, whichever is later. The host can delete it sooner. Other live game data lasts for the room's lifetime. The basis for providing the host's history is Article 6(1)(b) GDPR.
  • Publication and feedback: published content, public usernames and account-linked ratings support public quizzes (Article 6(1)(b) GDPR). Published content is retained until unpublishing or removal; copies made by others may remain. Usernames, ratings and reports are retained until account deletion. Moderation records remain until the publication or account is deleted. Screening and reports serve our legitimate interest in preventing unlawful content and misuse (Article 6(1)(f) GDPR).
  • Purchases: account, purchase and entitlement details are processed to provide paid features and retained until account deletion (Article 6(1)(b) GDPR). Link (Sold through Link, LLC, a Stripe company) processes payment data as the merchant of record under its privacy notice. Link shares the order with us in our Stripe account, including your name, email address and billing country, which we use for support and refunds.
  • Correspondence: contact details and messages are processed to handle enquiries, on the basis of our legitimate interest in responding to them (Article 6(1)(f) GDPR), or to take contractual steps you request (Article 6(1)(b) GDPR). Contact-form records expire after 89 days and are then removed by automated cleanup. Other correspondence is retained for handling the enquiry and any applicable legal retention or claims periods.
  • Browser storage: authentication, game continuity and preferences use browser storage to provide the functions you request (§25(2)(2) TDDDG). Session data is retained for the tab's lifetime; persistent entries can remain until cleared by the relevant function or through your browser. Personal data used to provide these functions is processed under Article 6(1)(b) GDPR.

Recipients and transfers

Google provides hosting, storage and authentication; Fly.io provides live servers. Data can be processed outside the EEA, including the USA and Singapore. Google and Fly.io describe their US Data Privacy Framework coverage and other transfer arrangements in their Google and Fly.io privacy information.

Public-quiz text and usernames submitted for automated moderation are sent through OpenRouter to TypeSafe in the USA. The check can refuse a username or reject a publication automatically. You can contest a decision through our contact form.

Content and game results are disclosed to the host and participants as part of play. Shared quizzes are accessible through their links; published quizzes and usernames are public. Service providers process data for their respective functions; Link and Stripe also act as independent controllers for payments.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and portability, and may object to processing based on legitimate interests. Contact us through the legal notice. You may complain to a data protection authority, including the LfDI Baden-Württemberg.

Providing data is voluntary, but the information needed for a requested function must be processed to provide it. Playing does not require an account.