Privacy Policy

This Privacy Policy explains how TRIVI.GG ("we", "us", "our") collects, uses, and protects your information when you use the website at trivi.gg (the "Service"). By using the Service you agree to the practices described below.

1. Information We Collect

Account information you provide when you sign up (email address, username, optional profile details). Quiz activity generated as you play (scores, completion times, modes played, achievements). Technical data collected automatically by your browser or our hosting and analytics providers (IP address, device and browser type, approximate location derived from IP, pages visited, referring URL, timestamps). Communications you send through the contact form on this page.

2. How We Use Information

To operate the Service and your account, save your progress and statistics, power leaderboards and achievements, respond to messages you send us, secure the Service against abuse and fraud, comply with legal obligations, and improve the Service through aggregated analytics.

3. Cookies and Similar Technologies

We use cookies and local storage for three purposes:

Strictly necessary — required for sign-in, security, and saving your preferences (such as dark-mode and cookie consent choices).
Analytics — help us understand how the Service is used so we can improve it. These are only set if you allow them in the cookie banner.
Advertising — used by third-party ad partners (see below) to deliver and measure ads. These are only set if you allow Marketing cookies in the cookie banner.

You can change or withdraw your choices at any time via Cookie settings on this page. Clearing your browser’s site data for trivi.gg likewise causes the cookie banner to appear again on your next visit.

4. Product Analytics

We run our own, first-party analytics to understand how TRIVI.GG is used. We record usage events such as session starts, pages viewed, quizzes started/completed/abandoned, account sign-ups, logins, achievements unlocked, and multiplayer games, together with technical context (coarse device type, country, page path, referrer).

Before you consent, measurement is session-scoped and pseudonymous only: events carry a random session identifier that expires after 30 minutes of inactivity, and no visitor or account identifier.
If you allow Analytics cookies, we set a random visitor identifier cookie (trivi_vid, kept for up to 13 months) and link events to it and, if you are signed in, to your account — so we can tell returning visitors from new ones. You can withdraw consent at any time via Cookie settings, which deletes the cookie and stops this linking immediately.
Country lookup is done server-side: we use the country provided by our hosting infrastructure when available, and otherwise resolve your IP address to a country via the ipapi.co service acting as our processor — your IP address is not stored with events.
Retention: raw analytics events are kept for a maximum of 13 months and then deleted automatically. You can request erasure of the identifiers linked to you at any time (see “Your Rights” below).

5. Third-Party Advertising (Mediavine)

Mediavine manages the advertising on this site. Mediavine and its advertising partners place the ads that you see. They can also read information about your visit to this site and to other sites. They use that information to choose the ads. They do not receive your name, your email address or your telephone number from us.

Mediavine explains what it collects and how long it keeps it in the Mediavine privacy policy.

You control personalised advertising in two ways. Change your choice for Marketing cookies in Cookie settings on this page. You can also use the industry opt-out pages at aboutads.info or, in the EU, at youronlinechoices.com.

6. Service Providers

We rely on a small number of trusted providers to run the Service, including authentication and database hosting (Supabase) and email delivery for the contact form. These providers process data on our behalf and are bound by their own security and privacy commitments.

TRIVI+ payments. If you buy TRIVI+, Stripe processes the payment. We never receive your card details. Link, a service of Stripe, sells TRIVI+ as the merchant of record. Link processes your payment details as a separate controller, under the Link privacy policy. We keep your Stripe customer ID and the status and dates of your membership. We keep these records while your account exists. Stripe keeps payment records for as long as accounting law requires. Your public stats page shows a TRIVI+ card if you have or had a membership.

7. Legal Bases for Processing (EEA / UK)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal data on the following legal bases under the GDPR / UK GDPR: contract (to provide the Service you signed up for), consent (for non-essential cookies and marketing communications), legal obligation, and our legitimate interests in keeping the Service safe and improving it.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, to object to certain processing, and to withdraw consent at any time. California residents (CCPA/CPRA) additionally have the right to know what personal information is collected and to opt out of any “sale” or “sharing” of personal information — we do not sell personal information for money. To exercise any of these rights, contact us using the form on this page or at [email protected].

9. Data Retention

We keep account and quiz data for as long as your account is active. If you delete your account, we remove or anonymise your personal information within a reasonable period, except where we are required to retain it for legal, security or accounting reasons.

10. Children

The Service is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. International Transfers

Your information may be processed in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for those transfers.

12. Security

We use industry-standard technical and organisational measures (encrypted transport, access controls) to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. Significant changes will be highlighted in the app or on this page.

14. Contact

Questions about this Privacy Policy? Email [email protected] or use the contact form.