Version 2026-09-19.2 · Effective date: 2026-09-19
This policy explains which personal data the Quiz app collects, why, where it is stored and what your rights are. It is written to comply with data-protection laws worldwide, including the GDPR (EU), UK GDPR, KVKK (Türkiye), CCPA/CPRA (California), LGPD (Brazil) and PIPEDA (Canada).
Data controller: Yılmaz Aydın.
Contact: yilmimarket@gmail.com. Write to this address for any request about your data.
Playing offline (solo) needs no account and collects no personal data; your progress stays on your device.
When you create an account (required for online mode, friends and duels) we collect: e-mail address and sign-in provider (Google or e-mail + password); name (display name); username; birth year (not the full date); country; gender (female / male / prefer not to say); the level you reached; match and duel results; your friend list and friend requests; the moment and version of the privacy policy you accepted.
Your password is hashed by Firebase Authentication; we never store or see it. With Google sign-in we never access your Google password.
We do not collect advertising IDs, location, contacts, analytics or tracking data.
Creating your account, pairing you with friends, running matches and storing results: performance of a contract (GDPR art. 6(1)(b)).
Showing your country, age or gender to other users: only with your explicit consent (GDPR art. 6(1)(a)); you can withdraw it at any time in the settings.
Producing aggregate statistics (number of users and average level per country, age range and gender) and keeping the service secure: legitimate interest (GDPR art. 6(1)(f)). These statistics are shown to the administrator only and do not identify anyone.
Age check: legal obligation (GDPR art. 8, COPPA).
By default only your name and username are visible. You can switch country, age and gender on or off individually in the Account screen; default: off.
The avatar you pick is also visible to everyone. Opponents can see your last 25 random matches (opponent, score, date, level) up to the last match they played against you, and nothing after it.
Your e-mail address and birth year are never shown to other users. When age is shown, only the year difference (e.g. "26") appears.
Your friends see the fields you chose to show and the duel record between you.
Your data is processed and stored on Google Firebase (Firebase Authentication and Realtime Database; Google LLC / Google Ireland Limited). Database region: europe-west1 (Belgium, EU).
Google processes data only on our instructions under the Google Cloud Data Processing Terms.
To provide the service Google may process data outside your country. Transfers outside the EU/EEA and the UK are covered by the EU Standard Contractual Clauses and Google's additional safeguards. Transfers from Türkiye abroad rely on your explicit consent under KVKK art. 9, which you give by accepting this policy when creating an account.
Your data is kept for as long as your account exists.
You can delete your account in the app at any time (Account → Delete account). Deletion removes your profile, public profile, username record, friend links, requests and duel statistics from the database, and your identity from Firebase Authentication.
Raw match records referring only to the account id may remain for a limited time for game operation; once the identity is deleted they can no longer be linked to a person. Backups are purged within Google's standard periods.
You have the right to access, rectify, erase, restrict processing, port your data (receive it in a structured format), object and withdraw consent. Country, gender and visibility can be changed by you in the app; for other requests write to yilmimarket@gmail.com. We answer within 30 days at the latest.
You may lodge a complaint with a supervisory authority: the Personal Data Protection Authority (KVKK) in Türkiye, your national data-protection authority in the EU, the ICO in the UK, the ANPD in Brazil, the OPC in Canada.
California residents (CCPA/CPRA): we do not sell or share your personal information and will not discriminate against you for exercising your rights.
You must be at least 16 years old to create an account. We do not knowingly collect data from anyone under 16; if we learn of such an account we delete it. Younger players can play offline without an account.
We do not sell your data, do not share it for advertising and use no third-party tracking or analytics tools.
All traffic is encrypted (TLS). Database access is limited by server-side security rules so that each user reaches only their own data. Passwords are stored hashed by Firebase Authentication; no plain-text password is kept anywhere.
This is version 2026-09-19.2, effective 2026-09-19. For material changes you are notified in the app and asked to accept the new version; the current text is always available in the app and on this page.