Privacy Policy

Quiz XYZ is a trivia game from Luis Suárez, who operates under the name Luewell (“Luewell,” “we,” “us”), for Android, iOS, and the web. This policy explains what information the game processes, why, and the choices you have. We are responsible for the processing we carry out ourselves; Google, Apple, and Meta handle their own services under their own policies.

1. Information on your device

The game saves your progress (answers, scores, streaks, missions, achievements, duel results, and the questions you have already seen), the nickname and avatar you choose, your credits and unlocks, your purchases, your friend code, and your settings in the app’s private storage, or in your browser’s storage on the web. Without an account we never receive this information. The game reads your device’s language to pick its own, and does not ask for your location, contacts, camera, microphone, photos, or files.

2. Optional sign-in and cloud sync

If you choose “Continue with Google,” “Continue with Facebook,” or “Continue with Apple,” your provider shares with Firebase, a Google service we use as our processor, an identifier and the name, email, and profile photo link it makes available (Apple lets you hide your email and name). Firebase Authentication gives you an account ID and, to secure sign-in, also receives your IP address and basic device information. We never receive your password.

While you are signed in, Cloud Firestore keeps a copy of your progress, nickname, avatar, and settings so you can continue on other devices, and our server functions keep your credits, unlocks, friend code, and purchases in a wallet linked to your account. When you buy something while signed in, the app sends the store receipt to our server, which checks it with Apple or Google and records the transaction so it is never credited twice. Firebase Authentication, Cloud Functions, and Cloud Firestore run in the United States (nam5).

We keep your account and its data until you delete it. Google keeps the IP addresses logged at sign-in for a few weeks, and removes deleted data from its backups within the periods of its Firebase terms (up to 180 days).

3. Online duels

Duels are played against real people through our rooms server in the United States. When you start a duel, the game sends the server your nickname and avatar; the server gives you a random player ID, creates or finds the room, relays your answers (right or wrong, and how long you took) to your rival, and receives both scores to decide the winner. Your rival sees your nickname, avatar, answers, and score. The server keeps these only temporarily — a session for up to 24 hours and a room for up to 2 hours after its last activity — and keeps no history of your duels. To prevent abuse, it counts requests per IP address in 60-second windows and does not keep the address afterwards; our hosting provider may keep technical access logs for a short time. Duels have no chat. The other players in the ranking are simulated on your device.

4. Advertising

The free Android and iOS apps show ads from Google AdMob, a service of Google LLC (Google Ireland Limited in the EEA and Switzerland). To show and measure ads and prevent fraud, Google may collect device identifiers such as the Android advertising ID, your IP address and approximate location, device and app information, and the ads you see and tap.

On iPhone and iPad, Quiz XYZ asks for your permission to track you (App Tracking Transparency) before personalized ads can be shown. If you allow it, Google’s software in the app receives Apple’s advertising identifier (IDFA) and may use it, together with the information above, to show you ads based on your activity in other companies’ apps and websites and to measure them. If you don’t allow it, the IDFA is not available and your ads are not based on that activity. You can change your choice at any time in your device’s Settings → Privacy & Security → Tracking. Advertisers may also measure ad results through Apple’s SKAdNetwork, which reports campaign results without identifying you.

Before requesting any ad, the app uses Google’s consent tool: in the EEA, the United Kingdom, and Switzerland you can consent to or refuse personalized ads, and in US states with privacy laws you can opt out of the sale or sharing of your data for ads. Without the choice your region requires, no ads are requested. You can change your choice at any time in Settings → Legal → Ad privacy. Buying “Remove ads,” VIP, or “Unlock everything” stops ads. Learn how Google uses this data at policies.google.com/technologies/partner-sites.

5. Purchases

Purchases are offered only in the mobile apps and are processed by the Apple App Store or Google Play, which handle payment, taxes, and refunds; we never receive your name, card, or billing address. The store tells the app what was bought so it can deliver it, and “Restore purchases” brings one-time purchases back. The stores may give us sales reports and, if you allowed it, crash reports that do not identify you.

On iPhone and iPad, purchases are managed through the purchase management service RevenueCat.

RevenueCat acts on our behalf and receives a randomly generated, anonymous app user identifier, the App Store purchase information needed to determine your access (the product, purchase date, status, and any refund), and your device model, operating system, app version, and diagnostic information about its software. It does not receive your name, processes this information in the United States, and uses it only to operate and validate your purchase.

6. Web version

The web version keeps its data in your browser, shows no ads, sells nothing, and sets no advertising or analytics cookies. Like any website, its hosting provider receives your IP address and browser information to deliver it, and your browser may download the game’s rendering engine and fonts from Google’s content servers.

7. Deleting your data and your account

Uninstalling the app or clearing the site’s data deletes what is on your device; without an account it cannot be recovered. To delete your account, go to Settings → Account → Delete account: our server deletes your synced progress, your wallet, your friend code, and your account in one step. Store transaction records are kept without your account ID only so a receipt can never be paid twice. You can also ask us to delete your account without the app; the steps and what is kept are on our account deletion page.

8. Children

Quiz XYZ is meant for people aged 13 and over and is not directed to children under 13, who must not sign in. If you believe a child under 13 has signed in or seen personalized ads, contact us and we will delete the account and help remove the data. In the EEA and the UK, people under 16 (or their country’s lower age, never below 13) may consent to personalized ads only with a parent’s authorization.

9. Legal bases and your rights

We process your data to provide the game and the features you ask for (sign-in, cloud sync, duels, and purchases), with your consent for personalized ads where the law requires it, and for our legitimate interest in keeping the game secure and preventing abuse. Depending on where you live, you can ask to access, correct, delete, or receive a copy of your data, object to or restrict its processing, and withdraw your consent at any time without affecting earlier processing. You can also complain to your data protection authority. We will answer within the time the law of your country sets, and we never ask for identity documents to handle a request.

10. Sharing and international transfers

We don’t sell your data or share it with data brokers. Google (Firebase and AdMob), Apple, Meta (sign-in with Facebook), the stores, and our hosting providers may process data in countries other than yours, including the United States. Google relies on safeguards recognized by data protection laws, such as standard contractual clauses and the EU-U.S. Data Privacy Framework.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date above, and we will tell you in the game before important changes apply.

12. Contact us

For any question about this Privacy Policy or to exercise your rights, contact us at [email protected].