Privacy Policy

• •You play under a nickname — we never ask you to display your real name.
• •We collect what we need to run the games, and no more.
• •We show no ads, we use no third-party advertising or analytics trackers, and we never sell your data.
• •Card numbers never touch our servers — payments happen on our payment providers’ secure pages.
• •You can ask for a copy of your data, or ask us to delete your account, at any time.

KlassiQ, the operator of klassiq.games, is the data controller for the personal data described here. You can reach us through the contact form.

• •Account data — your email address and a securely hashed password, or your Google account identifier if you sign in with Google. Guests can play without an account; guest sessions hold no personal details.
• •Profile data — your nickname (a pseudonym), interface language, and optional settings such as country and age band, used to serve age-appropriate and regionally relevant questions.
• •Gameplay data — matches you play, answers, results, leaderboard positions, replays, and tournament participation. This is what makes the games work.
• •Purchase records — which pack or subscription you bought, when, and its status. Payment details themselves (card numbers, PayPal credentials) are handled entirely by our payment providers and never reach us.
• •Messages you send us — contact-form submissions and bug reports, including the technical context a bug report carries.
• •Technical logs — standard server logs (IP address, timestamps, errors) kept for security and troubleshooting.

• •Running the service (contract): accounts, matches, tournaments, purchases, and support.
• •Keeping games fair and safe (legitimate interest): preventing cheating, fraud, and abuse, and enforcing blocks between players.
• •Meeting legal obligations: tax and accounting records for purchases.
• •Emails you expect: account emails such as password resets and purchase confirmations. We do not send marketing emails without your consent.

The essentials first: a session token that keeps you signed in, your language choice, and small preferences (like which how-to-play screens you have already seen). Without those, the site cannot do its job.

We also measure our own audience, and we would rather tell you plainly than let you find out. On every page, your browser stores a random identifier — a string of characters that is not your name, your email, or anything else tied to who you are — together with how you first arrived: the site that linked you, or the campaign tag that was in the link you clicked. With it we can answer questions like “of the people who read the landing page, how many went on to play a game?”, which is how we decide what to build next and where to spend. This is first-party measurement: it is collected by us, it stays on our own servers, it is never shared or sold, and no third-party analytics or advertising tracker runs anywhere on this site. You can clear it whenever you like by clearing this site’s data in your browser.

KlassiQ is a multiplayer platform, so some information is visible to others by design: your nickname and avatar, your public profile, leaderboard positions, and public matches — including replays and live spectating. Your email address is never shown to other players.

We share data only with the service providers that keep the platform running, and only what each needs:

• •Hosting — our servers and database are hosted on Railway.
• •Email delivery — account emails are sent through Resend.
• •Payments — Stripe and PayPal process payments; purchases may also be sold by an authorised merchant-of-record reseller (such as Paddle), which then processes your payment and billing data as the seller of record under its own privacy policy.
• •Sign-in — if you choose “Sign in with Google”, Google confirms your identity to us under its own privacy policy.

These providers may process data outside your country. Where data leaves the EU/EEA, it is protected by recognised safeguards such as standard contractual clauses.

Account and gameplay data are kept while your account exists. If you delete your account, personal data is deleted or irreversibly anonymised, except records we must keep by law (for example, purchase records for tax purposes) and the minimum needed to enforce bans. Server logs are kept only briefly.

Depending on where you live (and always if you are in the EU/EEA or UK), you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it.

To exercise any of these rights, use the contact form. We answer within a month. You also have the right to complain to your local data-protection authority.

KlassiQ’s content is family-friendly, but the service is not directed at children under 13, and we do not knowingly collect personal data from them outside teacher-managed classroom activities — where students join with a class code under their teacher’s supervision and play under pseudonyms. Purchases can only be made by adults or with a parent or guardian’s consent. If you believe a child has given us personal data they should not have, contact us and we will delete it.

All traffic is encrypted in transit (HTTPS), passwords are stored only as salted hashes, and access to production systems is restricted. No system is perfectly secure, but we design so that the most sensitive data — your payment details — never reaches us at all.

If we change this policy in a meaningful way, we will tell you in the app or by email before the change takes effect. The “last updated” date at the top always shows the current version.