Privacy Policy

When you create an account we store your email, a username, and the password hash. While you use the app we keep your quiz attempts, XP, streak history, and unlocked badges so we can show you progress over time.

If you only browse without signing in, your progress lives in localStorage on your device. We cannot read it.

Your data powers three things: your personal dashboard (XP, streaks, history), the global leaderboard (your public username + rank only), and basic product analytics so we know which topics need work.

We do not run third-party advertising trackers, and we do not enrich your profile with data from external brokers.

We use a single first-party session cookie to keep you signed in, and localStorage for UI preferences (theme, last quiz, quiz session snapshots). No third-party cookies are set by us.

We retain your account data for as long as your account is active. When you delete your account, your profile, attempts, and rankings are removed within 30 days. Aggregated, anonymous metrics may be kept indefinitely.

You can export or delete your data at any time from Settings. If you are in the EU/UK you have the right to access, rectify, and object to processing — email [email protected] and we will respond within 30 days.

Passwords are hashed with bcrypt. All traffic is encrypted with TLS 1.3. Production secrets are rotated quarterly. If you discover a vulnerability, please report it responsibly to [email protected].

If we make material changes we will notify you in-app and via email at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.