Privacy Policy

Valid and effective from July 11, 2026

1. Who We Are and Who to Contact (Data Controller)

The data controller of the information systems and the website quizbrothers.app is:

(hereinafter referred to as the "Controller" or "we"). Should you have any questions regarding the processing of your personal data, please contact us at the email address provided above.

2. What Data We Process, for What Purpose, and on What Legal Basis

We process your data only to the extent strictly necessary, categorized according to the part of our ecosystem you are utilizing:

A. E-shop and Customer Account (Purchase of credits and licenses)

Data: First name, last name, e-mail, encrypted password, billing details (address, Company ID/Tax ID for businesses), order history, and assigned credits. We do not store payment card numbers (these are processed exclusively by an external payment gateway).

Purpose: Account creation, fulfillment of the purchase contract, provision of digital content, and accounting.

Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (accounting and tax laws).

B. QuizBrothers Pro & Anti-Cheat Security System

Data: Quizmaster account e-mail, device hash/identifier (machine_id), application telemetry, verification tokens (AppCheck).

Purpose: License enforcement (24-hour credits), prevention of multiple concurrent unauthorized uses of a single account, protection of the database against unauthorized access, and prevention of reverse engineering.

Legal Basis: Legitimate interest of the Controller (Art. 6(1)(f) GDPR) in protecting its own intellectual property and ensuring the fairness and security of the system.

C. Mobile Application (Daily Question and Player Profiles)

Data: E-mail (or Google/Apple login identifier), chosen nickname, history of answers, points earned, season statistics.

Purpose: Operation of the user profile, evaluation of correct answers, and compilation of public player leaderboards.

Legal Basis: Performance of a contract/Terms of Use of the application (Art. 6(1)(b) GDPR) and consent when linking with social networks.

D. Live Quiz (Multi-room server and PIN-based gameplay)

Data: During live gameplay via PIN codes, player answers, team names, and current scores are processed primarily locally on the organizer’s (quizmaster’s) device. This data passes through our relay servers solely in the form of a temporary data stream (tunneling) required for real-time synchronization and is not permanently stored in our central cloud databases.

Responsibility: The organizer of the specific event is solely responsible for the content entered by players during the live game (e.g., team names).

E. Reservation System (Forms)

Data: Name, e-mail, phone number (optional), number of persons, team name.

Purpose: Securing a place at the event and communicating with the team prior to the start of the quiz.

Legal Basis: Performance of a contract / pre-contractual relations.

3. Who We Share Data With (Data Processors)

We do not sell your data to third parties. However, to ensure the operation of modern technologies, we utilize verified partners (data processors) who meet strict security standards:

• Google Ireland Limited (Google Cloud / Firebase): Database provision, user authentication, cloud functions, and infrastructure protection (AppCheck).
• Cloudflare, Inc.: Secure data transmission (tunnels), protection against DDoS attacks, and DNS management.
• Payment Gateway Providers (e.g., Stripe/Tatra banka, etc.): Exclusively for the purpose of securely processing online payments.
• Web Hosting Providers: For the operation of the WooCommerce website.

We are obliged by law to provide data if requested by law enforcement agencies or regulatory authorities (e.g., the Slovak Trade Inspection, the Tax Office).

4. How Long We Keep Your Data

• We retain data in the customer account and player profile in the application for the duration of your registration (until you delete the account).
• We are legally obliged to archive billing and accounting documents for a period of 10 years.
• Security and technical logs (device identifiers, IP addresses in error states) are typically deleted or anonymized within a few weeks to months, as soon as they have fulfilled their system protection purpose.

5. Cookies and Technical Logs

We use technical (strictly necessary) cookies on our website, without which it would not be possible to add a product to the cart, log into an account, or maintain a session. We do not require your consent for these cookies. Any other cookies (analytical or marketing) are activated only if you provide your explicit active consent via the cookie banner on the website.

6. Your Rights under the GDPR

As a data subject, you have the full right to:

• Access Data: You can request a copy of the data we hold about you.
• Rectify Data: In case of incorrect information in your profile.
• Erasure ("Right to be Forgotten"): If it does not conflict with our legal obligations (e.g., accounting), we will delete your account and data upon request.
• Object: To processing based on legitimate interest.
• Data Portability and Restriction of Processing.

You can exercise your rights by emailing [email protected]. If you believe we are processing your data unlawfully, you have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).