Privacy Policy

1. Who is responsible for your data

The data controller is webitro.com, Türkiye.

For any privacy question or request, contact us at [email protected].

2. What data we collect

Account data: when you sign up we store your email address and, if you provide them, your name and profile picture. If you sign in with Google, Google shares your name, email address and profile picture with us. We never receive your Google password.

Content you create: quizzes, questions, answers, results, images and settings you add.

Player data: people who play a quiz do not need an account. We store the nickname they enter, their answers and their score so the quiz creator can see results and leaderboards.

Feedback: when you send feedback we store your message, the page you were on, your browser type and, only if you provide it, your email address.

Technical data: our hosting and security providers process your IP address, device and browser information in server logs to deliver the site and protect it from abuse.

3. Why we use your data and our legal basis

To provide the service you asked for: creating your account, saving your quizzes and showing results (performance of a contract).

To keep quizdia safe: preventing spam, fraud and abuse, and moderating public content (legitimate interest).

To answer your feedback and support requests (legitimate interest).

To comply with legal obligations when required by law.

We do not sell your personal data and we do not use it for advertising profiles.

4. Cookies

We only use cookies that are necessary for the site to work: a session cookie that keeps you signed in and a cookie that remembers your language. These do not track you across other websites.

If we add analytics or advertising cookies in the future, we will ask for your consent first and update this policy.

5. Who we share data with

We use trusted service providers that process data on our behalf: Supabase (database and sign-in), Vercel (website hosting), Cloudflare (network, security and DNS) and Google (only if you choose to sign in with Google).

Some of these providers may process data outside your country, including in the United States. Where this happens, transfers are protected by standard contractual clauses or equivalent safeguards.

Quizzes you make public, and the nickname and score of players on a leaderboard, are visible to anyone with the link.

6. How long we keep data

Account data and your quizzes are kept until you delete them or delete your account.

Feedback messages are kept for up to 24 months.

Server logs are kept by our providers for a limited period, normally no longer than 30 days.

7. Your rights

Depending on where you live (for example under the EU/UK GDPR, Turkey's KVKK or California's CCPA), you have the right to access your data, correct it, delete it, restrict or object to its use, and receive a copy in a portable format.

To use these rights, email [email protected]. We will reply within 30 days. You can also lodge a complaint with your local data protection authority.

8. Children

You must be at least 13 years old, or the minimum age for digital consent in your country if higher, to create an account. Players do not need an account.

If you believe a child has given us personal data without permission, contact us and we will delete it.

9. Security

We use encrypted connections (HTTPS), access controls so that each user can only reach their own data, and reputable infrastructure providers. No online service can guarantee complete security, but we work to protect your data.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. If changes are significant, we will let signed-in users know.