Privacy Policy

1. Who is responsible

Marko Gyllenland (sole trader), VAT number SE721218493601, Sigtunagatan 3, 416 56 Göteborg, Sweden, is the data controller for the processing of personal data in Quiz Nights. Send questions about your data to info@quiznights.se.

This policy describes the data we process about you if you have a host account, if you take part in a quiz, and if you contact us.

2. Data about account holders

• Account details: name (if you give one), email address and password. Your password is only stored as a salted cryptographic hash – we can't read it. If you sign in with Google, we receive your name, email address, a link to your profile picture and the sign-in details Google sends.
• Settings: language, currency and your plan.
• Purchases: which purchases and subscriptions you have, amounts, dates and a customer ID at Stripe. Stripe collects payment details, name, billing address and any VAT number. Card details never reach us.
• Content you create: clients, logos and background images, your own questions, quizzes, quiz history and which questions have been used with which client.

3. Data about players

Players don't have an account. We store the team name, the team's answers, scores and timestamps. The team name is shown on the big screen and to the host. A cookie in the browser keeps the team linked to the phone for twelve hours. We don't store players' IP addresses in the app.

Please avoid using full names or other personal details in team names. The host is in charge of their quiz night and can remove a team.

4. Technical data and cookies

Our servers log IP address, time and the page requested, for security and troubleshooting. Logs on the app server are kept for 14 days.

We don't use analytics or marketing cookies, and there are no tracking scripts. The cookies we use are strictly necessary for the service to work, so no consent is required:

• Sign-in (authjs cookies): keep you signed in and protect the sign-in. Up to 30 days.
• Team (qn_lag_…): links a player's phone to their team. 12 hours.
• Language (qn_sprak): remembers your language choice during Google sign-in. 10 minutes.

Stripe's own cookies apply in Stripe checkout; they are needed for payment and fraud prevention.

5. Why we process your data

• Providing the service and taking payment – your account, quizzes, purchases and support. Legal basis: contract.
• Fact-checking your own questions – on Pro and VIP. Legal basis: contract.
• Running quiz nights – team names and answers. Legal basis: legitimate interest in running the quiz and showing results.
• Reminders and offers by email – if you buy a single night, you get a reminder a day and an hour before it ends, and a few emails afterwards with offers for Pro and VIP. You don't get these emails if you subscribe, and you can unsubscribe using the link in every email. Legal basis: legitimate interest (marketing to existing customers).
• Developing question packs – questions from the question pool, with no link to your identity in the finished pack. Legal basis: legitimate interest.
• Security and troubleshooting – server logs. Legal basis: legitimate interest.
• Bookkeeping – records of purchases. Legal basis: legal obligation.

We never sell personal data and don't use it for advertising.

6. Who receives your data

We use suppliers who process data on our behalf, or as independent controllers, where needed for the service:

• HostUp (Sweden) – servers, database and backups. Email to info@quiznights.se is received by HostUp and forwarded to our inbox, and emails from the service are sent through HostUp.
• Stripe – payments, invoices and subscriptions. Stripe is an independent controller for some processing, such as fraud prevention.
• Google – only if you choose to sign in with Google.
• Anthropic – the AI service that fact-checks your own questions. It receives the question text, answer, question type and any source you gave, but not your name or email.

We may also have to disclose data to authorities where the law requires it.

7. Transfers outside the EU/EEA

Stripe, Google and Anthropic may process data in the United States. Transfers are protected by the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework where the supplier is certified, and otherwise by the European Commission's standard contractual clauses.

8. How long we keep data

• Your account and content are kept for as long as the account exists. When you ask us to close your account, we delete it within 30 days.
• Team names and answers are kept as part of the host's quiz history for as long as the host's account exists.
• Questions in the question pool may remain after an account is deleted, but with no link to you.
• Bookkeeping records are kept for seven years as required by Swedish accounting law.
• A log of emails sent is kept for as long as the account exists.
• Backups are kept for up to 180 days and then overwritten.
• Server logs are kept for 14 days.

9. Your rights

You have the right to know what data we hold about you and get a copy, have incorrect data corrected, have data deleted, restrict processing, object to processing based on legitimate interest, and receive data you provided in a machine-readable format.

Email info@quiznights.se and we'll reply within one month. We may need to confirm it's you. If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (imy.se) or the data protection authority where you live.

10. Security

All traffic is encrypted with https. Passwords are stored hashed, access to the database is restricted and we take backups every night. Uploaded images get random file names but can be reached by anyone with the link.

11. Changes

We update this policy when the service changes. We'll tell you about material changes by email or in the app.