1. Controller
Q-CODE, obrt za usluge programiranja, vl. Vedran Kuvara (sole proprietorship), Sisplac 27, 52100 Pula, Croatia, OIB (tax ID): 25164058247, e-mail: info@quizdom.online ("we"). This Policy describes how we process the personal data of Quizdom players.
2. What data we process
- Account: username, password (stored exclusively hashed), e-mail address (required for new accounts), display name, selected avatar.
- Location: Precise GPS location is sent to our server while playing on the map, for range, captures and fraud prevention. The latest position is deleted after 24 hours of inactivity; check-in GPS records after 7 days. Visits, captures and progress remain part of your account. Position sharing with other players is off by default. If enabled in your profile, clan members and players within game range or territory can see your precise position and name. Blocked players cannot see each other’s position. You can disable sharing immediately in your profile and GPS permission in device settings. Without sharing you cannot see other players’ positions or start map challenges or attacks on enemy assets and fields. Re-enabling is available 2 hours after disabling, followed by a 60-second attack warmup. Quizzes, XP and arranged duels remain available; existing battles and asset defense continue.
- Messages: chat message content (the last ~100 messages per channel), message reports and your list of blocked players.
- Gameplay: progress, points, statistics, clan membership, virtual items.
- Technical: IP address and basic device data in server logs (security and debugging).
- Optional analytics: after your explicit consent we record screens and features used, step outcomes, push notification opens, technical errors and load duration, campaign tags (UTM/referral), app version, device class, operating system and browser. We do not store IP addresses in the analytics database or GPS coordinates/movement history. The browser identifier is hashed, but events can be linked to your account and in-game locations; this is pseudonymized, not anonymous data.
3. Purposes and legal bases
- providing the Game and its features — performance of a contract (Art. 6(1)(b) GDPR)
- security, anti-cheat and moderation — legitimate interest (Art. 6(1)(f))
- push notifications — consent (Art. 6(1)(a)), revocable at any time in your profile
- product-improvement analytics, campaign measurement and A/B experiments — consent (Art. 6(1)(a)), entirely optional and revocable in your profile
4. Recipients
We do not sell your data or share it for marketing purposes. We use the following processors to run the Game:
- Hetzner Online GmbH (Germany/Finland, EU) — server and database hosting
- OpenFreeMap and CARTO — map basemaps; when loading the map your device sends its IP address and the displayed map extent to their servers
- Push delivery services — Google, Apple or Mozilla depending on your browser; Firebase Cloud Messaging (Google) on Android and Apple’s system push service on iOS
- Fonts — served locally with licences on the credits page; loading fonts does not contact Google Fonts.
- Email delivery and diagnostics — the configured email provider processes the address and account-recovery messages; if external Sentry diagnostics are enabled, technical error records are processed there. Contact info@quizdom.online for current providers and international transfer information.
5. Retention
Account data is retained while the account exists. Deletion removes the account, profile and associated personal records from the active database and releases locations. Chat, presence and avatar-file cleanup is attempted immediately and automatically retried on failure. Only the work record needed to complete erasure is kept until completion. Analytics events, attribution and notification delivery records are retained for up to 400 days. Withdrawal stops new analytics and requests deletion of linked events; if offline, the request is retried when you return to the app with a connection. Chat keeps up to 100 messages per channel for at most 30 days; content reports for 180 days and public news for 30 days. Periodic cleanup enforces these periods. Backups and security logs have separate limited rotation; active-database deletion does not immediately erase existing copies. For requests involving backups and logs, contact info@quizdom.online.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. You can delete your account yourself in the app (Profile → Delete account) or contact info@quizdom.online. You also have the right to lodge a complaint with the Croatian Data Protection Agency (AZOP, azop.hr).
Download basic account data as JSON in your profile, after confirming your password. For full access, correction, restriction or objection contact info@quizdom.online. We normally respond within one month; if a permitted extension is necessary, we will explain why. Withdrawal does not affect the lawfulness of prior processing.
7. Push notifications
Entirely optional — enabled and disabled in your profile, per event type. Disabling removes the subscription from our servers. For reliable delivery we record the type, platform, delivery status and time; opening is recorded only with analytics consent.
7.a Improvement analytics
Analytics stays off until you explicitly allow it. You can enable or withdraw consent at any time under Profile → Settings → Privacy and analytics. Withdrawing does not affect gameplay.
8. Children
The Game is intended for persons aged 16 and over. We do not knowingly collect data of younger persons; such accounts are deleted as soon as we become aware of them.
9. Security
Passwords are stored exclusively in hashed form, traffic is encrypted (HTTPS/WSS), and access to production data is restricted.
10. Changes
We will notify you of significant changes to this Policy via the Game or by email. Every version carries a number and a date.