Privacy Policy

1. Information and purposes

Email, nickname and password support membership and sign-in. Passwords are not stored as plain text. Email signup sends a verification code to confirm your email address. Optional Google sign-in verifies your email, account identifiers and basic profile. We do not receive your Google password or request access to Gmail, Contacts or Drive.

Quizzes, images, drafts, comments, corrections and reports support their respective features and moderation. Guest comments use a nickname and deletion password.

Signup and last sign-in IP/time, connection information and request records support account protection, abuse prevention and troubleshooting.

2. Public information and quiz records

Public quizzes and comment nicknames, content and timestamps are visible to others. A quiz author’s nickname is displayed only when the author chooses to disclose it. Emails, passwords and security IP information are not public.

Private quizzes are restricted from public discovery and participation, but someone who knows an uploaded image URL can access the image. Copies shared to other services may remain outside QuizHaro.

Individual quiz rounds are valid for 24 hours and are cleared after expiry. Long-term comparison statistics store counts by score bucket rather than individual score histories. Private quiz completions are excluded.

3. Retention and deletion

Account information is retained while needed for membership and account management; content and drafts are retained while their publication/storage purpose continues. We verify ownership and scope before deleting or de-identifying information requested for removal.

Reports, blocking and security records are retained while the associated action or dispute requires them. Recovery backups and legally required records may be managed separately. We explain the scope, reason and duration of necessary separate retention when handling a deletion request. Unneeded electronic information is deleted using methods intended to prevent recovery.

4. Processing providers and international processing

Processing is entrusted to Supabase Pte. Ltd. for account storage and sign-in verification, Cloudflare, Inc. for service delivery, images and security checks, and Brevo (Sendinblue SAS) for verification email delivery.

Information is transferred over the network during service use. Principal storage/processing countries are Japan, Singapore, the United States and the European Union (France, Germany and Belgium). Retention follows the rules above. Contact the operator to discuss international processing or request restriction/deletion. Restricting essential processing may prevent use of related features.

Google sign-in, embedded video and social sharing are also subject to the relevant external service’s privacy practices.

5. Cookies and safeguards

Necessary cookies maintain sign-in and verify authentication. App sign-in cookies are valid for up to 30 days and can be blocked or cleared in browser settings; blocking them may prevent sign-in.

Access restrictions, encryption and other safeguards protect personal information. The service also uses automated-request protection.

6. Your rights and contact

Account settings let you change your nickname and password where applicable. Contact the operator below for access, correction, erasure, account deletion, withdrawal or processing restrictions. We verify ownership and explain the scope and outcome.

Google account settings also let you revoke linked-app permissions. Revocation does not automatically delete your existing QuizHaro account or content.

7. Policy changes

The QuizHaro operator handles privacy enquiries. We update this page when practices change and announce material changes and their effective time through the service or another suitable notice.