Privacy policy
Last updated: 20 October 2026
QuizBall (quiz-ball.com and the QuizBall Android app) is a trivia game. You can play without an account. This page explains what we collect, why, how long we keep it, who we share it with, how we protect children, and your rights.
Who we are
QuizBall is run by Hammad Karamat Dar, trading as Karamatics, Lahore, Pakistan ("we"). We are the data controller for the personal data described here. Contact: privacy@quiz-ball.com.
What we collect
If you sign in (optional; app: 18 and older only):
- From Google or Facebook: your name, email address and profile picture. We never see your Google or Facebook password. We don't keep the access tokens Google or Facebook issue at sign-in.
- Your game results: the quiz, mode, score, number of correct answers and best streak of each round you finish while signed in.
- Session data: a sign-in cookie (website) or sign-in token (app), plus the IP address and browser or device type of each session, used to keep you signed in and protect your account.
If you allow notifications (app, 18 and older only): a Firebase Cloud Messaging device token and your app language, so we can send you news, new quizzes and fun facts. It isn't linked to your account. Turn notifications off any time in the app's Settings → Notifications or in your phone's settings.
On your phone only (never sent to us): the age you give in the app, your language and theme, and an unfinished round so you can resume it.
Advertising: the Android app doesn't show ads. If the website shows ads, Google collects data as described under "Advertising".
We don't use analytics trackers, and we don't sell your personal data.
Why we use it (and our legal bases)
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Run your account: profile, score history, keeping you signed in | Account, game results, session data | Contract (providing the service you asked for) |
| Protect accounts and the service | Session data | Legitimate interests (security) |
| Send notifications you allowed | Device token, language | Consent (the notification permission); withdraw any time |
| Show ads that keep the website free | See "Advertising" | Consent where required (EU/UK); legitimate interests for non-personalised ads where allowed |
| Apply the right protections for your age (app) | Age, kept on your phone | Legal obligation (children's privacy laws) |
Advertising
Website: QuizBall may show ads from Google AdSense on the home page and results screen. Adults in places where the law requires it (for example the EU and UK) are first asked with Google's consent message; if you agree, Google and its partners may use cookies and similar technologies to show and measure ads, including personalised ads where the law allows. You can change your choice at any time with the Ad choices link in the page footer.
Android app: the app doesn't show ads and doesn't use your device's advertising ID. If we add ads to the app in the future, we'll update this policy before that version is released.
Players under 18 (website): we tell Google to treat your ad requests as coming from a minor: no personalised ads, and ad content suited to teens. Under 13: ads are requested as child-directed, limited to family-safe (G-rated) content, and are not based on your advertising ID or behaviour.
How Google uses data from sites and apps: policies.google.com/technologies/partner-sites.
US state privacy rights: personalised ads to adults may count as "sharing" personal information under some US state laws. You can opt out with the Ad choices link on the website.
Children and teenagers
QuizBall is for players of all ages, so the app asks "How old are you?" once, the first time you open it. The answer stays on your phone; we never receive it.
- Under 18: no account or sign-in and no notifications (the app doesn't create a notification token), so we don't collect personal information from minors in the app. The app shows no ads.
Website: the website asks the same question on your first visit, keeps the answer in your browser only, and applies the same rules: no sign-in for under-18s. If the website shows ads, they follow the age rules under "Advertising".
Parents: if you believe your child under 18 has given us personal information (for example by signing in before these protections existed), email privacy@quiz-ball.com and we'll delete it promptly. You can also ask us what we hold about your child.
Who we share it with
We share personal data only with the services that run QuizBall, under their terms and data protection agreements:
- Cloudflare: hosting and database (all account data, game results, session data, device tokens).
- Google: sign-in (Google accounts), ads on the website (AdSense), and notifications (Firebase Cloud Messaging).
- Meta (Facebook): sign-in on the website, if you choose Facebook.
We don't sell your personal data. We may disclose data if the law requires it.
Where your data is stored
Your account data, game results, session data and notification tokens are stored by Cloudflare in its Asia-Pacific region. Our other providers (Google, and Meta for website sign-in) may process data in the United States and other countries. When your data leaves your country, for example from Saudi Arabia, the UAE or Pakistan, we rely on our providers' data protection terms, including standard contractual clauses, to keep it protected as the law requires.
How long we keep it
- Account and game results: until you delete your account.
- Sessions: until you sign out or the session expires (7 days without use); expired sessions are deleted daily.
- Notification token: until you turn notifications off, or for at most 60 days after the app last checked in (it checks in about weekly).
- Email to privacy@quiz-ball.com: as long as needed to answer, then deleted within 12 months of the matter being closed.
Deleting your data
- App: open your profile (your picture at the top of the home screen) → Delete account.
- Website: sign in, open your profile and choose Delete account.
- Without signing in: email privacy@quiz-ball.com from the address on your account and we'll delete it within 30 days.
This immediately and permanently deletes your account, linked sign-in methods, sessions and all saved scores. You can also remove QuizBall's access from your Google Account (Security → Third-party connections) or Facebook (Settings → Apps and websites).
Your rights
Depending on where you live (for example the EU, UK, US states such as California, Australia, the UAE or Saudi Arabia), you may have the right to:
- access your personal data and get a copy (portability);
- correct it;
- delete it;
- object to or restrict some uses, and withdraw consent at any time (this doesn't affect what happened before);
- opt out of the sale or sharing of personal information for targeted advertising (US states);
- not be treated differently for using these rights.
To use any of them, email privacy@quiz-ball.com. We'll answer within the time the law sets (usually one month). You can also complain to your data protection authority (for example in the EU/UK, Australia's OAIC, Saudi Arabia's SDAIA, or the UAE Data Office).
Security
Data is sent over encrypted connections (HTTPS). In the app, your sign-in token is encrypted on your phone. No method is perfectly secure, but we take reasonable steps to protect your data.
Changes
We'll update this page when our practices change and show the new date at the top. For important changes, we'll tell you in the app or on the website.
Contact
Questions or requests: privacy@quiz-ball.com · Hammad Karamat Dar (Karamatics), Lahore, Pakistan