Overview

We collect only the data necessary to operate our quiz platform, personalize learning, and keep your account secure. We never sell your personal data.

Data We Collect

• Account: email, username, and authentication identifiers (via Supabase Auth).
• Profile: optional country/language, badges, preferences.
• Usage: quiz attempts, scores, streaks, ELO/XP, likes, ratings, follows.
• Device/technical: IP address, timestamps, and basic diagnostics (for security and fraud prevention).
• Generated content: quizzes you create, comments, and reports.

How We Use Data

• Account management and authentication.
• Personalized recommendations and adaptive difficulty.
• Leaderboards, achievements, and social features you opt into.
• Safety and moderation (e.g., handling reports/abuse).
• Product analytics, debugging, and performance improvements.

Legal Bases (GDPR)

• Contract: to provide the service you sign up for.
• Legitimate interests: security, abuse prevention, service improvement.
• Consent: optional features like emails or certain analytics where required.

Data Retention

We retain account data while your account remains active. You can request deletion at any time; some minimal records may be retained to comply with legal obligations and to prevent fraud/abuse.

Sharing & Processors

• Infrastructure: Supabase (database/auth/realtime).
• AI generation (if used): requests may be sent to model providers to generate content.
• Payment (if applicable): Stripe processes billing data; we never store full card numbers.
• Law enforcement: only when required by law and after due review.

International Transfers

Data may be processed in the country of our infrastructure providers. We use standard safeguards (e.g., SCCs) where applicable.

Your Rights

• Access, correction, deletion of your data.
• Portability and objection/restriction (where applicable).
• Withdraw consent for optional processing at any time.

Cookies & Tracking

We use cookies/local storage for authentication and essential functionality. Optional analytics cookies (if any) will be consent-based where required.

Security

We implement industry‑standard measures (encryption in transit, least‑privilege access, monitoring). No system is 100% secure; report issues to us promptly.

Children

Unbrainrot is not directed to children under 13 (or the age of digital consent in your region). Do not use the service if you are under the applicable age.

Changes

We may update this policy. Material changes will be communicated in‑app. Continued use after changes indicates acceptance.