MojoGuild

Privacy Policy for QuizArena

Last updated: 21 September 2026

This Privacy Policy describes how the mobile game QuizArena ("the App", "we", "us") handles information when you use it. By using the App you agree to this policy.

QuizArena is played against other people in real time, so unlike a single-player game it needs an account and a server connection to work at all. That server is our own (quizarena.mojoguild.com), operated by us rather than by a third-party game platform. What follows is what the account holds.

Information we collect

Account data

You can play in one of two ways, and they differ in what we store:

  • As a guest (no email): the App generates a random key, keeps it in your device's secure storage, and we store only its fingerprint, so the same device gets back into the same account. You get an automatically generated display name. No email address, no password, nothing that identifies you as a person.
  • With an account: an email address and password, or Google sign-in (in which case we receive your Google account identifier and email address from Google). This is used solely to sign you in — we send no marketing email, and the App sends no email at all.

Either way, your account also holds:

  • Display name — shown publicly to your opponents, in friends lists, and on leaderboards. Avoid your real name if you don't want it visible to other players.
  • Avatar — drawn by the App from a number stored on your account. You cannot upload a photo, and we never receive one.
  • Language and country — used to pick questions you can read and to match you with nearby opponents. Both are suggested from your device's language setting and can be changed in the App. This is not location data: we do not use GPS, and the App never asks for location permission.

Gameplay data

So that ranking, progression and leaderboards work, we store the results of what you play: matches and the answers you gave in them, rank points and streaks, per-category and per-mode statistics, achievements and medals, daily-login streak, daily-challenge attempts, tournament participation, and the lifelines ("jokers") you hold or earn.

Friends and other players

If you use friends, we store your friend list, pending friend requests, and match invitations. Two things are visible to other people by design: your display name, avatar and rank appear on leaderboards and to anyone you are matched against, and a finished match stays in your opponent's own match history under your display name. Nothing else from your account is shown to other players.

Push notifications (optional)

Notifications are off until you allow them: the App asks for the system permission, and there is a switch inside the App as well. They are used for friend invitations and an occasional reminder to come back. While they are on we store a push token — an identifier for this installation of the App, issued by Expo, whose push service passes the message on to Google's or Apple's notification system. The token is not tied to your name or email and changes if you reinstall the App. Turn notifications off, in the App or in your device settings, and delivery stops; the token is deleted when you delete your account.

Advertising (Google AdMob)

The App shows ads through Google AdMob: ads between matches, and optional rewarded videos you can choose to watch in exchange for a lifeline. To serve and measure ads, Google may collect and process data such as:

  • a device advertising identifier (Advertising ID / IDFA),
  • device and technical information (model, OS version, language, IP-derived coarse location),
  • ad interaction and app-usage signals.

We do not receive this data in identifiable form. Google's handling of this data is governed by Google's Privacy Policy and "How Google uses information from sites or apps that use our services".

Crash reports, support messages and question reports

When the App hits an error it sends us a report: the platform, the app version, the error message and its technical stack trace, which screen you were on, and your account id if you were signed in. These go to our own server and are read by us — the App contains no third-party analytics or crash-reporting service.

If you write to support from inside the App, or report a question as wrong, we store what you wrote so we can answer it or fix the question.

Legal basis and consent (GDPR / EEA & UK)

For users in the European Economic Area, the United Kingdom and Switzerland: account and gameplay data are processed because they are necessary to provide the game you asked to play. Notifications are processed on your consent, which you give through the system permission prompt and can withdraw at any time. Personalized advertising is processed on your consent: the App presents Google's User Messaging Platform consent dialog before serving personalized ads, and if you decline you will still see ads, but non-personalized ones.

Children

The App is not directed to children under 13 and we do not knowingly collect personal information from children. Ads are configured for a general audience.

Data sharing

We do not sell your data. Data is processed by:

  • Google AdMob, as our advertising service provider (see above);
  • Google, if you choose Google sign-in — the sign-in itself is handled by Google, and we receive your account identifier and email address from it;
  • Expo, as the delivery service for push notifications, if you switch them on (it receives the push token and the message, not your account details);
  • our own server infrastructure — everything else stays in systems we operate and is not shared with any outside company, except that your display name, avatar and rank are, by design, visible to other players inside the App.

Encrypted database backups are stored with an object-storage provider. They are encrypted with a key we hold before they leave our server, so the provider cannot read them.

Data retention

Account and gameplay data are retained until you delete your account (see below). A push token is kept only while notifications are on. Crash reports and support conversations are kept while they are still useful for fixing the problem. Ad-related data is retained by Google according to its own retention policy.

Your rights

Depending on your region, you may have rights to access, correct, or delete personal data and to withdraw consent.

  • Delete your account: at any time from Settings → Delete account. This removes your email, password, Google link, display name, avatar and country, along with your friends, invitations, tournament entries, statistics, achievements, lifelines, push tokens and support messages. What remains is the match records of the other players you played against — those matches are part of their history and of the rank calculated from them, so rather than delete them we strip you out: you appear there as a deleted account, with nothing that can identify you. Signing back in afterwards is not possible, with any token.
  • Push token: turn notifications off in the App, or revoke the permission in your device settings.
  • Ad-related data held by Google: see Google's Privacy Policy linked above, or adjust your device's "Ads" / "Reset advertising ID" settings.
  • Access or correction: use the contact form on our support page and we will handle it.

Security

Passwords are stored only as salted hashes, never in readable form, and the guest key is stored as a fingerprint rather than as the key itself. Traffic between the App and our server uses encrypted (HTTPS/WSS) connections, and database backups are encrypted before they leave our server. No method of electronic storage or transmission is 100% secure.

Changes to this policy

We may update this Privacy Policy. Changes will be posted on this page with a new "Last updated" date.

Contact

If you have questions about this Privacy Policy, or want to request access to or deletion of your account data, use the contact form on our support page.