What HuddleQuiz keeps, and for how long

When you host or join a game

A room holds the name each player types, their answers and score, and a random key their browser uses to stay in the game. The host’s browser keeps a similar key so they can get back into their room. Nothing else about you is asked for.

Rooms are throwaway. Every room is deleted a day after it opens, players, answers and keys included. No names are kept.

When the room is playing a quiz someone made, the town the host and each player connect from is added to that quiz’s count of where it was played: one count per place, never kept with a name.

Your account, if you make quizzes

Writing your own quiz is the one thing that needs an account, so the quiz can be found and edited again from any device. An account is an email address and nothing more: no name, no password. To sign in, HuddleQuiz emails you a six-digit code; the code is stored only as a hash, works for ten minutes and once, and the email itself is sent through Microsoft Azure’s email service.

A signed-in browser holds a random session token, which the server also keeps only as a hash. It lapses after 90 days without use, or when you sign out. Signing in and the odd failed code are noted in the server logs for 90 days, like every other request.

Delete your account from its page and your email address, every sign-in and all your quizzes are deleted at once. Accounts are otherwise kept for as long as you want them.

Quizzes you make

A quiz you write is stored as you saved it: its title, description, questions and answers, with a random code for its link, under your account. Anyone you give the link to can see the title and host the quiz, not the questions; only your account can read, change or delete it.

A quiz is kept while it is being played. Delete it yourself from its page, or it is deleted once nobody has hosted a room on it for 180 days. The rooms played on it are ordinary rooms and go after a day like any other.

The quiz’s maker can see how it is doing: how many times its link was opened, how many runs were started and finished, how many huddles were hosted on it, the scores and how each question fared, and where in the world it was played. The place is Cloudflare’s reading of a visitor’s address, as coarse as a town and often only a country, kept as counts per place and never against a name, a score or a leaderboard row. No IP address is stored for it, and these counts go when the quiz does.

The Daily Quiz and its reminders

Your daily result and your streak live in your browser only; the day's board keeps the name you typed (or the anonymous one you were given) with your score.

If you turn on notifications, your browser hands HuddleQuiz a push address (a long URL at your browser maker’s push service) and two keys that let only your browser read the message. Those, your time zone and the date of the last reminder are all that is stored: no name, no email. Turn reminders off and the record is deleted; if your browser drops the subscription, it is deleted the next time a reminder bounces. The calendar links store nothing at all.

When you buy a coffee

Payments happen on Buy Me a Coffee, under their privacy policy. I never see your card details, and buying a coffee is not linked to anything you do on the site.

When you buy quiz credits

Credits are paid for on a checkout page run by Stripe, under Stripe’s privacy policy; your card details go to Stripe and never to HuddleQuiz. What HuddleQuiz keeps is the record of the sale against your account: how many credits, the amount, the date, Stripe’s reference numbers for the payment and the email address you gave at the checkout, plus the balance of credits on your account and whether you’ve had your free first quiz. If you delete your account the sale record stays, with nothing to say whose it was, because the books have to balance; the credits go with the account.

Visitor counts

Cookieless analytics services count visits: Cloudflare Web Analytics. They record which page was viewed, the page that linked to it, the browser type and the country, and nothing that identifies you. Your IP address is not stored, and no cookie gets set or follows you to other sites, which is why there is no cookie banner.

Services that handle the traffic

• Cloudflare sits in front of the site and its API calls as a content delivery network and firewall, so it sees the address of every request, as any host does.
• Microsoft Azure hosts the site, the API and the database, and sends the sign-in codes and contact-form copies by email. The game servers run in the UK, with a standby in the EU.
• Application Insights, Azure’s diagnostics service, keeps the API’s request and error logs for 90 days so faults can be traced.