QuizNeko respects your privacy. This page describes what data we collect and how we use it.
1. Data We Collect
- Account info: email, name, nickname, country, preferred language, date of birth.
- Authentication: hashed password, Google ID (if signed in via Google), Apple ID (if signed in via Apple).
- Anti-abuse signals: signup IP and user-agent, device fingerprint.
- Usage data: quizzes attempted, answers, points and XP, comments.
2. How We Use It
We use this data to operate the service: authenticating you, ranking quizzes, computing XP rewards, detecting fraud (multi-account / referral abuse), and supporting moderation (reports / appeals). We may also derive an approximate country from your IP address using an offline geolocation database, to show an origin for anonymous quiz attempts and for aggregate statistics; this lookup runs on our own servers and your IP is not shared with third parties.
3. Sharing
We do not sell your personal data. Aggregated, anonymized statistics may be displayed on quiz results pages (e.g. country/language breakdowns).
4. Cookies
- Essential cookies – HTTP-only cookies are used for session authentication (
access_token). Without them you cannot stay logged in. - Anti-cheat tokens – short-lived signed tokens are used to authorize quiz image requests and prevent scraping.
- Analytics cookies – Google Analytics (gtag.js) may set cookies on your device for usage measurement.
5. Automated Anti-Abuse Measures & Data Retention
To protect the points and XP economy and prevent multi-account abuse, QuizNeko automatically evaluates signup and gameplay signals — including IP address, device fingerprint and account-linkage patterns. Attempts from accounts flagged as high risk may not settle at all, new rewards may be restricted, or, in clear cases, the account may be blocked. These measures are applied conservatively and are designed to be reversible.
You may contest an automated decision through the in-app support channel. A human reviewer can release held rewards or whitelist a mistakenly flagged account. To prevent circumvention, we do not disclose the exact detection thresholds.
Data retention. Account and point-transaction records are retained while your account is active and for any period required for audit or legal obligations. Anti-abuse signals (IP address, user-agent, device fingerprint) are kept only as long as necessary for fraud analysis, then deleted or anonymized.
6. Your Rights
You can edit your profile or request account deletion. Some data (audit trail of point transactions, reports) may be retained to comply with operational policy.
7. Contact
For privacy questions, contact the site operator through the in-app support channel.
8. Payment Processing (Paddle)
When you make a purchase, payments are processed by our reseller and Merchant of Record, Paddle.com. Paddle collects the billing data needed to complete your payment (such as name, billing address, and payment-method details) under its own privacy policy. QuizNeko does not receive or store your full card number — we only receive a transaction record (order ID, product, amount, status) needed to grant your purchase and handle refunds. See Paddle's privacy policy.
9. Deleting your account
You can request deletion of your account from your profile page at any time. Deletion is not immediate: it takes effect 30 days after you request it, and you can cancel at any point during those 30 days by returning to your profile page. Simply logging back in does not cancel the request.
When the 30 days elapse, we erase or anonymise:
- your email address, name, nickname, date of birth, country and profile details (avatar, status message);
- your password and any linked Google or Apple sign-in;
- the IP address, browser user-agent and device fingerprint recorded at sign-up.
The following is kept, in a form no longer linked to you personally:
- Point ledger and payment records, as required for accounting, tax and audit obligations. Any remaining points are voided at deletion and cannot be restored or refunded.
- Quizzes and comments you posted, shown as authored by a deleted user. Removing them would corrupt the quiz history and scores of other users.
- A salted hash of your sign-up IP, used solely to prevent a deleted account from being re-registered to farm referral bonuses. It is not a raw identifier and is not used for any other purpose.
- A record that a deletion took place (dates only), so we can evidence that the erasure was carried out.
Last updated: 2026-08-11