Privacy Policy
Last updated 28 September 2026
This policy explains what xiaoquiz collects, why, and how it is handled. It applies to the xiaoquiz.com website and service.
Who we are
xiaoquiz is a live-quiz platform for events and activations. For any privacy question or data request, contact us at privacy@xiaoquiz.com.
What we collect
- Account data — when you register: your name, email address, organization name, and a securely hashed password. We never store your password in plain text.
- Gameplay data — quizzes you create, and, for players, the nickname you choose plus your answers and score during a game. Players do not need an account.
- Technical data — your IP address and request metadata, used to rate-limit and secure the service, and the strictly-necessary cookies described below.
Why we use it
- To provide the service — create and host quizzes, run live games, and keep you signed in.
- To secure the platform — prevent abuse, spam signups, and fraud.
- To send essential account email — verification and password-reset messages.
We do not sell your data, and we do not use it for advertising or third-party tracking.
Cookies and local storage
We use only strictly-necessary cookies. These are required for the service to work, so under GDPR/ePrivacy they need disclosure rather than opt-in consent:
- Session cookie — keeps you signed in after you log in.
- Host-token cookie — authorizes control of a live game you are hosting.
- Cloudflare Turnstile — a security cookie set during the anti-bot check on the signup form.
We set no analytics, advertising, or third-party tracking cookies. If a player picks a nickname, it is stored in your browser's local storage (not a cookie) purely so a refresh keeps your place in a game — it never leaves your device except as your in-game answers.
Sub-processors
We rely on the following providers to run the service:
- Cloudflare — hosting and compute (Workers), our database (D1), and transactional email delivery (Email Routing).
- Cloudflare Turnstile — bot protection on the signup form.
Retention
We keep account and quiz data for as long as your account is active. Finished-game results are retained so you can review past games. You can ask us to delete your account and associated data at any time.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, email privacy@xiaoquiz.com.
Changes
We may update this policy as the service evolves. Material changes will be reflected in the "last updated" date above.