Privacy policy
DeepCut Trivia (“we”, “us”) operates deepcuttrivia.com. This policy explains what we collect, why we use it, and the choices available to people in the European Union, United Kingdom, California, and elsewhere.
Who controls your data
DeepCut Trivia is the controller for account, gameplay, community, and contribution data. For privacy questions or requests, contact [email protected].
Data we collect
When you register, we collect your email address, nickname, password hash, and birth date for the 13+ age gate. We collect quiz answers, scores, duration, FP/XP progress, tier history, referrals, comments, reports, likes, notifications, search terms, and quiz contributions when you use those features. We collect security and operational logs needed to prevent abuse, including request timestamps and limited device or network hashes for referral protection; we do not use those hashes to identify you.
How we use it
We use this information to authenticate you, save quiz history, calculate FP/XP and league results, moderate community content, review submissions, prevent fraud, respond to support requests, and operate the service. We use account performance and community data to provide the features you ask for. We do not sell personal information.
Analytics and advertising
Optional Umami and Google Analytics 4 (GA4) analytics load only after you accept the analytics category in the consent banner, only when configured, and never when your browser sends Do Not Track. GA4 is configured with IP anonymisation. Our event payloads contain quiz and result metrics only; they exclude email addresses, nicknames, IP addresses, exact birth dates, and other direct account identifiers. You can opt out of Google Analytics with the Google Analytics Opt out Browser Add-on or by rejecting analytics in Cookie settings. Optional advertising loads only after advertising consent, and anonymous or under-age paths use non-personalised advertising parameters (npa=1). Rejecting or changing consent does not prevent essential sign-in and security cookies.
Cookies and local storage
We use an HttpOnly session cookie for sign-in, an HttpOnly admin session cookie for authorised administrators, and a seven-day referral cookie when you open a referral link. Your consent choice is stored in browser local storage as dct_consent; it records analytics and advertising choices and a timestamp. You can change it at any time through “Cookie settings” in the footer.
Sharing and processors
We share data only with infrastructure providers needed to host the database, deliver authentication or email, provide consented analytics, or deliver consented advertising. Providers may process data in other countries with appropriate contractual or legal safeguards. OAuth providers receive the information needed to complete a sign-in.
Retention and deletion
We keep an account and its quiz history while the account is active. Password-reset tokens expire after one hour and verification tokens after 24 hours. Notifications are retained for 90 days. Referral visit records expire from the seven-day attribution window, while aggregate attribution records may be retained for fraud prevention and reporting. On account deletion, personal account access is removed; comments and replies can remain as “Deleted User” placeholders so community conversations do not break, and likes or safety records may be retained where necessary to prevent abuse or meet legal obligations.
International and regional rights
EU and UK residents may request access, correction, deletion, portability, restriction, objection, and information about safeguards for international transfers. California residents may request to know, access, correct, delete, and opt out of sale or sharing of personal information; we do not sell or share personal information for cross-context behavioural advertising. Details and request instructions are on Your privacy rights.
Children
DeepCut Trivia is for people aged 13 or older and applies the higher local digital-consent age where required. We do not knowingly create accounts for people below the applicable age. If you believe a child has registered, contact us so we can investigate and delete the account.
Changes
We may update this policy when the service or law changes. We will post the new version here with a new effective date.