What we collect, which is a player name, an email address and a hashed PIN, and nothing else. Including how to have it all deleted.
This notice explains what personal data Quizmondo collects, why, what we do with it, and the rights you have over it. It is written to meet Articles 13 and 14 of the UK GDPR. We collect as little as we can.
Last updated: 28 October 2026.
1. Who is the data controller
Quizmondo operates this website and is the data controller for the personal data described below. You can reach us about anything on this page through the contact page. We have not appointed a Data Protection Officer, as we are not required to.
2. What personal data we collect
If you create an account we store exactly three pieces of personal data:
| What | Why we need it |
|---|---|
| Player name | To identify you in games and show you on leaderboards. It need not be your real name, and we would prefer it was not. |
| Email address | To identify your account so you can sign back in, and to reply if you contact us. |
| PIN or password | To secure your account. Stored only as a one-way cryptographic hash, never in readable form. Nobody at Quizmondo can see it. |
We do not collect your real name, postal address, date of birth, telephone number, payment details or location. We have no use for them. There is no advertising on Quizmondo and we do not sell data to anyone.
Data created by playing
Using the site also generates records linked to your account: scores, XP and rank, the duels and group games you play, quiz questions or team names you submit, and pub quiz results recorded under the team name used on the night. Some of this is shown publicly — that is the purpose of a leaderboard.
Playing without an account
You can play entirely as a guest. A guest is identified only by a random key held in your own browser with a generated display name; we hold no email or password for you. Clearing your browser data removes that identity and its scores permanently.
3. Our lawful basis for processing
| Processing | Lawful basis (UK GDPR Article 6) |
|---|---|
| Holding your account so you can sign in and play | Article 6(1)(b) — performance of a contract with you |
| Showing player names and scores on leaderboards | Article 6(1)(f) — legitimate interests: running a competitive quiz service that works as players expect |
| Keeping the service secure and preventing cheating or abuse | Article 6(1)(f) — legitimate interests: protecting the service and its players |
| Replying to a message you send us | Article 6(1)(f) — legitimate interests: answering your enquiry |
| Optional website analytics, where enabled | Article 6(1)(a) — consent, which you may withdraw at any time |
Providing this data is not a statutory requirement. It is required only to hold an account: without an email address and a PIN there is no way to sign you back in. You may always play as a guest instead.
4. Who we share it with
We do not sell, rent or trade your personal data, and we do not share it for marketing. It is stored on hosting infrastructure operated by our hosting provider, which acts as a data processor and handles it only on our instructions in order to run the site. Your player name and scores are visible to other players in the ordinary course of play: leaderboards, duel results, group games and pub league tables. We will disclose data where the law requires it.
5. International transfers
Our hosting is within the UK or the European Economic Area. If that ever changes, transfers will be made only to a country with UK adequacy status or under appropriate safeguards such as the International Data Transfer Agreement, and this notice will be updated to say so.
6. How long we keep it
- Account data is kept for as long as your account exists. Ask us to delete it and we delete it.
- Inactive accounts may be removed after a long period of no activity.
- Pub league results are retained as a historical record of a competition, under the team name used that night.
- Messages you send us are kept only as long as needed to deal with them.
7. Your rights, and how to use them
Under the UK GDPR you have the following rights. All of them are free, and we will respond within one month.
- Right of access (Article 15). Ask what we hold about you and get a copy.
- Right to rectification (Article 16). Have anything inaccurate corrected. You can change your player name yourself at any time.
- Right to erasure (Article 17). Have your personal data deleted — see below.
- Right to restrict processing (Article 18). Ask us to stop using your data while a dispute is resolved.
- Right to data portability (Article 20). Receive the data you gave us in a structured, machine-readable format.
- Right to object (Article 21). Object to processing we carry out under legitimate interests, including appearing on public leaderboards.
- Right to withdraw consent (Article 7). Where we rely on consent, withdraw it at any time without affecting what was done beforehand.
To use any of these, write to us through the contact page from the email address on your account, or tell us the player name concerned. We may need to confirm it is really you before acting, so that somebody else cannot delete your account.
Deleting your account and your data
You have the right to have your personal data erased, and you do not have to give a reason. On request we will, within one month:
- delete your email address;
- delete your player name;
- delete your stored PIN or password hash;
- delete the account itself, so it can no longer be signed into.
We will also remove your player name from leaderboards and from duel and group game records, or replace it with an anonymous label where a record of the game itself has to remain so that other players' results still make sense. Once a name has been removed in this way the remaining record is no longer personal data and cannot be traced back to you.
One honest exception: a pub quiz result recorded under a team name, which is usually shared by several people and is not normally personal data, is kept as the historical record of that competition. If a team name does identify you, tell us and we will change or remove it.
Erasure is permanent. Scores, XP and rank cannot be recovered afterwards.
8. Cookies and browser storage
We use a session cookie to keep you signed in and to remember which table or squad you joined. The game screens use your browser's local storage to hold your place in a round, so refreshing the page or losing signal does not cost you your answers. Both are strictly necessary for the site to work and neither is used for advertising or cross-site tracking.
If website analytics are switched on by the site owner, that provider may set its own cookies. Where that happens it is disclosed here and relies on your consent.
9. Automated decision-making
We do not carry out profiling or automated decision-making that produces legal or similarly significant effects. Scoring a quiz is automated, but it only decides who won a quiz.
10. Security
PINs and passwords are stored only as one-way hashes, and the site is served over HTTPS. No system is completely secure, so please use a PIN you do not use anywhere else.
11. Children
Quizmondo is intended for general audiences. If you are under 13, please ask a parent or guardian before creating an account. If you believe a child has provided us with personal data without that permission, contact us and we will delete it.
12. Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.
13. Changes to this notice
If what we collect or what we do with it changes, this page is updated and the date at the top changes with it.