Privacy Policy

1 Who we are

Retro Trivia is run by Tipstrike SRL, 88 Calea Mosilor, the data controller for the personal data described here. For anything about your data, write to office@tipstrike.com.

2 What we collect

Your account. When you sign up we store:

• your email address and a password, which is stored only as a salted hash (bcrypt);
• the player name you pick, your preferred language, and when you signed up and last logged in;
• if you sign in with Google: your Google account id, email address and the address of your Google profile picture. We never see your Google password.

Your games. To score games, run leaderboards and keep ranked play fair we keep:

• the games you played, your scores and placements;
• for each question: whether you got it right, the points you earned and how long you took;
• your ranked ratings (RP), tiers and how each match changed them;
• fair-play records: answers that were suspiciously fast in ranked matches, and matches you left early (which can lead to a short queue cooldown).

Chat and guesses. Messages you type in a room are shown to the other players in it and kept in the room's memory only while it's open (at most the last 50). They're not saved to our database. Messages are filtered for offensive language.

While you play. We see whether you're online, which room you're in and whether the game window is in the background (so we can lock answers while you might be looking them up). This isn't stored after you leave.

Technical data. Like any website, our servers receive your IP address, browser and device details with every request, and keep them for a short time in server logs for security and troubleshooting.

3 Why we use it, and on what legal basis

• To provide the game: your account, signing in, matchmaking, rooms, scores, ranked ratings and leaderboards. This is necessary to perform our agreement with you (the Terms & Conditions; Art. 6(1)(b) GDPR).
• To keep the game fair and safe: anti-cheat checks, cooldowns, chat filtering, preventing abuse and securing the service. This is our legitimate interest, and yours as a player (Art. 6(1)(f) GDPR).
• To send account emails such as login links, email confirmation and password resets (performance of our agreement). We don't send marketing emails.
• To meet legal obligations and handle legal claims, where required (Art. 6(1)(c) and (f) GDPR).

4 What other players see

Your player name and profile picture, your scores and placements, your ranked tier and rating, and your position on the public leaderboard can be seen by other players and visitors. Your email address is never shown to other players.

5 Who we share it with

We don't sell your personal data or use it for advertising. We share it only with service providers that help us run the site, under agreements that require them to protect it:

• Fly.io: hosts the application (servers in Frankfurt, Germany).
• Neon: hosts our database (on AWS in the EU).
• Google: "Sign in with Google", if you use it.
• Our email delivery provider, to send account emails.

We may also disclose data when the law requires it, or to protect our rights, our players or the public.

6 International transfers

We keep our servers and database in the European Union. Some providers (such as Google and Fly.io) are based in the United States and may access data from there. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

7 How long we keep it

• Account data: for as long as you have an account.
• Game history, ratings and fair-play records: while your account exists. When you delete it, they're deleted or made anonymous, so past games of other players still add up.
• Chat messages: only while the room is open.
• Server logs: a few weeks at most.
• Your cookie choice: 6 months, after which we ask again.

8 Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct it (you can change your player name and email yourself in Settings);
• have it deleted, including your whole account;
• restrict or object to how we use it, including use based on our legitimate interests;
• receive it in a portable, machine-readable format;

To use any of these rights, email office@tipstrike.com from the address on your account. We'll answer within one month. You can also complain to a data protection authority, in the country where you live or work, or in Romania (the National Supervisory Authority for Personal Data Processing, ANSPDCP, dataprotection.ro).

9 Children

You need to be at least 16 to create an account yourself. Younger players need a parent or guardian's permission and should play through their account. Kids modes are designed to be played with a parent or guardian, who is responsible for the account. If you believe a child has given us personal data without that permission, contact us and we'll delete it.

10 Security

The site is served only over HTTPS, passwords are stored as salted hashes, session cookies are signed, and access to our systems is limited to the people who run the site. No system is perfectly secure, but we work to protect your data and will tell you, as the law requires, if a breach puts it at risk.

11 Changes to this policy

We'll update this policy when the game or the law changes. The date at the top shows the latest version; if a change matters, we'll tell you on the site or by email before it takes effect.

12 Contact

Questions about this policy or your data: office@tipstrike.com. See also our Cookie Policy.