Privacy policy
This policy explains what personal data the Contender app ("the app") collects, why, who it's shared with, and what you can do about it. The app is operated by Crunch Time, Kaiserstraat 9, 2311 GN Leiden, the Netherlands (KvK 78080542) ("we", "us"). Contact: support@contenderquiz.com.
1. What we collect
| Data | When | Why |
|---|---|---|
| Anonymous account ID | Created automatically on first launch (guest) | Saves your casual play on this phone. |
| Email address | Only if you verify an email to play ranked or use friends | Sign-in, one-time codes, account recovery. |
| Username | When you pick one | Shown on leaderboards, friend search and player cards. |
| Language setting | Automatically | Serves questions in your language. |
| Play data: rounds, answers, scores, ratings, rating history, categories played | When you play | Scoring (done on our server), your profile stats, rankings. |
| Friends, friend requests, blocks, username reports | When you use those features | Run friends and keep the community safe. |
| Purchase status (premium or not) | If you subscribe | Unlock premium features. We don't see your card or payment details. |
| Ad and device data (advertising ID, IP address, device and app info) | When ads are shown | Show and measure ads, prevent fraud. Collected by Google AdMob, not by us. |
| Technical logs (IP address, request time, errors) | When the app talks to our servers | Security, debugging, abuse prevention. |
We don't ask for your real name, phone number, contacts, precise location, photos or microphone.
2. Public information
Your username, ratings, tier and ranked standings are visible to other players on leaderboards and player cards. Don't put personal information in your username. Your email is never shown to other players.
3. Legal bases (EEA/UK)
- Contract: running your account, quizzes, rankings, friends and purchases.
- Legitimate interests: security, fraud and abuse prevention, moderation, fixing bugs.
- Consent: personalised ads and ad identifiers, where the law requires it. You can change this in the consent form in Settings, or in your phone's privacy settings.
- Legal obligation: where we must keep or share data by law.
4. Who we share data with
We don't sell your personal data. We use these service providers, who process data on our behalf or under their own terms:
- Supabase: database, sign-in and server functions. Hosted in Frankfurt, Germany (EU).
- Google AdMob: ads. Google acts as an independent controller for ad data. See how Google uses data.
- RevenueCat: subscription management. Receives your account ID and purchase status.
- Apple / Google: app store, payments and subscription billing.
- Cloudflare: hosts this website.
- Email delivery provider: sends your verification codes.
We may also disclose data if the law requires it or to protect users and the app from abuse.
5. International transfers
Our main database is in the EU. Some providers above (AdMob, RevenueCat, Apple, Google, Cloudflare) may process data outside the EEA/UK, relying on safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.
6. How long we keep data
We keep account and play data until you delete your account. Deleting your account removes your profile, email, rounds, answers, ratings and rating history from our database. Friend and block records involving you are removed with it. Server backups and logs may hold copies for a short period (up to 30 days) before they expire. Aggregated question statistics that no longer identify you may stay. Ad providers keep data under their own policies.
7. Your rights
- Delete your account: Profile → Settings → Delete account. This works for guests and signed-in players.
- Access, correct, export, restrict or object: email support@contenderquiz.com from the address on your account.
- Withdraw consent to personalised ads at any time (see section 3).
- Complain to your data protection authority. We'd appreciate the chance to help first.
We reply within one month. We may ask you to confirm you own the account first.
8. Children
The app isn't for children under 13 (or the higher age of digital consent in your country, up to 16, where required). We don't knowingly collect data from them. If you think a child has an account, email us and we'll delete it.
9. Security
Data is encrypted in transit. Access to the database is restricted by row-level security, and scoring and account actions run on our server, not on your phone. No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.
10. Changes
If we change this policy in a way that matters, we'll update the date above and tell you in the app before it takes effect.