Last Updated: October 6, 2026
Information You Provide: When you create an account, we collect basic profile details like your email address and username. We use secure, industry-standard authentication providers (like OAuth) to manage your login credentials, meaning we never see, collect, or store your raw password. We also collect any information you voluntarily provide when communicating with us.
Agreement records: We record the terms version, time, and signup or affiliate setup action associated with your account to document your agreement. Stripe also records acceptance of the terms during checkout. These records are separate from your marketing email preferences. Account-linked agreement records are removed when your account is deleted; Stripe retains transaction records under its own retention policies.
Information Collected Automatically: To help us understand website traffic and improve your experience, we use Google Analytics, which securely logs your IP address, browser and device information, and the pages you visit. We also use Google AdSense, which utilizes cookies to serve personalized ads.
Diagnostic and error reporting: When the app encounters an error, we automatically collect technical information to diagnose and fix problems. This may include error messages, stack traces, device and browser type, app version, the page you were on, and a log of recent in-app actions (not your trivia answers or passwords). We use a pseudonymous session identifier; if you are logged in, we associate reports with your account id. We retain this data for 90 days. We do not use it for advertising. You may request deletion of diagnostic data tied to your account via Contact Us.
Social & Gameplay Profile Data: If you participate in leaderboards or groups, we collect a display name, avatar, and your gameplay scores so they can be shown to other players. You choose your display name and can change it at any time. You can also set your profile visibility to public or mutuals-only.
We use your information to provide, maintain, and improve our services, to communicate with you, and to ensure legal compliance. We use diagnostic and error reports to operate the service, improve security, and fix bugs (legitimate interest). For our users in the European Union, we process this data based on contract performance, your consent, legitimate business interests, and legal obligations.
If you use leaderboards or groups, we display your display name, avatar, and gameplay scores to other users according to your visibility settings.
Your source material and custom questions. We process the material and instructions you supply, and the questions we create from them, to generate, host, deliver, support, and measure your quizzes. We never add this content to the shared Atrivial Library or reuse it in other customers' quizzes. Supplying content does not transfer ownership of your source material to Atrivial. People you share or publish your quizzes with can see the content you make available to them.
Improving our questions. By default, we may use aggregate engagement and difficulty statistics from your quizzes to help write better questions. This permission does not include your question text or source material, AI model training, or publication of your content. You can turn off "Question improvement" in your account preferences to exclude your stats from future analysis for this purpose. This does not undo improvements already made or affect the data we use to operate and support your quizzes.
AI providers. We send the content needed for a generation request to AI service providers. By default, we use providers under terms and settings that do not allow them to train their models on that content. You can opt in to "AI model training" in your account preferences. This permits additional providers to use the inputs and outputs they receive, including source material and generated questions, for model training under their terms. It does not guarantee better results. Only share content you have permission to use this way. Turning the setting off stops future sharing with those providers; it cannot recall content already sent or undo training. A restriction on training does not mean that a provider never retains content for processing, security, or legal purposes.
Your choices. These two settings are separate and apply to every quiz in your account, including scheduled generation. With both off, we still process content and usage data as needed to run your quizzes, provide your analytics, handle support, prevent abuse, and meet legal obligations. We keep a record of changes to these settings. Our own Library content and questions created independently of your materials remain available for us to improve and reuse.
We may send occasional Atrivial news, tips, and offers based on your email preference. You can opt out anytime by contacting us. Essential account and security emails continue.
We do not sell your personal data. We share information only with trusted service providers, including hosting and AI providers, who help us run our platform. Our use of your quiz content is described in "Your content and AI" above. We also use Google for analytics and advertising. If you use leaderboards or groups, other users can see your display name, avatar, and gameplay scores based on your visibility settings. We may also share information if required by law or in the event of a business transfer.
You own your data. You have the right to access, correct, or delete your personal information at any time, including diagnostic data associated with your account. You can edit your display name and change your profile visibility (public or mutuals-only) in your profile settings. Residents of the EU and California have additional specific rights under the GDPR and CCPA. You can easily opt out of Google Analytics and personalized advertising through your browser or Google account settings.
We use access controls and other security measures to protect your data. We retain your information for as long as your account is active or as necessary to fulfill legal obligations. Diagnostic and error reports are retained for 90 days, then deleted. Google Analytics data is automatically purged after 14 months.
Our services are hosted in the United States, meaning your information may be transferred and processed there. We utilize approved safeguards, such as Standard Contractual Clauses, to ensure your data remains protected during international transfers.
Our service is not intended for children under 13 (or under 16 in the EU). We do not knowingly collect or solicit personal data from children.
We may update this policy as our services evolve. If we make material changes, we will notify you via email or by placing a prominent notice on our website.