Legal

Privacy Policy

Version 1.3 — effective July 7, 2026. Applies to all RunRiva mobile apps — U.S. Presidents Quiz, Sci-Fi & Fantasy Book Trivia, Crime & Mystery Trivia, Pixel Quiz: Video Game Trivia, and Hangover Quiz: Easy Trivia — and the website quiz.runriva.com. This Policy fulfils the information duty under Arts. 13–14 GDPR (Regulation (EU) 2016/679).

1. Who we are (Data Controller)

The controller of your personal data is Maciej Dzierżek, a sole proprietor entered in the Polish Central Register of Economic Activity (CEIDG), place of business: ul. Cieszyńska 1a/57, 02-716 Warsaw, Poland · NIP: PL7411885009 · REGON: 280016640 (the “Studio”, “we”, “us”).

Contact us on any privacy matter at maciej.dzierzek@gmail.com. We are not required to appoint a Data Protection Officer (Art. 37 GDPR) and have not done so.

2. Anonymous-first by design

You can play without giving any personal details. On first launch the app creates a random, device-bound play account so your progress can be saved and shown on leaderboards — no name, email or password is required. If you want to keep your progress across devices, you can optionally add an email address, verified by a one-time code (we never set or store a password).

3. What we collect

• Information you provide — an optional email address (account upgrade); a display name (auto-generated, e.g. “Player #1234”, or one you choose); friend connections and challenges you create; messages you send us.
• Gameplay data — scores, streaks, achievements, daily-challenge results, XP and leaderboard entries, synced to our backend.
• Automatically collected — device model, operating-system version, app version, language, an IP-derived approximate country, and an advertising identifier (IDFA on iOS / Advertising ID on Android). Your IP address is processed transiently by our infrastructure and ad providers. The advertising identifier is personal data and is used only as your consent and device settings allow.
• Purchases — purchase receipts and entitlement status (e.g. “ads removed”, “premium”, game currency packs (for example Votes), Bundle Pass). Payment is processed by Apple/Google; we never receive or store payment-card data.
• Usage analytics — anonymous in-app events (screens viewed, quizzes completed, feature use). Outside the EEA/UK/Switzerland, analytics is on by default and you can turn it off any time in Settings. In the EEA/UK/Switzerland, it runs only with your consent (the same consent screen we show for ads); if you decline, no identifiers are used and only aggregate, non-identifying signals are processed. We never collect personally identifiable information through analytics.
• Crash diagnostics — crash reports, collected only if you opt in (toggle in Settings; off by default).

We do not collect contacts, precise location, phone number, postal address or special-category data (Art. 9 GDPR). On-device data such as raw settings and your local question history stays on your device and is removed when you uninstall.

4. Third-party services we use

We name every service that receives or processes your data, and we do not list providers we do not use. Each is contractually required to protect your data to a standard at least equivalent to this Policy.

• Supabase — our backend, anonymous authentication, database and cloud sync (account, gameplay, leaderboards, friends). Hosted in the EU (Ireland).
• Google AdMob (Google Ireland Ltd / Google LLC) — serves ads and the EEA/UK consent form; processes the advertising identifier and ad-interaction data. Google acts as an independent controller for ad delivery.
• RevenueCat, Inc. (USA) — validates purchases and manages entitlements (receives your anonymous user ID and purchase data; no card data).
• Google Firebase (Google Ireland Ltd / Google LLC) — Analytics (on by default outside the EEA/UK/CH; consent-gated inside, with Google Consent Mode) and Crashlytics (opt-in).
• Apple and Google — app distribution and in-app-purchase payment processing.
• Cloudflare — hosting and privacy-friendly, cookieless server analytics for the website quiz.runriva.com (processes IP for the website only).
• Google Analytics 4 (Google Ireland Ltd / Google LLC) — website usage analytics, loaded on quiz.runriva.com only with your consent (cookie banner); sets analytics cookies and processes an IP-derived approximate location with IP anonymization. Not used in the apps.
• Microsoft Clarity (Microsoft Ireland Operating Ltd / Microsoft Corporation) — website usage analytics and aggregated session insights, loaded on quiz.runriva.com only with your consent (cookie banner); sets analytics cookies. Not used in the apps.

5. Why we process data, and our legal bases

• To provide the game (account, progress sync, leaderboards, friends, challenges, purchases/entitlements) — performance of a contract, Art. 6(1)(b) GDPR.
• Personalized ads (incl. the advertising identifier) — your consent, gathered via Apple’s App Tracking Transparency (iOS) and the Google UMP / IAB TCF consent form (EEA/UK), Art. 6(1)(a). Non-personalized ads rely on our legitimate interest in funding a free app, Art. 6(1)(f).
• Usage analytics — in the EEA/UK/Switzerland, your consent (Google UMP / IAB TCF consent form), Art. 6(1)(a); outside those regions, our legitimate interest in understanding and improving the app, Art. 6(1)(f), with an opt-out in Settings. Crash reporting — your consent (Settings toggle), Art. 6(1)(a).
• Security, anti-cheat and abuse prevention — legitimate interest, Art. 6(1)(f).
• Legal obligations — Art. 6(1)(c).

6. Ads & your choices

Free versions are supported by Google AdMob (rewarded, banner and interstitial ads). Before any personalized ads, we ask for your consent — on iOS via the system App Tracking Transparency prompt, and in the EEA/UK via a Google-certified consent form. If you decline, you still see non-personalized ads and lose no app functionality. You can change your choice any time via your device privacy settings (and reset or delete the advertising identifier there) and, where shown, the in-app “Ad privacy options”. You can also remove ads entirely with an in-app purchase.

7. Sharing your data

We do not sell your data for money. However, when you consent to personalized ads, the advertising identifier is shared with Google/AdMob — which, under the California CPRA, counts as “sharing” (and may be treated as a “sale”) for cross-context behavioural advertising. You can opt out at any time by declining the tracking/consent prompt or via your device settings (see § 6 and § 12). Apart from the providers in § 4, we share data only where required by law.

8. International transfers

Your core account and gameplay data is stored in the EU (Supabase, Ireland). Some other providers (RevenueCat, Google/Firebase/AdMob, Cloudflare) may process data in the United States or globally; such transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

9. How long we keep it

Account and gameplay data: until you delete your account or data (see § 11). Analytics and crash data: retained by Google per our console setting (Google Analytics, up to 14 months). Security/anti-abuse logs: up to 12 months. Support email: up to 3 years from the last message. After the applicable period, data is deleted or anonymized.

10. Your rights (GDPR)

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting prior lawful processing). To exercise any right, email maciej.dzierzek@gmail.com; we respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl — or the authority where you live.

11. Deleting your account & data

You can permanently delete your account and data: in the app (Settings → Delete account) or by email. This removes your account, synced progress, leaderboard entries and social connections. Full instructions and scope: Delete your account. Uninstalling the app clears local on-device data.

12. Children

Our apps are not directed to children and are intended for users aged 13 and over. Where local law sets a higher age for consent to data processing — 16 in Poland and parts of the EEA — that age applies, and a parent/guardian must consent. We do not knowingly collect data from children below the applicable age (consistent with the US COPPA); if we learn we have, we delete it. We do not enroll in “Designed for Families” / Kids programs.

13. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know, delete and correct your personal information, to opt out of its “sale” or “sharing”, and not to be discriminated against for exercising these rights. As explained in § 7, sharing the advertising identifier for personalized ads is a “share/sale” under the CPRA — you can opt out by declining the tracking/consent prompt or via your device settings. To exercise other rights, email maciej.dzierzek@gmail.com.

14. Cookies

The apps do not use cookies. The website quiz.runriva.com uses only the strictly necessary storage it needs to function (including remembering your cookie choice). Optional analytics cookies — Google Analytics (GA4) and Microsoft Clarity — load only after you consent via our cookie banner (legal basis: your consent, Art. 6(1)(a) GDPR and the ePrivacy/“cookie” rules). Nothing analytics-related runs before you choose, and GA4 operates under Google Consent Mode with analytics storage denied until consent. You can change or withdraw consent at any time via “Cookie settings” in the website footer; declining clears those analytics cookies. We use no advertising cookies on the website.

15. Source of data

Most data comes directly from you or your use of the app. Some comes indirectly from Apple/Google (purchase confirmations and entitlements) and from our backend processing your gameplay.

16. Changes

We may update this Policy for valid reasons (legal changes, new providers or features). We publish the current version here and, for material changes, give reasonable advance notice in-app. Our store privacy disclosures (Apple “Privacy Nutrition Labels”, Google Play “Data Safety”) are kept consistent with this Policy.

Questions? maciej.dzierzek@gmail.com · See also our Terms of Use and Sources & licenses. In case of any discrepancy, Polish law governs interpretation.