Privacy policy

You can play as a guest without creating an account. When we do collect data, it is typically:

• Account: email (if you sign in with Google or email), username / display name, Firebase user ID, language preference.
• Password: if you register with email, the password is handled and stored by Google Firebase Authentication. We do not store it in plaintext, email it, or share it with third parties.
• Sign in with Google: Google sends us basic account info you approve, such as name and email. Your Google password never reaches us.
• Gameplay: scores, correct/incorrect answers, play history, titles you save to your list, question requests.
• Notifications (optional): a device push token (FCM) if you ask to be notified when questions are added.
• Technical: browser or app version, crash logs, and approximate country from IP for server security (we do not track precise location).

We use this data only to run the service:

• Sign-in, merging guest progress into your account, leaderboards, and your saved list.
• If you opted in, notifying you when questions are added for a title you requested.
• Preventing abuse, fraud, and technical failures.

We do not give your account details to third parties for their own business. To operate the app we use processors who receive only what they need to provide that service:

• Google Firebase Authentication and (if notifications are on) Firebase Cloud Messaging — sign-in and push.
• Google Sign-In — when you use the “Sign in with Google” button.
• Our hosting and database infrastructure — storing account and gameplay records.
• If required by law (for example a court order), we may disclose the minimum necessary information to the competent authority.

The leaderboard shows only your username and score. Email and password are never public.

Account and gameplay data are kept while your account exists. After a deletion request we delete or de-identify your account record and related personal data within a reasonable time (no later than 30 days), except records we must keep to meet a legal obligation.

Connections are encrypted with HTTPS. Passwords are protected by Firebase hashing. No internet transmission can be guaranteed 100% secure.

MovQuiz is not directed at children under 13 and we do not knowingly collect their data. If we learn that a child under 13 created an account, we will delete it. The app is not part of Designed for Families / child-directed programs.

Under applicable data protection law you may request access, correction, deletion, restriction, or objection. Email [email protected] to delete or correct your account; include the email you use on MovQuiz.

Privacy requests: [email protected]

If we update this policy we will change the date above. Material changes may also be announced in the app or on the site.