Quoggle lets you play quizzes, compare scores, build Momentum and challenge friends. This policy explains which personal information we use, why we use it, what other players can see, and how you can control or delete it.
Who is responsible for your information
QUOGGLE LIMITED, company number 17538160, is the controller responsible for personal information processed to operate Quoggle.
Privacy contact: privacy@quoggle.co.uk
Postal correspondence: 144 Tofts Road, Barton Upon Humber, DN18 5ND, United Kingdom
Website: quoggle.co.uk
Contact us with questions about this policy or requests concerning your information. We may ask for enough information to confirm that a request relates to your account. We will not ask you to send your password, sign-in code or full payment-card details.
Some providers, including Apple and Google when operating their stores or advertising services, also process information for their own purposes under their own privacy notices.
The information we collect
Account and age information
When you register or manage your account, we collect your email address, username, account identifier, selected avatar or profile photo, optional country flag, declared year of birth, account-verification status, acceptance of our terms and your communication preferences.
We use birth year only, rather than your full date of birth, to assess eligibility and apply age settings. We derive an age group from that year. Your declared birth year is not displayed on your player profile or rankings and is not supplied to advertisers. Your chosen country flag is a profile choice, not a reading of your GPS location.
Where you set a password, the account service uses a salted password hash to verify it. Sign-in and recovery processes also use session credentials and short-lived verification or recovery codes. Keep these private.
Gameplay and social information
We process the questions presented in online games, your answers and their timing, run progress, scores, completed ranked days, rankings, Momentum, 100 Club achievements, and the use or award of game items such as hearts and power-ups.
We also process player searches, friend requests and accepted friendships, blocks, challenges, Head-to-Head results, rivalry history and activity information needed to show you relevant events. Result-viewing state and similar convenience settings can be stored on your device.
Profile photos
If you choose to upload a photo or take one in the app, we process the selected image for your avatar. The app crops or resizes and compresses it before submitting it with your profile. You can use a built-in avatar instead.
Your avatar is visible to other players wherever your public profile is displayed. Choose a photo you are comfortable sharing and have permission to use. Avoid photos containing other people or private information.
Purchases and advertising
Where purchases are enabled, we process your Quoggle account identifier, product and transaction references, purchase or restoration status, and the entitlement needed to provide purchased features. Apple or Google handles store payments. Quoggle does not receive your full payment-card details.
Advertising services process device and network information, advertising or other permitted identifiers, ad impressions and interactions, diagnostic information and consent settings. An IP address can reveal an approximate location. See “Advertising and your choices” below.
Support and reports
We process messages you send us, account-deletion and privacy requests, bug reports, player reports and question reports. A report can include your account identifier, the question or player concerned, the reason, your written explanation and relevant gameplay context. We may obtain information about you when another player challenges, friends, blocks or reports you.
Please do not put passwords, sign-in codes, medical information or someone else’s private details into a report.
Technical and website information
When you connect, our infrastructure and service providers process information such as your IP address, request time, app or browser details, operating system, errors and security events. Quoggle records your account’s last-active time and your device’s time-zone setting to support account administration, notification timing and quiet hours. Push services use a device notification token when you enable notifications.
Our update service can process technical information needed to deliver compatible app updates. The website’s hosting and security services process browser requests and connection information to deliver and protect the site.
We do not need your contacts, address book, precise GPS location, microphone recordings or video library to operate the current quiz and social features. We upload only the image you choose for your profile picture, not the other photos in your library.
Why we use information and our lawful bases
Under UK data-protection law, we need a lawful basis for each purpose. Acknowledging this policy does not itself give consent to every use of information.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Create and operate accounts, authenticate players, recover access and deliver the game | Account, authentication and gameplay information | Contract: necessary to provide the service you request |
| Maintain scores, rankings, Momentum and achievements | Player identifiers, public profile and game records | Contract: these are core features of the competitive game |
| Carry out friend requests, challenges and other social actions you request | Public profile, friend links, blocks, challenge and activity records | Contract |
| Apply age eligibility, age-suitable content and additional protections for younger players | Birth year and derived age group | Legitimate interests in providing an age-appropriate service; legal obligation where a specific legal requirement applies |
| Keep accounts and competitions secure, prevent abuse or cheating, investigate reports and maintain reliability | Relevant account, game, report, connection and diagnostic information | Legitimate interests in a fair, safe and reliable service |
| Answer support and privacy requests | Contact details, correspondence and relevant account information | Legitimate interests in resolving enquiries; legal obligation where needed to honour statutory rights |
| Verify purchases, restore access and deal with transaction disputes | Account identifier, purchase references and entitlement status | Contract; legal obligation for required financial records |
| Send optional push notifications | Push token, preferences, time zone and relevant activity | Consent for the optional notification service |
| Send optional marketing emails to eligible adult players | Email address and marketing preference | Consent |
| Read or store non-essential advertising information on your device | Advertising identifiers, consent settings and relevant device information | Consent where required by law |
| Deliver, measure and protect non-personalised advertising where permitted | Ad interactions, permitted identifiers, diagnostics and network information | Consent where required; otherwise legitimate interests in funding the free service and preventing ad fraud, subject to applicable law |
Where we rely on legitimate interests, we consider the effect on players and apply safeguards, particularly for younger players. You may object to processing based on legitimate interests. You may always object to use of your information for direct marketing. See “Your rights” below.
We do not request special-category information such as health records for gameplay, and we do not use profile photos for facial recognition or biometric identification.
What other people can see
Quoggle is a competitive and social game. Your username, avatar or photo, optional country flag, scores, rankings, Momentum and achievements can appear to other players in player search, profiles and leaderboards. World rankings are visible beyond your friends.
Friend requests show your public profile to the recipient. A Head-to-Head opponent can see the challenge and shared results, including relevant rivalry statistics. Your friends can see the social and shared-Momentum information provided by those features.
Your email address, birth year, password verifier, sign-in credentials and notification token are not part of your public player profile. Authorised support administrators may access necessary account information to operate the service and deal with support or abuse.
If you use the share function, the content you choose to send is passed to the app or service you select. That service’s own privacy settings and policies apply. Other players can also copy information they can see; removing it from Quoggle cannot remove an independent copy they have already made.
Photos and device permissions
You can optionally take a photo or choose an existing image for your profile picture. Depending on your device and app version, Quoggle may request camera or photo-library permission. We upload the picture you choose to use as your avatar, which other players can see alongside your username. We do not upload your other photos. You can deny access and still use a built-in avatar.
Notification permission is optional. You can change these permissions in your device settings. Revoking camera or photo access does not automatically remove an image you previously saved as your avatar; replace that avatar or delete your account to remove it from your profile.
The app uses secure device storage for its sign-in token. It also stores limited local settings and cached information, such as onboarding state, viewed activity and question reports waiting to send. Unsent reports can be retried when you reconnect.
Notifications and emails
You choose whether to enable push notifications. Available categories include General, Friend Requests and Challenge Updates. Notifications can tell you about requests, completed challenges or relevant Momentum reminders. We use preferences, activity and time-zone information to decide whether and when an enabled notification should be sent.
Manage notifications in your Quoggle profile and your phone’s settings. Notification text may appear on your lock screen according to your device settings. Delivery involves Expo and Apple’s or Google’s notification service.
We use your email for necessary account messages, including verification, recovery and responses to enquiries. These service messages are separate from marketing. Account emails are sent through Resend. Its current domain configuration attempts TLS encryption to the recipient’s mail server but allows delivery without TLS if the recipient does not support it. This email-transport setting is separate from the app’s encrypted API connection.
Marketing emails are optional for eligible adult players and require a separate choice. We do not currently send marketing emails, and under-18 accounts cannot enable them. If marketing is introduced, you can withdraw consent through the unsubscribe method in the message or by contacting us.
Advertising and your choices
The free app includes Google AdMob advertising, including rewarded and other ad formats where offered. The current app requests non-personalised ads for all players. Confirmed under-18 accounts additionally use Google’s under-age settings, and the app’s ad flow waits until an eligible age group is confirmed.
“Non-personalised” does not mean “no personal information”. Google’s advertising SDK can process IP addresses, device or account identifiers, ad interactions and diagnostic information to deliver and measure ads and prevent fraud. Approximate location may be inferred from an IP address. We do not send Google your Quoggle email address, birth year or profile photo for advertising through our current app integration.
Where consent is required, the advertising consent flow must be completed before the relevant processing starts. Eligible adults can revisit advertising privacy choices from their profile when Google’s privacy form is available. Device advertising settings provide additional controls. Withdrawing consent does not affect processing that was lawful before withdrawal.
Declining an optional rewarded ad means the advertised reward may not be available; it does not require you to enable personalised advertising. An ad-free purchase controls ad display and does not remove essential account, security or purchase-verification processing.
Who receives information
We use service providers to operate Quoggle. They receive the information needed for their role and process it under applicable contractual terms. Providers may use authorised subprocessors.
| Recipient | Purpose and relevant information |
|---|---|
| Cloudflare | Hosts the API and database and provides infrastructure, request delivery, security and operational services; processes account and game data stored on that infrastructure and connection information |
| Expo | Supports app delivery and updates and, where enabled, push notification delivery; processes relevant technical information, notification tokens and notification content |
| Apple and Google | Distribute the app, process store payments and refunds, and deliver platform notifications; receive the information required for those services |
| RevenueCat | Supports purchase verification, restoration and entitlements; processes the Quoggle account identifier, store transaction information and related technical data when configured |
| Google AdMob and the advertising providers disclosed in its consent information | Deliver, measure and protect advertising; process relevant device, network, interaction and consent information |
| Resend | Sends account verification and recovery messages from no-reply@mail.quoggle.co.uk; processes recipient email addresses, message content and delivery information |
| Email hosting and forwarding providers | Handles privacy and support correspondence; processes sender contact details and messages |
| Authorised staff and professional advisers | Provide support, administer the game, investigate abuse, or meet accounting and legal responsibilities, subject to appropriate access restrictions |
Other players receive the information described in “What other people can see”. We may also disclose information when required by law, to establish or defend legal claims, or to protect users and the service where necessary and lawful.
If the business is reorganised or transferred, relevant information may be provided to advisers and a successor subject to appropriate safeguards and applicable notice requirements.
We do not sell your account details or profile photos. This does not mean that advertising involves no disclosure of personal information; the advertising disclosures above still apply.
Provider information: Cloudflare privacy, Expo privacy, RevenueCat privacy, Resend privacy, Apple privacy and Google privacy.
International processing
Our providers operate internationally, so information may be processed outside the UK, including in the United States and other countries where they or their subprocessors operate. The current account database is shown in Cloudflare’s Western Europe region; this does not mean every related processing activity stays there. Resend stores email content and delivery information in the United States, even where a European sending region is chosen.
For restricted UK transfers, Cloudflare’s published customer data-processing addendum provides standard contractual clauses with the UK Addendum. Resend’s published terms also incorporate contractual transfer safeguards and describe the UK extension to the Data Privacy Framework. These terms describe available contractual protections; the applicable account agreements and any required transfer assessments must also be maintained. Contact us for details and copies of applicable safeguards.
Contact us for information about the safeguards applying to your information and how to obtain a copy, subject to necessary redactions.
How long we keep information
We keep identifiable information only for as long as it is needed for the purpose described here, including resolving disputes and meeting specific legal obligations. We consider whether the account or issue is active, whether the information remains necessary, the risk of retaining it and any applicable legal retention requirement.
| Information | Retention approach |
|---|---|
| Active account, public profile, birth-year declaration and preferences | Kept while the account is in use; removed from the live account service following deletion, subject to the limited exceptions below |
| Scores, runs, Momentum, achievements, friendships and rivalry history | Kept to provide your game history and social features while the account exists; linked live records are removed through account deletion |
| Verification and recovery codes | Valid for 15 minutes; consumed or replaced through authentication flows, and removed on account deletion. Expiry alone is not automatic erasure of an unused stored hash |
| Sign-in sessions | Become invalid after 30 days without the relevant activity; active sessions can be extended. Session records are removed on logout, account deletion or applicable recovery flows; invalidity is distinct from physical removal |
| Rate-limit records | Expire after their applicable security window and are cleared opportunistically during later requests |
| Push token and delivery records | Used while needed for enabled notifications; account-level tokens are removed when disabled or the account is deleted, with provider delivery records subject to their applicable retention |
| Support correspondence and reports | Kept while handling the issue and for a proportionate period needed for follow-up, safety or claims; linked in-service reports are subject to the account deletion process |
| Transaction and entitlement records | Kept while needed to deliver or restore purchases, resolve disputes and meet applicable tax or accounting obligations; store and provider records are managed separately |
| Security logs, audit records and recovery copies | The current account Worker has persisted Workers Logs and Traces disabled. Cloudflare still processes infrastructure and database-query metadata. The live D1 Time Travel screen provides a recovery window of up to 30 days. Deleted information can remain in recovery history during that period. Separate exports or audit records are retained only while needed for recovery, security or a specific legal obligation |
| Legacy import-prevention receipt | A minimal source/account identifier and import timestamp survive account deletion to prevent a deleted legacy account from being recreated by a later import; retained while that import mechanism can still be used |
| Resend message and delivery data | Quoggle uses Resend’s Free transactional plan. Resend retains email content and delivery logs for its standard 30-day period. Separate suppression, account and recovery records may have different purposes and periods; these are not a promise that every provider record disappears after 30 days |
Test accounts and records may also be removed during a test reset. Deleting an account is not a promise to delete financial records that we must legally keep or genuinely anonymous statistics that no longer identify you.
Deleting your account
In the app, open Profile, choose Delete my account, and confirm the deletion. If you cannot access the app, email privacy@quoggle.co.uk with the subject Quoggle account deletion from your registered email address where possible. We may verify ownership before acting. Do not send your password or sign-in code.
The account deletion process removes your profile, email, uploaded avatar, birth-year declaration, authentication records, scores, runs, Momentum, achievements, friendships, preferences, account activity, push token and linked live account records. A minimal legacy import-prevention receipt is retained as explained in the retention table. This is deletion, rather than merely disabling your account. Re-registering creates a new account and does not restore your former scores.
Limited information may need to be retained for a specific legal obligation, fraud or security investigation, or legal claim. Where applicable, we explain what is retained, why and for how long. Recovery copies and third-party records are addressed in the retention schedule; we will also handle relevant provider deletion requests where required.
Deleting your Quoggle account does not delete your Apple or Google account, automatically erase store transaction history, or itself request a refund. Deleting or uninstalling the app alone does not delete your Quoggle account. Please use the account deletion route.
Younger players
Quoggle accounts are for players aged 13 and over. We ask for a birth year rather than a full date of birth. Because a birth year does not tell us someone’s birthday, the app applies conservative age-group handling.
Under-18 accounts receive additional advertising protections and cannot enable marketing emails. Your birth year is private, but your username, avatar and game statistics can still be visible to other players. Choose a nickname and avoid putting your school, address, phone number or other private details in a username, photo or report.
Parents or guardians who believe a child under 13 has an account should contact us so we can investigate and remove it where appropriate. Younger players can also contact us directly about privacy or safety. A parent’s request may require an appropriate check of authority and the young person’s rights.
Security
We use encrypted connections to our online account service, secure device storage for session credentials, password hashing and access controls appropriate to the service. Access to private account information should be limited to authorised people and providers who need it.
No service or device can be guaranteed completely secure. Keep your account credentials private, use a password you do not reuse elsewhere and contact us if you suspect unauthorised access. If a personal-data breach occurs, we assess it and notify affected people and the relevant authority where legally required.
Your rights
Depending on the circumstances and applicable law, you may ask us to:
- Give you access to your personal information and a copy.
- Correct inaccurate or incomplete information, including an incorrect birth-year declaration.
- Delete your information.
- Restrict how we use it.
- Provide certain information in a portable format.
- Review a decision where applicable rights relating to solely automated significant decisions arise.
You have a right to object to processing based on legitimate interests. You also have an unconditional right to object to direct marketing.
Where we rely on consent, you may withdraw it at any time through the relevant controls or by contacting us. Withdrawal does not affect earlier lawful processing.
These rights have conditions and exceptions. We normally respond to a rights request within one month. If the law permits an extension for a complex request, we explain the reason and timing. Requests are normally free; we explain any lawful exception before applying it.
Quoggle calculates scores, ranks, age groups and game eligibility automatically. These are game and service decisions. We do not use these features to make solely automated decisions with legal or similarly significant effects on you.
Contact privacy@quoggle.co.uk to exercise your rights. You can complain to the UK Information Commissioner’s Office. You do not have to contact us first. If another country’s law applies, you may also have rights to complain to your local data-protection authority.
Website storage and external links
Essential website storage may be used where necessary to deliver a requested feature or maintain security. If we introduce non-essential website analytics or advertising cookies, we will explain them and obtain consent where required before using them.
The mobile app’s device storage and advertising technologies are described separately above. Links to other websites take you to services with their own privacy practices.
Changes to this policy
We update this policy when our features, providers or data practices change. We display the effective date and bring material changes to your attention through the app or another appropriate channel. Where a new use requires consent, we ask for it before starting that use.