Overview
areyoualarper.com is an independent quiz site. This policy explains what we collect when you visit, play, create a quiz, or contact us, and what you can do about it.
For privacy questions or requests, email support@areyoualarper.com with “Privacy” in the subject. We are the controller of the personal data described here.
What we collect
We collect the following, depending on how you use the site.
Account data
If you create an account, we store your name, email address, username, hashed password, and avatar choice. The avatar is either an image you upload or a meme template you pick. We also store account state such as your role and whether an account is suspended, so the site can enforce permissions and moderation decisions. We currently offer email and password sign-in only.
Content you create
When you create a quiz or AMA, we store its title, description, category, questions, answer options, answer key, media links, custom verdict wording, and any images you upload. Your public profile, quiz titles, descriptions, and questions are visible to anyone who can see the quiz.
Play data
We store attempts, the answers you submit, your score and percentage, the verdict you receive, how long you took, and when you played. If you play without an account, we set a random guest cookie so the attempt can be attached to this browser rather than to a person. Rooms also store the name you use, your room answers, and a temporary room token so you can rejoin after a refresh.
Technical data
Like most websites, we receive technical information when you visit: your IP address, browser and device information, the pages you request, timestamps, and security events. Our authentication system also stores the IP address and user agent attached to a session. We use this to keep the site running, diagnose problems, and prevent abuse.
Analytics
We use Google Analytics 4 to understand which pages and quizzes are useful. It may collect page views, interactions, approximate location derived from your IP address, device and browser information, and cookie identifiers. We do not use the site to serve third-party ads.
Messages
If you email us, we receive your email address and whatever you include in the message. The contact form on this site does not submit to our servers: it composes an email in your own mail app.
Browser storage
We use local and session storage for preferences and temporary state, such as your theme, whether the sidebar is collapsed, an unfinished quiz draft, the name you use in rooms, and a token that lets you rejoin a room. These stay in your browser.
How we use it
We use personal data to:
- create and authenticate accounts, and keep you signed in;
- publish, play, score, and share quizzes and AMAs;
- run live rooms and show standings;
- moderate content, enforce our terms, and prevent spam or abuse;
- respond to support, privacy, and copyright requests;
- understand traffic and improve the site;
- keep the site secure, debug problems, and comply with the law.
We do not sell or rent personal data. We do not send marketing emails. We do not run third-party advertising on the site.
Legal bases
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:
- Contract. Processing needed to provide the account, quizzes, attempts, and rooms you ask for.
- Legitimate interests. Keeping the site secure, moderating content, understanding traffic, and improving the service.
- Consent. Analytics cookies where consent is required. You can withdraw consent at any time through your browser settings.
- Legal obligation. Processing needed to respond to lawful requests or keep required records.
You can object to processing based on legitimate interests by emailing us. We will consider your request and stop unless we have compelling grounds or a legal requirement to continue.
How long we keep it
- Account and profile data. While your account is active. After a verified deletion request, we remove it from live systems within 30 days. Copies may remain in backups for a limited period.
- Quizzes and content. Until you delete them or we remove them. Deleted content may remain in backups for a limited period.
- Attempts and scores. While your account is active, or until you ask us to delete them. Guest attempts are linked to the guest cookie. The cookie expires after a year, but the attempt record remains in our database until we delete it or you ask us to.
- Rooms. While the room exists and until it is deleted by the host or by us. We may remove inactive rooms.
- Support messages. As long as needed to handle the request and keep reasonable records.
- Analytics. For the retention period configured in Google Analytics. Aggregated statistics may be kept longer.
- Logs. For a limited period for security, debugging, and abuse prevention.
We may keep data longer if required by law, to resolve a dispute, or to enforce our terms.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- receive a portable copy of data you provided;
- restrict or object to some processing;
- withdraw consent for analytics.
You can update your name, username, and avatar from your profile. To change your email address, delete your account, or request a copy of your data, email support@areyoualarper.com. We may need to verify your identity before acting on a request.
You can also complain to your local data protection authority. If you are a California resident, you may have the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising. We do not discriminate against you for exercising these rights.
Security
We use HTTPS, hashed passwords, httpOnly cookies, access controls, and Cloudflare’s network security. No system is completely secure. Use a unique password, keep it to yourself, and tell us if you think someone else has access to your account.
Children
The site is not directed to children under 13. If you are under 13, do not use the site. If you are in a country where the age of digital consent is higher, you must meet that age. If you believe a child under 13 has created an account, email us and we will delete it.
International transfers
Our providers, including Cloudflare and Google, process data around the world. Where required, we rely on appropriate safeguards such as standard contractual clauses. By using the site, you understand that your data may be processed outside your country.
Changes
We may update this policy. When we do, we will change the date at the top. If the changes are material, we will post a notice on the site. Continued use of the site means you accept the updated policy.
Contact
Email support@areyoualarper.com with “Privacy” in the subject. For copyright complaints, see the terms.