Privacy Policy

Data we store

When you first play, Tidbit creates an account for you so that your progress is saved on our servers. Until you sign up with Google, Microsoft or an email address, the account has no email address or sign-in identity, and this device keeps the key that opens it. If you clear your browser data or uninstall the app before signing up, that account cannot be recovered. Website visits are also subject to the advertising described below.

For your account, we store:

• your username, display name, and avatar;
• cosmetic items owned and equipped on your account;
• your play history, comprising questions answered, whether each answer was correct, the option selected, and response time;
• statistics and streaks derived from that history;
• if you sign up with Microsoft or Google, an identifier they provide to recognise you at sign-in; if you sign up with an email address, that address and a securely hashed password;
• if you play Tidbit Trivia in Discord or connect Discord to your account, the identifier Discord provides to recognise you. An account made in Discord starts with your Discord display name, username and picture;
• for a party started in Discord, the identifier Discord gives that session, which includes Discord's numbers for the server and channel it was started in, so everyone in it joins the same party.

When Microsoft or Google supplies an email address at sign-in, we store it to prefill your billing contact information. It is not shown to other players. We do not store your Microsoft or Google password. Discord does not give us your email address or password.

Emails

We may email the address on your account about Tidbit Trivia, such as updates, new modes and reminders to play. Every one of these emails has links to unsubscribe and to change your email preferences.

Analytics

We collect analytics about how you use Tidbit, including the features you use and how you answer questions. On the website, this includes the general source of a visit, pages viewed, approximate time spent, and account creation steps and error categories. When you sign up, we may ask where you found Tidbit. We keep your answer with your account's usage data, along with the general source of your first visit, which your browser remembers for this. These usage events do not include the email address, password, verification code, or other text you enter. We never sell this information to third parties. We use it to improve Tidbit, and some of it to measure our advertising as described below.

Advertising

We use the Google tag, the Reddit Pixel, the OpenAI Pixel, and the Meta Pixel on tidbittrivia.com to measure our advertising and to show our ads to people who have visited. They help us understand which ads bring visitors to the website and lead to actions such as creating an account, completing a question, returning the next day, or subscribing.

When usage analytics is enabled, question and return measurement uses opaque event identifiers. A browser-local identifier and recent activity dates help count next-day returns once per day; this does not identify a person across devices. Pending event receipts expire after 24 hours. These two measurements are disabled when usage analytics is turned off or your browser sends Global Privacy Control or Do Not Track.

Google, Reddit, OpenAI, and Meta may receive information about the pages you visit, the page that referred you, your browser and device, your IP address, and advertising click or cookie identifiers. When you enter or view contact details on our website, such as your email address, phone number, name, or address, they may also collect a hashed (scrambled) copy to match your visit to an account on their services, so they can measure our ads and show them to the right people. We do not send them your trivia answers or study decks. None of this places ads inside Tidbit.

We use this information for personalized advertising, sometimes called remarketing: third-party vendors, including Google, Reddit, OpenAI, and Meta, use cookies and similar identifiers to show our ads to people based on their earlier visits to tidbittrivia.com. We do not sell this information for money, but some privacy laws treat this use as sharing personal information for targeted advertising.

This advertising is turned off for visitors in the European Economic Area, the United Kingdom, and Switzerland, and for anyone whose browser sends Global Privacy Control or Do Not Track. In those cases Google receives only limited measurement signals, without advertising cookies, personalization, or contact details, and the Reddit Pixel, OpenAI Pixel, and Meta Pixel do not load.

Read how Google uses information from sites that use its services, Google's Privacy Policy, Reddit's Privacy Policy, OpenAI's Privacy Policy, and Meta's Privacy Policy. You can manage Google's advertising preferences in My Ad Center, and opt out of personalized advertising from many companies at optout.aboutads.info.

Payments

Payments are processed by Stripe. We do not receive or store card details. We store a Stripe customer reference and the status of your subscription or Lifetime purchase. When you open checkout, we share your billing contact email, account reference, and username with Stripe. If your sign-in provider has not supplied an email address, Stripe asks you for one at checkout.

Visibility to other players

In Friends, Rooms, Party, and leaderboards, your username, display name, avatar, and equipped cosmetic items are visible to other players. Tidbit Trivia has no chat or free-text messaging.

Cookies

Tidbit uses a sign-in cookie to keep you signed in. It is HttpOnly, Secure, SameSite=Lax, and scoped to the sign-in endpoint. A display theme preference is stored locally in your browser and is not transmitted.

Where the advertising described above is on, Google, Reddit, OpenAI, and Meta may set or read advertising cookies, including during signed-out visits. These connect an ad click to a later visit or conversion and let us show our ads to past visitors; the Reddit Pixel, for example, keeps an identifier in a first-party cookie named _rdt_uuid. You can block or delete cookies in your browser; blocking sign-in cookies may prevent you from staying signed in. The advertising settings above apply whether or not you have a Tidbit account.

Service providers

Cloudflare provides hosting and data storage. Stripe processes payments. Resend sends our emails. Microsoft and Google provide sign-in, and Discord signs in people who play Tidbit Trivia in Discord. Google, Reddit, OpenAI, and Meta receive website advertising data as described above.

Your rights

You can delete your account and its data at any time in Settings, then Account, or by following tidbittrivia.com/delete-account. You may also request a copy of your data, correction of it, or deletion of your account and its data by emailing support@tidbittrivia.com. When an account is deleted we keep only what that page lists: records other players depend on, including your Arena matches and rating, where you appear as "Deleted player"; payment records our payment processor must keep by law; a short record of any Premium subscription or Lifetime purchase (Stripe's reference numbers for it, the plan, its dates and any terms you agreed to); a scrambled fingerprint of any card used for a free trial; scrambled sign-in records until they expire (at most 90 days) and scrambled counters that stop abuse; and backups for up to 30 days. Records required for tax purposes are retained for the period the law requires. To opt out of the personalized advertising described above, turn on Global Privacy Control in your browser.

Children

Tidbit Trivia is intended for users aged 13 and over, and is not directed at children under 13.

Changes

We may change this policy at any time. The date above is updated when we do. Where a change materially affects how your data is collected, used, or shared, notice will be given before it takes effect, with the form and period of notice proportionate to the significance of the change.

Contact

Inflow AI
support@tidbittrivia.com