Try it now

Privacy Policy

Last updated: May 15, 2026 (v4)

This English version is provided for convenience. In case of any discrepancy, the German version prevails. Read the German version on quiztreff.de

1. Controller

The controller responsible for data processing on this website is:

RPG Welten UG (haftungsbeschränkt)
Stolzestraße 10
44139 Dortmund
Germany

Represented by the managing director: Jörg Strube
Register court: Amtsgericht Dortmund, HRB 21805
VAT ID: DE279524786

Email: [email protected]

2. What is this about?

We take data protection seriously, without buzzword bingo.

Here we explain transparently:

  • which data we process at Quiztreff,
  • why we do it,
  • how long we store it,
  • and which rights you have.

Quiztreff is an online quiz platform with single player and multiplayer modes, rankings, profile features and optional premium features.

We only process data when we are allowed to. Typical legal bases:

  • Art. 6 (1) (b) GDPR (contract / account use): login, games, premium features
  • Art. 6 (1) (c) GDPR (legal obligation): invoices, retention periods
  • Art. 6 (1) (f) GDPR (legitimate interest): security, fraud prevention, stability
  • Art. 6 (1) (a) GDPR (consent): cookies/tracking, social sharing, external media

4. What data can be collected?

A) When you visit the website

  • IP address (shortened or hashed where applicable)
  • date and time
  • URLs accessed
  • status codes
  • browser and operating system (user agent)
  • referrer URL

B) On registration / account

  • email address
  • nickname / display name
  • password (stored only as a hash)
  • avatar and profile information (if used)
  • account status, roles, suspensions (if necessary)

C) When playing

  • game history (for example correct or wrong answers, points, rounds, opponents)
  • times, game mode, ranking data
  • technical anti-cheat data (for example patterns, frequencies)

D) For premium / payment

  • payment status
  • provider IDs (for example Mollie payment ID, customer ID, subscription ID)
  • billing and tax data (where required)

E) Communication

  • support requests by email
  • system emails (password reset, confirmation and so on)
  • optional newsletter / marketing (only with consent)

5. Hosting, server logs and operational security

When you access the website, server log files are processed automatically.

Purpose
Secure operation, error analysis, defense against attacks, protection against misuse.
Data
IP address, request URL, timestamp, user agent, status code.
Legal basis
Art. 6 (1) (f) GDPR (legitimate interest).
Retention
Usually up to 14 days, longer only in the event of security incidents.

6. Cloudflare (DNS/WAF/CDN/proxy)

Quiztreff may use Cloudflare for protection and performance (DNS, WAF, DDoS protection, proxy, caching).

In doing so, Cloudflare processes technical access data (in particular the IP address) in order to fend off attacks and deliver content efficiently.

Purpose
Security, DDoS protection, performance, stability
Legal basis
Art. 6 (1) (f) GDPR
Note
Data may be transferred to third countries. Cloudflare uses appropriate safeguards (for example standard contractual clauses).

7. Cookies and consent management (TTDSG/GDPR)

Quiztreff uses cookies and similar technologies.

Essential cookies

Required for login, security and correct operation (session, CSRF, settings).

Legal basis: Section 25 (2) TTDSG (German Telecommunications and Telemedia Data Protection Act) / Art. 6 (1) (f) GDPR

Optional cookies

Statistics, marketing and external media cookies are only set after opt-in.

Legal basis: Section 25 (1) TTDSG / Art. 6 (1) (a) GDPR

Change cookie settings

You can change or withdraw your consent at any time.

8. Account, registration and login

If you create an account, we process your data in order to offer you Quiztreff.

Data
Email, nickname, password hash, date of birth, account status
Purpose
Authentication, account operation, administration
Legal basis
Art. 6 (1) (b) GDPR
Retention
As long as the account is active (until deletion)

Date of birth / age verification

To enforce our minimum age (18+), we process the date of birth you provide and an internal flag for age approval. The purpose is to prevent use by minors and to secure paid contractual relationships. The legal basis is Art. 6 (1) (b) GDPR (contract / pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in protecting minors and minimizing risk).

9. Gameplay, high scores and rankings

To make the game work, we store game and result data.

Data
Game history, results, points, rankings, opponents, times
Purpose
Game mechanics, display, progress, leaderboards
Legal basis
Art. 6 (1) (b) GDPR

10. Anti-cheat, fraud prevention and security

To ensure fair games, we use technical measures to detect misuse.

Data
Technical metadata (for example IP hash), patterns and anomalies
Purpose
Fairness, protection against bots and manipulation, stability
Legal basis
Art. 6 (1) (f) GDPR

11. Link Mobility / SMS OTP (two-factor / verification)

If we use SMS verification (OTP), messages are sent via a service provider (for example Link Mobility).

Data
Phone number, time of sending, OTP status
Purpose
Login security, account protection
Legal basis
Art. 6 (1) (b) GDPR (contract) / Art. 6 (1) (f) GDPR (security)
Retention
OTP data only briefly, as far as technically necessary.

12. Email delivery / system emails

Quiztreff sends system emails (registration, password reset and so on).

Data
Email address, time of sending
Purpose
Account operation
Legal basis
Art. 6 (1) (b) GDPR

13. Newsletter / marketing emails (only with consent)

If we offer a newsletter or marketing emails in the future, this will only be done with double opt-in.

Data
Email, IP (at sign-up), times
Legal basis
Art. 6 (1) (a) GDPR
Withdrawal
At any time via the unsubscribe link or by email

14. Payments / subscriptions (Mollie)

For paid features (Premium/Pro subscriptions, credit packages, arcade cards, hotel rooms), payments are processed via Mollie. We do not receive complete credit card data, only technical payment data.

Data
Payment ID, customer ID, subscription ID, status, amount, type of payment (subscription or one-time purchase)
Purpose
Payment processing, activation, invoices, fraud prevention (chargeback detection)
Legal basis
Art. 6 (1) (b) GDPR, Art. 6 (1) (c) GDPR
Retention
Periods required under tax law (for example 10 years for billing data)

15. Invoices and retention obligations

An invoice (PDF) is created automatically for every paid transaction. For this purpose, we collect a complete billing address.

Data
Name, street, postal code, city, country (billing address), invoice number, amounts (gross, net, VAT), payment reference
Legal basis
Art. 6 (1) (c) GDPR (legal obligation under Sections 14, 14a UStG and Section 147 AO, German VAT Act and Fiscal Code)
Retention
10 years (retention obligation under tax and commercial law pursuant to Section 147 AO, Section 257 HGB)

16. Storage / uploads (Wasabi S3 / object storage)

Quiztreff may store media (for example avatars, assets, preview images) in an object storage such as Wasabi (S3).

Data
Uploaded files (avatar and so on), file metadata
Purpose
Provision of media
Legal basis
Art. 6 (1) (b) GDPR (account feature)

Note: Access may take place via a proxy or CDN. We avoid public buckets; access may be signed.

17. OpenAI / AI processing (questions, texts, moderation)

Quiztreff may use AI services (for example the OpenAI API) for:

  • rephrasing and improving questions
  • generating and analyzing texts
  • automatic moderation or classification of content

Data processed

As a rule, only the content required for the respective function is processed (for example question text, category).

No passwords or payment data are sent to AI services.

Purpose
Quality improvement, automation, moderation
Legal basis
Art. 6 (1) (f) GDPR (legitimate interest) and, where applicable, Art. 6 (1) (a) GDPR

18. Social sharing (WhatsApp, Instagram, Facebook, X)

Quiztreff may offer share features (for example sharing a high score).

Important

We build share features so that no data is transferred automatically to social media services before you actively share. When you share, a connection to the providers' servers may be established. Their privacy policies apply.

Legal basis
Art. 6 (1) (a) GDPR (consent) and/or active user action

19. Embedded content (Twitch, YouTube, Instagram)

If external content is embedded (streams, posts, videos), it is blocked by default and only loaded after consent.

Category
"External media" in the consent settings
Legal basis
Art. 6 (1) (a) GDPR

20. Discord login / OAuth (prepared)

If we later offer login via Discord, Google or similar providers:

Data
OAuth token, user ID, profile information (depending on provider and permission)
Purpose
Login, account linking
Legal basis
Art. 6 (1) (b) GDPR / Art. 6 (1) (a) GDPR

21. Affiliate / partner tracking (prepared)

If Quiztreff later uses partner programs or affiliate tracking, this will only happen:

  • anonymized, or
  • after consent (marketing)
Legal basis
Art. 6 (1) (a) GDPR

22. Recipients / disclosure

We only pass on data if:

  • you have consented,
  • it is necessary to perform the contract,
  • or there is a legal obligation,
  • or there is a legitimate interest (for example security).

We do not sell your data.

22a. Transfers to third countries (USA and others)

In individual cases, personal data may be transferred to countries outside the European Economic Area (so-called "third countries"). We base such transfers on the following safeguards pursuant to Art. 44 et seq. GDPR:

  • Adequacy decision (Art. 45 GDPR): For transfers to the USA we rely, where applicable, on the EU-US Data Privacy Framework (DPF) (adequacy decision of the EU Commission of July 10, 2023), provided the specific recipient is certified.
  • Standard contractual clauses (Art. 46 (2) (c) GDPR): In addition or as an alternative, we use the standard contractual clauses adopted by the EU Commission (SCC, Implementing Decision 2021/914).
  • Exceptions (Art. 49 GDPR): In individual cases, a transfer may be based on your explicit consent or on the necessity to perform the contract.

Specific recipients in third countries

Cloudflare, Inc.
USA: DNS, WAF, CDN, DDoS protection. Safeguard: EU-US Data Privacy Framework (certified) and standard contractual clauses. Data categories: technical access data (IP address, request headers).
Twitch Interactive, Inc.
USA: only if you actively connect your Twitch account (OAuth) or display Twitch content (streams) on the platform. Safeguard: standard contractual clauses (SCC) or, where applicable, DPF. Data categories: Twitch user ID, login name, OAuth token; for embeds, also technical access data.
Meta Platforms, Inc.
USA: only if you have consented to marketing cookies (see Section 31). Safeguard: DPF and SCC.
Google LLC
USA: only if you have consented to marketing cookies (see Section 32). Safeguard: DPF and SCC.
OpenAI, L.L.C.
USA: insofar as AI features (see Section 17) are used. Safeguard: standard contractual clauses (SCC); depending on the product, plus EU data residency. No passwords, payment data or personal master data are transferred to OpenAI.

Despite these safeguards, access by authorities in the USA (for example under FISA 702 or the CLOUD Act) cannot be completely ruled out. You have the right at any time to request a copy of the respective safeguards (SCCs) from us: [email protected].

All other processing takes place on our own servers in Germany (Hetzner) or with EU service providers, in particular the database, avatar renderer, ad server, Matomo, BookStack wiki, Mailgun (EU servers, Frankfurt) and Mollie (Netherlands).

23. Retention / deletion

Account data
As long as the account exists
Server logs
Usually up to 14 days
Invoices
Statutory periods
Support
Depending on context, usually up to 12 months

24. Your rights

You have the right to:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object (Art. 21 GDPR)
  • withdraw consent (Art. 7 (3) GDPR)

Self-service: You can find the data export (Art. 15 / Art. 20 GDPR) and the deletion of your account (Art. 17 GDPR) directly in the dashboard under Account, Your data.

For special requests (for example restriction, objection, correction of individual fields or information about recipients and retention periods): [email protected]

25. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
(State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2-4
40213 Düsseldorf
Germany

Web: www.ldi.nrw.de

Alternatively, you can also contact the data protection supervisory authority of your habitual residence or place of work.

26. Social features and feed

Quiztreff offers social features such as friend lists, an activity feed and notifications.

Data processed
Friendship status, game activities (trophies, game results), notifications, profile visits
Purpose
Social interaction, community experience, notifications about friends' activities
Legal basis
Art. 6 (1) (b) GDPR (contractual feature of the account)
Visibility
In your profile settings, you can decide whether your activities are shown in your friends' feed (setting: "Aktivitäten anzeigen", show activities). Blocked users cannot see any of your data.

Quiztreff lets you share content (profiles, trophies, results) via a link. These links generate a preview for social networks (OG meta tags).

Data processed
Share token, link type, time of creation, IP address (hashed), user agent, referrer, UTM parameters
Purpose
Providing working share links with a preview, statistics on link views
Legal basis
Art. 6 (1) (f) GDPR (legitimate interest), as the share link is deliberately created and shared by the user
Retention
Share links: 90 days after last access. Hit data: 30 days.
Data protection measures
IP addresses are hashed (SHA-256) before storage and cannot be reversed.

28. Invitation system and referrals

Quiztreff offers an invitation system that lets you invite friends and receive rewards.

Data processed
Invitation code, referrer relationship (who invited whom), qualification status, reward status
Cookie
qt_referral_code (HTTP only, 30 days): stores the invitation code until registration so that the referral can be assigned.
Purpose
Assignment of referrals, granting rewards (credits), community growth
Legal basis
Art. 6 (1) (b) GDPR (contractual feature, reward system), Section 25 (2) TTDSG (technically necessary cookie)
Retention
Cookie: 30 days. Referral data: permanently (for statistics and fraud prevention).
Anti-fraud
To prevent misuse, there are limits (maximum rewards per day and in total). Suspicious patterns can lead to suspension.

29. Hotel room chat (text chat)

Users with a rented hotel room can use a text chat within their room. The following data is processed:

Data processed
User ID, room ID, message text, timestamp, emote codes; for reports: category, free text, affected message and user IDs; for moderation: type of action, reason, moderator ID; for appeals: appeal text, review result
Purpose
Providing the chat feature, moderation and combating misuse, enforcing the chat rules (Terms, Section 17), handling reports and appeals, fulfilling legal obligations (NetzDG, DSA)
Legal basis
Art. 6 (1) (b) GDPR (performance of contract: providing the chat feature)
Art. 6 (1) (f) GDPR (legitimate interest: security, moderation, protection against misuse)
Art. 6 (1) (c) GDPR (legal obligation: NetzDG/DSA compliance)
Retention
Chat messages: 60 days after the hotel room expires (ends_at). After that, messages are deleted or anonymized.
Reports and moderation actions: 12 months after completion, unless there is a statutory retention obligation.
Appeals: 12 months after the procedure is completed.
Audit log: 24 months (for evidence purposes under the DSA).
Recipients
Moderation team (administrators), law enforcement authorities where legally required. Chat messages are only visible to room participants (owner and key holders).

Note: mute and block

Users can mute other participants in the chat. This setting is stored on the server and applies to the whole room. When muting, the user ID, room ID, time and duration are stored.

30. Advertising (self-hosted ad server)

Quiztreff operates its own ad server (Revive Adserver) on our own infrastructure. No data is transferred to external advertising networks.

Data
Impressions, clicks, zone ID, timestamp. No personal data, no tracking across pages.
Purpose
Delivery of our own banners and notices within the platform
Legal basis
Art. 6 (1) (f) GDPR (legitimate interest in operating the platform)
Hosting
Our own servers in Germany (Hetzner). No third-party integration.

31. Meta Business Tools (Meta Pixel)

On this website we use Meta Business Tools, in particular the Meta Pixel and, where applicable, the Meta Conversions API (together "Meta Tools"). The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

Purpose of processing

The Meta Tools are used to measure the success of our ads on Meta platforms (for example Facebook, Instagram) and to optimize our website content. This allows us to understand which actions users take on our website after they have seen or clicked one of our ads (so-called conversion tracking). In addition, the data collected can be used to build audiences for future ads (so-called Custom Audiences or Lookalike Audiences) and to deliver ads in a more targeted way (remarketing).

Meta services used

Meta Pixel
A JavaScript code that records certain events when a page is accessed (for example page view, registration) and transmits them to Meta.
Conversions API
A server-side interface through which event data can be sent directly to Meta as an alternative or in addition to the pixel. Whether the Conversions API is active depends on the current technical configuration.

Data processed

When the Meta Tools are used, the following data in particular can be processed and transmitted to Meta:

  • HTTP header data (IP address, browser type, operating system, language setting, referrer URL)
  • pixel-specific data (pixel ID, cookie information, where applicable Facebook click ID)
  • button click data and names of pages accessed
  • event data (for example page view, registration, content view)
  • additional event parameters configured by us (for example categories or page types, but no plain-text user data such as names or email addresses)

Meta may link this data to existing profiles on Meta platforms if the user is or was logged in there.

Legal basis

The Meta Tools are loaded and activated only after prior consent (Art. 6 (1) (a) GDPR, Section 25 (1) TTDSG). Without your explicit consent via our cookie/consent banner, the Meta Pixel is not loaded and no data is transmitted to Meta.

Consent and withdrawal

You can withdraw your consent at any time with effect for the future by adjusting your and rejecting marketing cookies. After withdrawal, the Meta Tools are no longer loaded. Data already transmitted remains stored with Meta and is subject to Meta's data protection provisions.

Recipients and joint controllership

The recipient of the data collected is Meta Platforms Ireland Limited. Joint controllership pursuant to Art. 26 GDPR may exist in connection with the use of the Meta Pixel. Meta provides an agreement for this (the so-called "Controller Addendum"), which governs the respective responsibilities. Data subjects can assert their rights both against us and against Meta.

Transfer to third countries

Meta may transfer collected data to the USA or other third countries. For data transfers to the USA, Meta relies on the EU-US Data Privacy Framework where applicable. In addition, standard contractual clauses (Art. 46 (2) (c) GDPR) are used. Despite these measures, access by US authorities cannot be completely ruled out.

Further information and opt-out at Meta

Further information on data protection at Meta and additional options to object can be found here:

On this website we use Google Ads including conversion tracking and remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Technically, it is integrated via the so-called Google Tag (gtag.js) with the account ID AW-375204290.

Purpose of processing

Google Ads is used to measure the success of our ads in the Google advertising network (including Google Search, the Google Display Network, YouTube and partner sites). This allows us to understand whether visitors take certain actions on the website after clicking one of our ads (for example registration, purchase of a subscription or of credits). We also use remarketing to show users who have already visited our website relevant ads on other websites in the Google advertising network.

Google services used

Google Tag (gtag.js)
A JavaScript library that is loaded from the Google server googletagmanager.com when a page is accessed and transmits events to Google. Account ID: AW-375204290.
Conversion tracking
Records defined events (for example completed purchases) after a click on a Google Ads ad so that we can measure the effectiveness of the ads.
Remarketing
Makes it possible to address previous visitors again with relevant ads within the Google advertising network.

Data processed

When Google Ads is used, the following data in particular can be processed and transmitted to Google:

  • IP address (usually shortened)
  • browser type, operating system, language setting, referrer URL
  • cookie information and pseudonymous identifiers (Google Ads cookie, Google Click Identifier / GCLID)
  • URLs accessed and timestamps
  • event data (for example conversion type, page view, click activity)

Google may link this data to existing Google accounts if the user is logged in there. We do not transmit plain-text data such as names or email addresses to Google.

Consent Mode v2

We use Google Consent Mode v2. As long as no consent has been given, the Google Tag is not loaded. After consent has been given, the consent signals ad_storage, ad_user_data, ad_personalization and analytics_storage are first initialized as denied and immediately afterwards updated to granted. If consent is withdrawn, the tag is no longer executed.

Legal basis

Google Ads is loaded and activated only after prior consent (Art. 6 (1) (a) GDPR, Section 25 (1) TTDSG). Without your explicit consent via our cookie/consent banner, the Google Tag is not loaded and no data is transmitted to Google.

Consent and withdrawal

You can withdraw your consent at any time with effect for the future by adjusting your and rejecting marketing cookies. After withdrawal, the Google Tag is no longer loaded. Data already transmitted remains stored with Google and is subject to Google's data protection provisions.

Recipients

The recipient of the data collected is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the course of processing, data may be passed on to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfer to third countries

Google may transfer collected data to the USA or other third countries. For data transfers to the USA, Google relies on the EU-US Data Privacy Framework (adequacy decision of the EU Commission of July 10, 2023). In addition, standard contractual clauses (Art. 46 (2) (c) GDPR) are used. Despite these measures, access by US authorities cannot be completely ruled out.

Further information and opt-out at Google

Further information on data protection at Google and additional options to object can be found here:

33. Wiki (wiki.quiztreff.de)

At wiki.quiztreff.de we operate a wiki (BookStack) with game instructions and documentation.

Data
Server log files (IP, user agent, timestamp), session cookie (when logged in)
Cookies
Essential session cookie (BookStack), cookie consent preference (qt_cookie_consent in localStorage)
Legal basis
Art. 6 (1) (f) GDPR (legitimate interest), Section 25 (2) TTDSG (essential cookies)
Hosting
Our own server in Germany (Hetzner). No third-party integration.

34. Lead magnet (pub quiz starter pack)

On the page /pubquiz-pdf.php you can request the "Pubquiz-Starterpaket" (pub quiz starter pack, PDF) free of charge. In doing so, we process your email address in order to send you the PDF and, over the following approximately 14 days, a small number of tips about running pub quiz events.

Data processed
Email address, time of sign-up, IP address and user agent (as GDPR proof under Art. 7 (1)), optionally UTM parameters and Google click ID to evaluate the source.
Procedure
Double opt-in: After signing up, you receive a confirmation email. We only activate sending after you click the confirmation link. If you do not confirm, your data is deleted automatically after 14 days and the sign-up expires.
Legal basis
Art. 6 (1) (a) GDPR (consent). Consent is voluntary and can be withdrawn at any time.
Retention
Active sign-ups: until withdrawal. Unconfirmed sign-ups: max. 14 days. Unsubscribed sign-ups: until the regular cleanup of the follow-up sequence (max. 30 days after unsubscribing).
Withdrawal / unsubscribe
Every email contains a personal unsubscribe link at the end. One click is enough, and you will not receive any further messages from this series.
Email delivery
Sent via Mailgun (data processing on our behalf pursuant to Art. 28 GDPR). Open tracking and click tracking are disabled for these emails. Servers in the EU.

35. Audience measurement with Matomo (self-hosted)

We use the open-source web analytics software Matomo on our own servers in the EU in order to understand which pages and features are used and where we can improve Quiztreff. No data is transferred to third parties; all data remains on our infrastructure.

Data processed

  • anonymized IP address (the last 2 bytes are discarded before storage)
  • date and time of access
  • page accessed (URL) and previously visited website (referrer)
  • browser, operating system, screen resolution, language
  • for logged-in users: a hashed identifier (HMAC-SHA-256 of your internal user ID) from which the real user ID cannot be reconstructed. This allows us to recognize returning visitors without storing your identity in Matomo.

Cookies

No cookies are set for Matomo. Anonymous visits remain purely server-side; for logged-in users, recognition takes place exclusively via the server-side hash described above.

Legal basis

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in designing the website according to need and continuously improving it. Interference with your rights is minimized by IP anonymization, the absence of cookies and the hashing procedure.

Do Not Track

If your browser sends a Do Not Track signal, no data is collected; we respect the technical signal.

Hosting and retention

Matomo runs on our own servers in Germany (analytics.quiztreff.de, Hetzner). Aggregated reports are kept long-term; individual visitor logs are deleted automatically after a maximum of 365 days.

Objection (opt-out)

You can object to audience measurement at any time with effect for the future (Art. 21 GDPR). For this purpose, we set a technical opt-out cookie (qt_no_matomo) on your device, which serves solely to remember your objection. This cookie is strictly necessary to implement your decision to object (Section 25 (2) No. 2 TTDSG).

Loading status...

36. Changes

Quiztreff keeps evolving. When features or services are added, we update this privacy policy.

Last updated: May 15, 2026

37. Use via the QuizTreff app (iOS)

This privacy policy also applies to the QuizTreff app for iOS. The app-specific additions follow; otherwise, the sections above apply accordingly.

Account and login. The app uses the same quiztreff.de account. The sections on registration and login apply accordingly.

Data processed in the app. Game progress, answers given, your nickname or display name and your balance or player pass status, as in the web version. Using the app alone does not collect any additional personal data.

Device permissions. The app requests only the camera, and only to scan the QR code for joining a pub quiz round. There is no access to photos, contacts, microphone or location.

No advertising, no app tracking. The app does not include in-app advertising, an advertising identifier (IDFA) or cross-app tracking within the meaning of Apple's App Tracking Transparency.

Apple / App Store and TestFlight. The app is provided via the Apple App Store or TestFlight. Apple processes the usual App Store data and (if you have enabled this) diagnostic and crash data as an independent controller. Apple's privacy policy applies in this respect.

Transmission. Communication between the app and quiztreff.de is encrypted (HTTPS).

Your rights / deletion. The same data subject rights apply as in the web version (see above). You can request access and deletion of your account via the contact details given in the legal notice.

App supplement last updated: July 15, 2026