Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, create a team, log games, or contact us for support.

• Account information (email, name)
• Team and game data you choose to log
• Communications with us

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your game logs and calculate statistics
• Send you technical notices and support messages
• Respond to your comments and questions

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to outside parties. Team data you mark as "public" will be visible to anyone with the link.

4. Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.

5. Cookies and Tracking

We use first-party cookies to keep you signed in and remember your preferences. We also use third-party analytics (Google Analytics 4 / Google Tag Manager and Microsoft Clarity) to understand aggregate product usage and improve the service. These tools may set their own cookies and collect identifiers such as approximate location, device type, and pages visited. We do not currently display third-party advertising on the site.

You can disable non-essential cookies in your browser settings. Doing so will not affect your ability to use the core product.

6. Data Retention

We retain different categories of data for different periods, depending on the purpose for which the data was collected and applicable legal requirements:

• Account data (profile, teams, games, venues you contributed) — for the life of your account, plus 30 days after deletion to allow for accidental-deletion recovery and final backups.
• Audit logs (admin actions, security events) — 90 days, then purged automatically.
• Email subscriber records — retained until you unsubscribe, at which point the record is removed from the active mailing list.
• Anonymous analytics data (page views, session metrics) — retained for 26 months per the Google Analytics 4 default retention window.

You can request earlier deletion of your personal data at any time (see "Your GDPR Rights" below).

7. Sub-processors

We use the following sub-processors to operate this service. Each is bound by a data processing agreement (DPA) or equivalent contractual protections:

• Supabase — managed Postgres database and authentication, hosted in US-East.
• Stripe — billing infrastructure for legacy paid subscribers, United States.
• Vercel — web hosting and global edge delivery.
• Google Analytics 4 + Google Tag Manager — product analytics, United States.
• Microsoft Clarity — heatmaps and session recording for UX research, United States.
• Cloudflare Turnstile — bot protection for public forms, United States.

If you require a copy of any specific DPA, contact support@mytriviateam.com.

8. International Data Transfers

MyTriviaTeam is operated from the United States, and the sub-processors listed above primarily host data in the United States. If you access the service from outside the United States — including the European Economic Area, the United Kingdom, Switzerland, or other regions — your information will be transferred to and processed in the United States.

Where required by law, these transfers are protected by appropriate safeguards, which may include the European Commission's Standard Contractual Clauses (SCCs), participation in the EU-US Data Privacy Framework where applicable, and equivalent contractual protections with our sub-processors.

9. Your GDPR Rights (EU/UK)

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request permanent deletion of your account and data.
• Portability — request a machine-readable export of your data.
• Objection — object to processing or withdraw consent at any time.

To exercise any of these rights, email support@mytriviateam.com from the address on your account. We will respond within 30 days.

10. California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" or "share" of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@mytriviateam.com.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@mytriviateam.com