Integritetspolicy

Last updated 2026-10-20

In short

Quizrundan stores what is needed for you to log in and for your group to plan and log its quiz nights. No advertising, no analytics and no tracking, and nothing is sold. You can download your data or delete your account whenever you like.

This text is information for you. It isn't something you agree to; what you agree to when you create an account is the terms.

Who is responsible

Quizrundan is a free hobby project run by Sabina as a private individual. She decides what is stored and why, and is the data controller.

Questions about your data, and any request this text doesn't cover: email hej@sabinas.dev.

What is stored

• Your account: name, email address and password. The password is stored only as a hash by the login service. It can't be read by you, by Sabina or by anyone else.
• Passkeys, if you add one: a passkey logs you in with your phone's face recognition, fingerprint or PIN instead of a password. For each passkey the login service stores its id and its public part, a name you can change, when it was added, changed and last used, how many times it has been used, and what the phone reports about it: which password manager or device it comes from, how it connects, whether it can be and is synced, and what kind of attestation it gave when it was created. The private part stays in your phone or password manager, labelled with the app's address and your email address, and is never sent to Quizrundan. Nor is your face, your fingerprint or your PIN: they never leave the phone. The app also stores when you were offered a passkey, so that you are only offered one once. If there is no heading Passkeys under Profile, passkeys aren't switched on yet, and none of this is stored.
• That you have accepted the terms: which version, and when.
• Your choices: language, theme (light, dark or same as phone) and which notifications you want in each group.
• A profile picture, if you choose one: one of the app's figures, or a photo you upload yourself. The photo is made smaller on your phone before it is sent, which removes location and other hidden information in the image file.
• Your group's content: visits with ratings, results, notes and who was there. Planned quizzes with time, meeting place, notes, the name the table is booked under and who has answered going, maybe or can't. The group's rounds: which pubs are in a round and what it is called, if you have given it a name, and which theme it was started from. A change log that shows who changed what, including who started, changed or deleted a round. If a round is deleted, the lines about it stay in the log.
• Photos from visits: the photos a member adds to a visit, in two sizes, with who added them and when. Everything about them is under Photos from visits.
• Notifications in the app: one line per event in your groups, for example that someone has planned a quiz or logged a visit, and whether you have read it. The notification about what happened to a pub you asked for is one of them.
• Push notifications, if you turn them on on a phone: the phone's push address, two encryption keys that belong to the address, which browser and device it is, when you turned them on and when the app was last opened there with push notifications on. Everything about them is under Notifications. If you haven't turned on push notifications, none of this is stored.
• Login records: the login service keeps a record of each login session with time, IP address and browser and device details, for as long as the session lives, plus a security log. When passkeys are switched on, the login service also creates a random one-time code at every attempt to log in with or add a passkey, and when the login page is opened in a browser that can suggest passkeys. The code is valid for five minutes, and is tied to your account only when you add a passkey.
• Pub information: the shared pub list and its change log. It is about businesses (address, times, phone and booking details), not private individuals. Nobody changes it in the app: Quizrundan looks after the list. The change log shows Quizrundan's own changes, under the name "Quizrundan", and the changes groups made earlier, when they could correct the details themselves. Everyone with an account can see what a fact was changed from and to.
• Tips you send with "Tell us": the text, and a few details about the app and your device. Everything about them is under Tips you send.
• Pubs you ask for and corrections you send: what you write about the pub. Everything about them is under Pubs you ask for.

Why it is stored

• To give you the service you asked for. Your account, passkeys you have added, name, profile picture, your group's content, photos from visits, the notifications in the app, push notifications you have turned on and the emails that belong to your account are needed for the app to work for you and your group. Legal basis: the contract between you and Quizrundan, which is the terms.
• For security. The hosting and login services create technical logs, for example with IP address and time, to guard against abuse and to fix errors. Legal basis: legitimate interest.
• For the shared pub list. Changes that groups made earlier are kept with who made them and for which group, so it is possible to see how a fact has changed and to correct mistakes. Legal basis: legitimate interest.
• To find bugs and choose what gets built. Tips you send with "Tell us". Legal basis: legitimate interest.
• To choose which pubs are added and to fix mistakes in the pub list. Pubs you ask for and corrections you send. Legal basis: legitimate interest.
• To be able to show what applied. Which version of the terms you accepted, and when. Legal basis: legitimate interest.

None of this relies on consent, so you aren't asked to consent to anything. Your data isn't used for advertising and isn't sold.

Who can see what

• Members of a group see the group's content and each other's names and profile pictures. They don't see each other's email addresses.
• An uploaded profile photo isn't public on the web: the image file can be fetched only by you and by the people you share a group with at that moment. A browser that has already fetched the photo may keep its copy for up to a year.
• Photos from visits are seen only by the members of the group. More is under Photos from visits.
• Other groups see nothing of your group's visits, photos, plans, ratings, results or notes.
• Everyone with an account sees the shared pub list and its change log. A change Quizrundan has made is shown under the name "Quizrundan". An older change from a group other than yours is shown as made by "someone in another group", with what the fact was changed from and to, and when, but not who it was or which group.
• The app owner (Sabina) has no view in the app of any group's content unless she is a member of that group. In the pub list's change log she can see who made each older pub edit, by name, and which group added a pub.
• Sabina runs the database and the storage of image files. That means she can technically reach everything that is stored, photos included, for example to fix a fault or to help you with a request. She doesn't read groups' content or look at their photos without a reason.

Where it is kept

Vercel, Resend and Anthropic may process data outside the EU/EEA. Each describes its handling in its own policy: Supabase, Vercel, Resend and Anthropic. Resend sees your email address and the content of the emails. Anthropic receives the text of tips you send and what you write when you ask for a pub or send a correction, but not the name or email address of your account. If you yourself write a name or a contact detail in a request or a correction, it goes along as written.

Live updates let a page you have open show a change without you reloading it. The message only says that something has changed in the group or in your notifications, and which visit or planned quiz it is about, never names, text, results or ratings. Supabase keeps each message for about three days and then deletes it automatically.

If you have turned on push notifications, every push notification goes through the notification service of whoever made your phone or browser: Apple for iPhone and Safari, Google for Android and Chrome, Mozilla for Firefox and Microsoft for Edge on Windows. Other browsers mostly use one of these four. If your phone's push address is with any other service, Quizrundan sends nothing to it, and no push notifications reach that phone. The service may process data outside the EU/EEA. What it learns is under Notifications.

If you open "Map" in Pubs, your phone fetches the map straight from OpenFreeMap, a free map service run by a company in Hungary. The service then sees your IP address, which part of the map you are looking at and when, which browser and device you use, and that you come from Quizrundan. It learns nothing about your account or your group, or about which pubs you have tried, and it sets no cookies. By OpenFreeMap's own policy, no IP addresses are kept in its ordinary logs. After a server error the IP address may be kept for 7 days, and after an attack or misuse for 30 days at most. The policy doesn't say where the servers are, and OpenFreeMap may use Cloudflare to deliver the map, so data may be processed outside the EU/EEA. If you never open "Map", nothing is sent there.

If you tap "Show where I am", your phone asks whether the app may see your location. The location is used only on your phone, to draw a dot on the map. It is never sent to Quizrundan and isn't stored, and the dot goes away when you leave the map. The map moves to the place, so OpenFreeMap sees that you are looking at that area, just as if you had dragged the map there yourself.

How long it is kept

Data is kept until you, or your group, delete it.

• Deleted visits, planned quizzes and groups are hidden at once and can be restored for 30 days. Then they are removed for good, with everything that belongs to them, by an automatic job that runs every night.
• Photos from visits stay until the photo, the visit or the group is deleted. A photo that is deleted can't be restored. More is under Photos from visits.
• Notifications are removed 30 days after you have read them, and after 180 days at the latest.
• A phone's push address and what is stored with it are removed when you turn off push notifications for that phone under Notifications, when you log out on it and when you delete your account. They are also removed when the notification service answers that the address no longer works, when someone else turns on push notifications with their account on the same phone, and when you turn them on on an eleventh phone: the one removed is then the phone where the app has gone longest without being opened.
• When you delete your account, your account, email address, name, profile picture (including a photo you uploaded), choices, notifications, the push addresses of your phones, your answers to planned quizzes, your tips from "Tell us", the pubs you have asked for and the corrections you have sent, your passkeys at the login service and the login records about you are removed at once. It can't be undone. You leave all your groups.
• A passkey stays with the login service until you remove it under Profile, under Passkeys, or delete your account. The private part in your phone or password manager is something Quizrundan can neither read nor remove: you remove it there.
• What the group created together stays for the group, without your name: visits, plans, ratings, photos and the change log, including the one for the group's rounds, show as made by "Former member" or with no name. So photos you added aren't removed with your account: if you want them gone, delete them first. Notes that someone wrote may still mention you. To get that removed, ask the group to edit them or email. Changes you made to the shared pub list, when groups could edit it, also stay, without a name.
• If you only leave a group but keep your account, you stay with your name on the visits you attended, and with your figure if you have chosen one. A profile photo you uploaded can no longer be fetched by that group. Photos you added to the group's visits stay there, under your name. If you want them gone, delete them before you leave the group: afterwards you no longer see them, and only an admin of the group can delete them.
• If you are the last member of a group when you delete your account, the group is closed, nobody can restore it and it is removed for good after 30 days. The app shows what happens to each group before you confirm.
• Backups: deleted data can remain for a while in the database provider's automatic backups and in copies Sabina takes of the database before larger changes. The copies are deleted at the latest 30 days after they were taken. What the providers' own logs and mail records hold follows their rules.

Emails

Quizrundan sends only emails that belong to your account: confirm your email, a verification code to log in, and reset your password. If you sign up with an address that already has an account, a verification code is sent to that address. No newsletters and no advertising. The emails are sent without tracking pixels or link tracking. They have two pictures and a font that your mail app fetches from Quizrundan's own address when it shows pictures. The files are the same for everyone, and the address says nothing about you or about which email it is. The fetch shows up in the hosting service's technical logs, just as it does when you open the app.

Notifications

Notifications are shown inside the app, under the bell. Under Notifications you choose, per group, which ones you want. The notification about a pub you asked for belongs to no group and can't be switched off.

Push notifications are notifications that show on your phone even when the app is closed, for example on the lock screen. They are off until you turn them on yourself, one phone at a time, and you can turn them off at any time. The app never asks your phone for permission before you have chosen to turn them on yourself. If there is no line about push notifications at the top of Notifications, they aren't switched on in the app yet, and nothing below applies.

• What is stored: the phone's push address, which is the address at the notification service that leads to Quizrundan on that one phone, and two encryption keys that belong to the address. Also which browser and device it is, when you turned push notifications on there and when the app was last opened there with push notifications on. It is stored with your account, one line per phone and at most 10 phones. If you turn push notifications on on an eleventh, the line is removed for the phone where the app has gone longest without being opened. That phone gets push notifications again the next time you open the app on it.
• What is sent: the same events you see under the bell, and only the kinds you have switched on for the group. If you switch a kind off for a group, you get neither the line under the bell nor the push notification. The notification about a pub you asked for comes as a push notification too.
• Who sends it: Quizrundan's server hands the push notification to the notification service of whoever made your phone or browser, which is Apple, Google, Mozilla or Microsoft, and that service delivers it to the phone. The service receives the notification encrypted, so that only your phone can read what it says. It sees the push address, when the notification is sent and how large it is, and it knows which phone the address belongs to. A label comes with the notification too, so that a newer notification about the same quiz, visit or pub can take the place of an older one that hasn't arrived yet. The label is a string of letters and numbers and doesn't say which pub, group or person it is about.
• What shows on a locked screen: what has happened or what is coming up, the pub's name, the date and time, and in a notification about answers how many are coming and how many haven't answered. If you are in several groups, the group's name is there too. A notification about a pub you asked for shows the pub's name, sometimes as you wrote it yourself. The reminder the day before a quiz is worded differently depending on whether you have answered or not. So it shows whether you have answered, but never what. It never shows any person's name, results, ratings or notes. Anyone who sees your phone can read the notification, and it stays among the phone's notifications until you open it or clear it.
• Turning it off: under Notifications you turn off push notifications for the phone in your hand, or one kind at a time per group. The notification about a pub you asked for has no switch of its own: it stops coming as a push notification when you turn off push notifications for the phone. You can also turn off notifications for Quizrundan in your phone's settings.
• How long: until you turn off push notifications for the phone, log out on it or delete your account. The line about the phone is then removed at once. If you log out with no connection, the phone stops receiving push notifications at once, and the line is removed the next time Quizrundan tries to send to it. The line is also removed when the notification service answers that the address no longer works, and when someone else turns on push notifications with their account on the same phone: a phone belongs to one account at a time.
• Getting them out: for each phone you have turned push notifications on for, the file you get with "Export my data" says which browser and device it is, which notification service the push address is with, when you turned them on and when the app was last opened there. The push address itself and the encryption keys aren't in the file.

Photos from visits

Everyone in a group can add photos to the group's visits. This is how they are handled.

• What is stored: the photos you add, in two sizes: a larger one shown when you open the photo and a small one shown in the grid. With each photo the app stores which visit it belongs to, who added it and when, and the picture's dimensions and file size. A photo can have a caption, which anyone in the group can write, change and remove. Who wrote it isn't stored, and it is deleted with the photo. Which photo is the visit's cover is stored on the visit. Before a photo is sent, your phone makes a new, smaller picture of it. That removes location and other hidden information in the image file, and the original never leaves your phone. What the picture shows is of course still there.
• Who sees them: only the members of the group, including people who join later. No other group sees them, and they aren't public on the web: the app fetches each photo with a temporary address that stops working after one hour. Sabina has no view in the app of a group's photos unless she is a member of that group. A member who has seen a photo may have saved it, and their browser may keep a copy.
• Sharing and saving: with "Share" you send the photo from your phone, to a chat for example, or save it on your phone. From there that app's or your phone's rules apply, and the photo stays there even if it is deleted in Quizrundan. The app doesn't store that a photo was shared or where it went.
• Where they are kept: with Supabase, in the EU region Stockholm, like the rest of your group's content.
• Deleting a photo: the person who added a photo can delete it, and so can an admin of the group. It can't be undone. The photo disappears from the app at once, and the image files are erased shortly afterwards by an automatic job. Until then they can't be fetched anew. An address the app has already fetched may keep working until the file is erased, for one hour at most.
• How long: until the photo, the visit or the group is deleted. If a visit is deleted, its photos are hidden with it and can be restored with the visit for 30 days. Then they are removed for good. The same goes for a group that is deleted. If an upload is cut short, an image file can be left behind without belonging to any photo. Nobody can fetch it, and it is erased automatically after about a day. Quizrundan is a hobby project and promises no backup of the photos, so keep the pictures you care about somewhere else as well.
• If you leave the group or delete your account, the photos you added stay with the group: under your name if you left the group, and under "Former member" if you deleted your account. If you want them gone, delete them first. Afterwards only an admin of the group can delete them.
• Are you in a photo and want it removed? If you are in the group, ask the person who added the photo, or an admin of the group. If you aren't in the group, email hej@sabinas.dev and say which pub it is and which date. Sabina can't see groups' photos in the app, so she passes your request on to the group's admins, who delete the photo. To reach the group's admins she may email them at the address they log in with.
• Getting them out: the file you get with "Export my data" lists the photos you have added, with their captions if they have one, including in groups you have left. The pictures themselves aren't in the file. Under "Your photos" in About Quizrundan there is a link to each photo you added in the groups you are in. The links work for one hour; reload the page to get new ones. Photos that other people added aren't in the file: you see them in the app.

Tips you send

Under More there is "Tell us", where you can say when something in the app is broken or missing. It is optional, and nothing is sent until you press "Send". This is how a tip is handled.

• What is stored: the text you write, which kind you chose (problem, idea or something else) and whether you have said we may contact you. The tip is stored together with your account. With it the app also sends its version, which kind of page you were on before you opened More (for example the page for a visit, but never which visit, which pub or which group), language, theme, the size of your screen and which browser and device you use. Nothing about your group is sent. What you write in the text yourself is stored as written, so write about the app: no names are needed.
• Who sees it, and how: nobody else who uses the app sees your tips, and neither does your group. Sabina can read them in the database, where they are tied to your account. Once a week the product team's AI agents also go through the new tips, through an AI service (Anthropic). They get the text, the kind, the details about app and device listed above, whether you allow contact (only yes or no) and a pseudonym: a code that stands in for your account, so that several tips from the same person can be counted together. They don't get your name, your email address or the id of your account. Email addresses and phone numbers written in the text itself are hidden before the agents read it. Names in the text aren't hidden. The agents write a summary in their own words and count how many people raised the same thing. The summary is kept with the project's working documents, alongside the app's code, and contains neither your text word for word, your name nor your contact details. Your email address is used only by Sabina, and only if you switched on "You can contact me about this". She can then email you at the address you log in with. It isn't a promise of a reply.
• Why: to find bugs in the app and decide what to build next. Tips aren't used for advertising or marketing, aren't sold and aren't passed to anyone other than those named in this text. Legal basis: legitimate interest, which here means being able to fix and improve the app.
• How long: a tip is deleted 12 months after it is closed, that is, after something has been done about it or after the decision to do nothing. An automatic job that runs every day takes care of it. Until then the tip is kept. If you delete your account, all your tips are deleted at once. The summaries remain. What the AI service has received it keeps under its own rules, and what "How long it is kept" says about backups applies to tips too.
• Getting a copy: your tips are in the file you get with "Export my data".

Pubs you ask for

If a pub is missing from the list you can ask for it with "Ask for a pub". If you see a detail that is wrong you can say so with "Wrong detail?" on the pub's page. It is optional, and nothing is sent until you press "Send". This is how what you send is handled.

• What is stored: the pub's name and, if you fill them in, where it is, which day the quiz is, a website and what you write yourself. For a correction, which pub it is about and your text. Once it is decided, how it went is stored too, and when. It is stored with your account, so that you can get a notification about what happened. Nothing about your group is sent. What you write is stored as written, so write about the pub: no names are needed.
• Who sees it, and how: nobody else who uses the app sees what you have asked for or corrected, and neither does your group. Sabina can read it in the database, where it is tied to your account. Every other week she takes out a list for the product team's AI agents, who read it through an AI service (Anthropic) and look into the pubs. What you sent may be in that list. If it is, the list holds the pub's name as it was written, what you filled in about the pub and what you wrote yourself, word for word, a number for what you sent and sometimes the day you sent it. Nothing in your text is hidden. If you write a name, an email address or a phone number there, it goes to the agents and the AI service too. The list doesn't hold your name, your email address or the id of your account. The number may stay in the project's working documents, alongside the app's code. Your text isn't copied there. If we contact a pub to check the details, we never say who asked for it.
• The notification: once it is decided what happens with what you sent, you get a notification in the app, under the bell. If nothing is decided, no notification comes. No email is sent.
• Why: to decide which pubs are added to the pub list and to fix mistakes in it. What you send isn't used for advertising or marketing, isn't sold and isn't passed to anyone other than those named in this text. Legal basis: legitimate interest, which here means being able to keep the pub list right and up to date.
• How long: what you sent is deleted 12 months after the decision about it. If no decision comes, it is deleted 12 months after you sent it at the latest. If a pub is removed from the list, the corrections about it are deleted with it. An automatic job that runs every day takes care of it. If you delete your account, everything you have asked for and corrected is deleted at once. What the AI service has received it keeps under its own rules, and what "How long it is kept" says about backups applies here too.
• Getting a copy: the pubs you have asked for and the corrections you have sent are in the file you get with "Export my data", with what you wrote and how it went.

Cookies and local storage

Quizrundan uses only cookies that are needed to keep you logged in and to remember your own choices and what you have already done on this phone. No analytics, no ads and no tracking.

All nine belong to Quizrundan and are only sent over an encrypted connection. Eight of them can't be read by scripts on the page. The ninth, invite_sent, is set by the page itself in the browser and holds only the group's id. You stay logged in until you log out, or until you haven't used the app for 90 days.

Local storage on your device

• A visit you have started. When you log a visit, what you have filled in so far is kept on your phone (IndexedDB), so it is still there if you lose signal. Nothing is sent until you save. The draft is removed when you save or discard it, when you log out and when you delete your account on that device, and otherwise after at most 30 days, the next time someone logs in to Quizrundan on the device. It isn't shown to another account.
• The card about installing the app. If you said no, the browser remembers when (localStorage, under the name qr-install-dismissed). The card stays away for 30 days; the mark stays until you clear the browser's data and says nothing about you.
• The card about push notifications. If you pressed "Not now", the browser remembers it (localStorage, under the name qr-push-dismissed), so that the card isn't shown again on that phone. It stays until you clear the browser's data.
• Who turned on push notifications here. If you turn on push notifications on a phone, the browser stores your account's id (localStorage, under the name qr-push-on), so that the app can tell your push notifications from ones someone else turned on on the same phone. It is a string of letters and numbers, not your name or your email address. It is removed when you turn off push notifications on the phone, when you log out and when someone else logs in there.
• The line about reminders. If you have push notifications on on a phone, the browser remembers that the line about reminders in Notifications doesn't need to be shown there (localStorage, under the name qr-push-reminders-told): either because you have already seen it, or because you turned push notifications on when the reminders were already there. It says nothing about you or your account. It stays when you turn off push notifications and when you log out, until you clear the browser's data.
• Push notifications, if you have turned them on. The browser itself keeps track of the fact that the phone receives push notifications from Quizrundan, with the push address and the keys, until you turn them off, log out or clear the browser's data. A push notification is shown by the app's own files, below. It isn't saved in the app on the phone.
• That a passkey has been used here. If you have logged in with or added a passkey in the browser, it remembers that (localStorage, under the name qr-passkey-used), so that the login page shows the passkey first next time. It says nothing about which account it was. It stays when you log out, and is removed when a login answers that the passkey no longer exists, or when you clear the browser's data.
• List or map under Pubs. The browser remembers whether you last looked at "List" or "Map" under Pubs (localStorage, under the name qr:pubs:last-view). If the phone is on a slow connection or set to save data, the map's code is fetched ahead of time only if the map is what you looked at last. It is the word list or map and says nothing about you or your account. It stays when you log out, until you clear the browser's data.
• The app's own files (scripts, images and icons) are kept on the device so that the app opens faster, together with the language you chose. No pages or data from your account are kept that way.
• Where you have scrolled is remembered by the browser until the tab is closed (sessionStorage). It holds nothing about you.

Your rights

You have the right to know what data is held about you, to have mistakes corrected, to take your data with you and to have it deleted. You can also object to how it is used, or ask for the use to be restricted.

• Export: log in, open About Quizrundan and choose "Export my data". You get a JSON file with your profile and your choices, which version of the terms you accepted and when, your notifications, which phones you have turned push notifications on for, the tips you have sent with "Tell us", the pubs you have asked for and the corrections you have sent, the changes you made to the shared pub list when groups could edit it (the latest 2,000), which photos you have added to visits and, for each group you are in, the group, the members' names, categories, visits, who was there, ratings, planned quizzes, answers, rounds and the change log. The pictures themselves aren't in the file: you open them under "Your photos" on the same screen. The file doesn't contain other people's email addresses. From groups you have left, it holds only that you were in them, when, and the photos you added there. Passkeys you have added aren't in the file; you see them under Profile, under Passkeys.
• Correct: you change your name and profile picture yourself under Profile. That is also where you rename a passkey or remove it.
• Delete: log in, open About Quizrundan and choose "Delete account". Under "How long it is kept" you can read what is removed and what remains.
• Anything else: email hej@sabinas.dev.

If you think your data is handled wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY, Integritetsskyddsmyndigheten): www.imy.se.

Children and age

Quizrundan is for people who are 18 or older, as the terms say. The app doesn't ask for your age and doesn't check it, so no date of birth is stored. The app is about pub quizzes but doesn't sell or promote alcohol.

Changes to this text

The date at the top is the name of the version. The text is updated before the app starts storing anything new. The text published here is the one that applies. No email is sent about changes, so look at the date if you want to know whether something is new.