Privacy Policy
Last updated: 21 August 2026
In one sentence
Football Quiz plays offline. Nothing leaves your phone until you agree to join the online leaderboard, and even then only your nickname and scores are sent. There is no account and no email address. The game does show ads, but they do not follow you from one app to another.
Who is responsible
Football Quiz is published by Maestrow, a sole proprietorship operated by Maé Martins--Charavel and registered with the Quebec enterprise registrar under NEQ 2282417783, in Notre-Dame-des-Bois, Quebec, Canada.
The person accountable for the protection of personal information, as required by Quebec's Act respecting the protection of personal information in the private sector, is the owner of the business. For any question about your data or your rights, write to maemartinscharavel@gmail.com.
What stays on your phone
Most of the game never talks to a server. The following is stored inside the app, on your device only, and disappears when you uninstall it:
- your progress: completed levels, stars, streaks, success statistics;
- your nickname, your badge colour and, if you pick one, your profile photo — which is never uploaded anywhere;
- your in-game currency, boosters, hearts and daily quests;
- your settings: language, sound, haptics, sharing choice;
- the list of players you have hidden from the leaderboard.
The question database (clubs, players, crests) ships with the app. No network request is needed to play.
What is sent, and only with your consent
The Competition mode has an online leaderboard. At the end of your first run worth at least one point, the app asks whether you want to appear on it. Until you say yes, nothing is sent. You can change your mind at any time under My account → Privacy.
If you accept, the following is transmitted to our server:
| Data | Why | Retention |
|---|---|---|
| Nickname and badge colour | To identify you on the leaderboard | 365 days after your last run |
| Score, difficulty and time of the run | To build the daily, weekly and monthly boards | 100 days |
| Account level, cleared levels, success rate | To fill your public card, opened from the leaderboard | 365 days after your last run |
| A random identifier generated on the device | To link your runs together without an account or an email address | 365 days after your last run |
| A salted hash of your IP address (SHA-256, not reversible) | To rate-limit abuse and cheating attempts | 30 days |
| Support message, attached screenshot, optional reply address | To handle your report | 365 days |
The IP address itself is never stored in the clear: only a salted cryptographic hash is, and it is deleted after thirty days.
What we do not do
- No account, no email address, no phone number, no password.
- No cross-app tracking. On iPhone the app never asks for permission to track you, and without it Apple hands over no advertising identifier: ads are chosen from context, not from what you do elsewhere. See the Advertising section for what Google actually receives.
- No third-party behavioural analytics.
- No selling or sharing of your data for commercial purposes.
- No location, no contacts, no microphone, no camera.
- Your profile photo never leaves the device. The only image that can leave is a screenshot you choose to attach to a report yourself.
Reporting and moderation
The leaderboard shows nicknames chosen by other players. An automatic filter rejects offensive nicknames on every run submitted — there is no sign-up at which to do it once and for all. From a player's card you can also report or hide them. Hiding is immediate and stays on your device. A report sends the target's identifier, yours, and the reason you picked; after three distinct reports the entry is removed from the leaderboard. These records are kept for one year. The identifier of a removed entry is kept for the same period, even if the account is erased in the meantime: otherwise erasing your data would be enough to come straight back.
Contacting support
The Help & contact screen offers two paths, and they do different things.
- Emailing us opens your mail app with a pre-filled message. Nothing leaves the app: you press Send, and the address we receive is the one from your mail account.
- The report form sends straight to our server: the text of your message, your app version and platform, the reply address if you enter one, and the screenshot if you attach one. A non-reversible hash of your IP address is stored with it and deleted after thirty days.
Messages and screenshots are kept for one year, then deleted automatically — the screenshot is removed from disk along with the message. They are used only to handle your request and are shared with no one.
Purchases
Any purchases are handled by Apple's App Store or Google Play. We never see your payment method, your name or your address: the store only confirms to us that a purchase happened.
That confirmation reaches us through RevenueCat, Inc., a company based in the United States, which validates both stores' receipts on our behalf and tells us whether your Quiz Pass is active. The app sends it an anonymous identifier that RevenueCat generates itself — unrelated to your leaderboard identifier, your nickname or your avatar — the receipt issued by the store, and your platform, store country and app version. It never receives your name, your payment method, your address, or any gameplay data.
If you buy nothing, none of this information exists. RevenueCat's privacy policy is published at revenuecat.com/privacy.
Advertising
The game shows ads supplied by Google AdMob, in two forms only: a video you choose to watch to earn a heart or a joker, and a screen between two levels. There is no permanent banner.
To serve them, Google receives an advertising identifier from your device, your approximate country inferred from your IP address, and the fact that an ad was shown. It never receives your nickname, your leaderboard identifier, or any of your runs.
Ads are not personalised on iPhone. The app never asks for permission to track you across apps, and without it Apple hands over no advertising identifier: ads are chosen from context, not from what you do elsewhere.
If you play from the European Union or the United Kingdom, a consent screen appears on first launch. Your choice is stored and can be reviewed at any time. Google's privacy policy is published at policies.google.com/privacy.
The Quiz Pass removes all advertising, rewarded videos included: a subscriber sees none, and nothing is requested from Google on their behalf.
Your rights
Football Quiz is governed by Quebec's Act respecting the protection of personal information in the private sector, as modernised by Law 25. It gives you the right to access and correct your information, to port it, to withdraw your consent, and to have information about you de-indexed or no longer disseminated. If you play from the European Union or the United Kingdom, the GDPR also applies and adds the rights to erasure, restriction and objection. In practice:
- Withdraw consent: My account → Privacy → Send my games. Nothing is sent from that moment on.
- Correct your nickname: change it in your profile; the new one is used on your next run.
- Erase your data: My account → Privacy → Erase my leaderboard data. Deletion is immediate and permanent. You can also use the deletion request page.
- Access your data or get a copy: write to us quoting the identifier shown at the bottom of the Privacy screen. We send your whole card back as a readable, reusable JSON file.
- Restrict or object to processing: turning off sending covers almost every case. For anything else, write to us.
If our answer does not satisfy you, you may complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). Players resident in the European Union may instead go to their own national data protection authority.
Legal basis
Sending runs to the leaderboard relies on your consent: it is requested separately from anything else, in plain words, and is as easy to withdraw as it was to give. Keeping a hash of the IP address and processing reports serve the serious and legitimate interest of running a working, respectful service. For players in the European Union, those two grounds correspond to GDPR articles 6.1.a and 6.1.f.
Children
Football Quiz is a football trivia game with no adult content, and is not directed at children. The online leaderboard relies on consent: in Quebec, consent for a minor under fourteen must be given by the person having parental authority or by the tutor, and that age ranges from thirteen to sixteen across the European Union. The game itself plays offline, sending nothing, at any age. The only user-generated content is the nickname shown on the leaderboard, which is filtered and reportable.
Where the data is hosted
The leaderboard server is hosted in Germany, in Nuremberg, with Hetzner Online GmbH. That is the only place your runs, your nickname and your reports are stored.
Three processors are involved, each for a single purpose:
- Hetzner Online GmbH (Germany, European Union) — hosting of the leaderboard server.
- RevenueCat, Inc. (United States) — validation of purchase receipts, and only if you buy something. See the Purchases section above for exactly what it receives.
- Google Ireland Limited (Ireland, for European players) and Google LLC (United States) — ad serving. Nothing is sent to it for a Quiz Pass subscriber.
If you play from the European Union or the United Kingdom, your leaderboard data therefore never leaves the European Economic Area. The only possible transfer outside the EEA is the one to RevenueCat, in the United States, covered by the European Commission's standard contractual clauses.
If you play from Quebec or elsewhere in Canada, your data is stored outside Quebec, in Germany. The European Union applies the GDPR, which Quebec law recognises as a protection regime comparable to its own.
Changes
Any change to this policy will be published on this page with a new update date. A substantial change will trigger a fresh consent request inside the app.