Privacy Policy
Last updated: 28 July 2026
In one sentence
Football Quiz plays offline. Nothing leaves your phone until you agree to join the online leaderboard, and even then only your nickname and scores are sent. There is no account, no email address, and no ad tracking.
Who is responsible
Football Quiz is published by an independent developer. For any question about your data or your rights: maemartinscharavel@gmail.com.
What stays on your phone
Most of the game never talks to a server. The following is stored inside the app, on your device only, and disappears when you uninstall it:
- your progress: completed levels, stars, streaks, success statistics;
- your nickname, your badge colour and, if you pick one, your profile photo — which is never uploaded anywhere;
- your in-game currency, boosters, hearts and daily quests;
- your settings: language, sound, haptics, sharing choice;
- the list of players you have hidden from the leaderboard.
The question database (clubs, players, crests) ships with the app. No network request is needed to play.
What is sent, and only with your consent
The Challenge mode has an online leaderboard. At the end of your first run worth at least one point, the app asks whether you want to appear on it. Until you say yes, nothing is sent. You can change your mind at any time under My account → Privacy.
If you accept, the following is transmitted to our server:
| Data | Why | Retention |
|---|---|---|
| Nickname and badge colour | To identify you on the leaderboard | 365 days after your last run |
| Score, difficulty and time of the run | To build the daily, weekly and monthly boards | 100 days |
| Account level, cleared levels, success rate | To fill your public card, opened from the leaderboard | 365 days after your last run |
| A random identifier generated on the device | To link your runs together without an account or an email address | 365 days after your last run |
| A salted hash of your IP address (SHA-256, not reversible) | To rate-limit abuse and cheating attempts | 30 days |
| Support message, attached screenshot, optional reply address | To handle your report | 365 days |
The IP address itself is never stored in the clear: only a salted cryptographic hash is, and it is deleted after thirty days.
What we do not do
- No account, no email address, no phone number, no password.
- No ad network, no advertising identifier, no cross-app tracking.
- No third-party behavioural analytics.
- No selling or sharing of your data for commercial purposes.
- No location, no contacts, no microphone, no camera.
- Your profile photo never leaves the device. The only image that can leave is a screenshot you choose to attach to a report yourself.
Reporting and moderation
The leaderboard shows nicknames chosen by other players. An automatic filter rejects offensive nicknames on every run submitted — there is no sign-up at which to do it once and for all. From a player's card you can also report or hide them. Hiding is immediate and stays on your device. A report sends the target's identifier, yours, and the reason you picked; after three distinct reports the entry is removed from the leaderboard. These records are kept for one year. The identifier of a removed entry is kept for the same period, even if the account is erased in the meantime: otherwise erasing your data would be enough to come straight back.
Contacting support
The Help & contact screen offers two paths, and they do different things.
- Emailing us opens your mail app with a pre-filled message. Nothing leaves the app: you press Send, and the address we receive is the one from your mail account.
- The report form sends straight to our server: the text of your message, your app version and platform, the reply address if you enter one, and the screenshot if you attach one. A non-reversible hash of your IP address is stored with it and deleted after thirty days.
Messages and screenshots are kept for one year, then deleted automatically — the screenshot is removed from disk along with the message. They are used only to handle your request and are shared with no one.
Purchases
Any purchases are handled by Apple's App Store or Google Play. We never see your payment method, your name or your address: the store only confirms to us that a purchase happened.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, to object to its processing, and to withdraw your consent at any time. In practice:
- Withdraw consent: My account → Privacy → Send my games. Nothing is sent from that moment on.
- Correct your nickname: change it in your profile; the new one is used on your next run.
- Erase your data: My account → Privacy → Erase my leaderboard data. Deletion is immediate and permanent. You can also use the deletion request page.
- Access your data or get a copy: write to us quoting the identifier shown at the bottom of the Privacy screen. We send your whole card back as a readable, reusable JSON file.
- Restrict or object to processing: turning off sending covers almost every case. For anything else, write to us.
You may also lodge a complaint with your national data protection authority — in France, the CNIL (cnil.fr).
Legal basis
Sending runs to the leaderboard relies on your consent (GDPR article 6.1.a). Keeping a hash of the IP address and processing reports rely on our legitimate interest in running a working, respectful service (article 6.1.f).
Children
Football Quiz is a football trivia game with no adult content, and is not directed at children. The online leaderboard relies on consent: in France a minor under fifteen needs a parent or guardian to give or authorise it (article 45 of the Loi Informatique et Libertés), and that age ranges from thirteen to sixteen across the EU. The game itself plays offline, sending nothing, at any age. The only user-generated content is the nickname shown on the leaderboard, which is filtered and reportable.
Where the data is hosted
The leaderboard server is hosted in the European Union. No data is transferred outside the European Economic Area.
Changes
Any change to this policy will be published on this page with a new update date. A substantial change will trigger a fresh consent request inside the app.