Privacy Policy

Last Updated: October 24, 2026

Quantise ("we", "us", or "our") operates the Quantise multiplatform trivia and numerical estimation game. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile application, web application, and related services (collectively, the "Service").

We respect your privacy and are committed to protecting your personal data. The independent developer of Quantise acts as the Data Controller responsible for your personal information. If you have any questions regarding this Privacy Policy or your personal data, please contact us at [email protected].

1. Age Restrictions & Children's Privacy

Quantise is not intended for young children:

• Global Minimum Age: Users must be at least 13 years of age.
• EU / EEA Minimum Age: Users residing in the European Union or European Economic Area must be at least 16 years of age.
• Parental Permission: Minors between the minimum eligible age and 18 must have parental or guardian permission to use the Service.

We do not knowingly collect or solicit personal data from children under these age thresholds. If we discover that we have collected personal data from a child below the minimum age, we will immediately delete that information.

2. Information We Collect

We collect information directly from you, automatically through your interaction with the Service, and from authentication providers.

2.1 Primary Authentication & Security Information

Quantise uses a passwordless authentication model:

• Google OAuth Data: Email address, Google account ID, display name, and avatar URL provided by Google during sign-in.
• Passkey Data (WebAuthn): Public key credentials, credential IDs, and authenticator metadata for biometric or hardware key sign-in. We never collect or store your private cryptographic keys.
• Verified Email Address: Optional email address added for account recovery via inbox confirmation magic links / one-time codes.
• Two-Factor Authentication (TOTP): Optional TOTP verification status and anchor records.

Note: Quantise does not request, collect, or store account passwords.

2.2 Profile & Preferences Data

• Chosen display nickname (subject to our Nickname Policy).
• Selected avatar preferences.
• Language preference and app settings.

2.3 Gameplay & Technical Data

• Gameplay Activity: Numerical estimation answers, trivia responses, game scores, history, match statistics, and leaderboard positioning.
• Technical Identifiers: IP address, browser type, operating system, user-agent string, device model, timestamp of access, and request URLs.

2.4 User-Contributed Facts & Trivia

• Facts, trivia questions, and numerical data submitted by users to contribute to the game database.

2.5 Communications & Marketing Data

• Support inquiries and correspondence sent to [email protected].
• Voluntary marketing communication preferences (opt-in records).

3. How We Use Your Information (Legal Bases)

We process your personal data based on the following legal grounds under applicable privacy laws (including GDPR and KVKK):

4. Third-Party Infrastructure & Data Processors

To deliver Quantise efficiently and securely, we utilize trusted third-party infrastructure and service providers:

• Oracle Cloud Infrastructure (OCI): Primary backend hosting, database storage, and core server processing.
• Cloudflare: Content Delivery Network (CDN), Web Application Firewall (WAF), DDoS protection, DNS, and edge routing.
• Mailgun: Transactional email delivery (email verification, account recovery, and account security notifications).
• Google Gemini AI: Used specifically to parse, clean, format, verify, and extract structured numerical facts from user-contributed trivia submissions.
• Google OAuth: Authentication provider for users choosing Google sign-in.

We do not sell your personal data to third parties. All processors are contractually bound to handle data securely and strictly for the purposes specified by Quantise.

5. Marketing Communications & Consent

• Voluntary Opt-In: We will only send you marketing or promotional emails if you explicitly opt-in to receive them.
• Withdrawal of Consent: You may withdraw your marketing consent at any time by clicking the "Unsubscribe" link in any promotional email or by updating your preferences in your account settings.
• Transactional Emails: Transactional emails (such as account recovery, security alerts, or email verifications) are mandatory for service operation and are not subject to marketing opt-out.

6. Data Retention & Security

• Security Measures: We implement industry-standard technical and organizational security measures, including HTTPS/TLS encryption in transit, storage encryption at rest on Oracle Cloud, WebAuthn passkey standards, and secure session management.
• Data Retention: We retain your personal data for as long as your account remains active. If you delete your account, your personal data will be purged or anonymized from active databases within 30 days, except where longer retention is required for legal, tax, or fraud prevention compliance.

7. Your Data Subject Rights

Regardless of your geographic location, we respect your rights regarding your personal data. Specific provisions apply depending on your region:

7.1 General Data Protection Regulation (GDPR - EU / EEA)

Under Articles 15–22 of the GDPR, EU/EEA residents have the right to:

• Right to Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten (Art. 17): Request permanent deletion of your account and personal data.
• Right to Data Portability (Art. 20): Export your personal account and gameplay data in a structured, commonly used, machine-readable format.
• Right to Restrict or Object to Processing (Art. 18 & 21): Restrict or object to data processing based on legitimate interests.

7.2 KVKK Rights (Turkish Personal Data Protection Law No. 6698)

Pursuant to Article 11 of the KVKK, Turkish data subjects have the right to:

• Learn whether personal data is processed and request information if it has been processed.
• Learn the purpose of processing and whether data is used in accordance with its purpose.
• Know third parties to whom personal data is transferred domestically or abroad.
• Request rectification of incomplete or inaccurate data.
• Request deletion or destruction of personal data under KVKK conditions.
• Object to negative results arising from automated data analysis.

7.3 California & US State Privacy Rights (CCPA / CPRA)

For residents of California and states with similar privacy legislation:

• Right to Know & Access: You can request details about the categories and specific pieces of personal data collected.
• Right to Delete: Request deletion of personal information.
• Right to Data Portability: Obtain a downloadable export of your data.
• No Sale or Sharing of Personal Information: Quantise does not sell your personal information and does not share your data for cross-context behavioral advertising.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

7.4 How to Exercise Your Rights

You can exercise your data rights directly:

• In-App / Web Self-Service: You can export your data or delete your account directly inside the Quantise app or website account settings.
• Email Request: You can send a written request to [email protected]. We will respond within statutory timeframes (30 days for GDPR/KVKK).

8. Cookies & Local Storage

Quantise uses essential local storage and session tokens strictly necessary to:

• Maintain your authenticated session.
• Remember your selected language and interface preferences.
• Protect against cross-site request forgery (CSRF) and abusive requests.

No Third-Party Advertising Cookies: We do not use third-party tracking pixels, advertising cookies, or behavioral analytics trackers.

9. International Data Transfers

Your data may be processed on servers hosted by Oracle Cloud Infrastructure and Cloudflare located in various regions worldwide. When data is transferred internationally, we ensure appropriate safeguards (such as Standard Contractual Clauses and encrypted transmission protocols) are in place to protect your data.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological, legal, or operational changes. When updates occur, we will post the revised policy on our website and update the "Last Updated" date.

11. Contact Information

If you have questions, complaints, or requests regarding this Privacy Policy or your personal data, please contact:

• Email: [email protected]
• Data Controller: Quantise Developer