1. Controller
The controller within the meaning of the General Data Protection Regulation is:
Wildcard GmbHStrozzigasse 4/22
1080 Wien
Österreich
Email: sindelar@wildcard.at
We take the protection of your personal data very seriously and process your data exclusively in accordance with the GDPR, the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG) where applicable.
This Privacy Policy explains what data we collect, why we process it, and what rights you have.
2. Categories of Data We Process
Account Data
When you create an account, we process your email address, username or display name, and avatar configuration if created.
Social Login
When using a social login provider, we receive the data required for authentication, such as email address and name, from the respective provider.
The respective social login provider processes your data under its own responsibility. Further information can be found in the privacy policy of the respective provider.
3. Gameplay and AI Content
Gameplay Data
- answers to quiz questions
- time taken to answer questions
- duel results and match history
- ELO rating and league progression
This data is necessary to provide the gameplay functionality under Art. 6(1)(b) GDPR.
AI-Generated Content Interaction
QuizRivals uses AI systems to generate quiz questions. We process aggregated answer statistics, correctness rates, and flagging of questions to improve question quality and maintain game integrity.
4. Technical and Purchase Data
Technical Data
For security and stability, we process device and app information, log data, push notification tokens, notification delivery data, and error reports via Sentry.
Purchase Data
When you make in-app purchases, we process purchase status and product identifiers.
Payments are processed via the app stores, such as Apple App Store and Google Play. We do not process payment details ourselves. We use RevenueCat to manage purchase validation.
5. Purpose and Legal Basis of Processing
| Purpose | Legal Basis, Art. 6 GDPR |
|---|---|
| Account creation and login | Contract performance |
| Gameplay, including duels, scoring, and matchmaking | Contract performance |
| Storage of gameplay progress | Contract performance |
| App security and stability | Legitimate interest |
| Abuse prevention | Legitimate interest |
| Improvement of question quality | Legitimate interest |
| Processing purchases | Contract performance |
| Compliance with legal obligations | Legal obligation |
6. Hosting and Data Location
Our backend is self-hosted on servers located in the European Union through Hetzner.
Your data is therefore processed within the EU.
7. Processors
Firebase Cloud Messaging
Purpose: delivery of push notifications. Data processed: device push tokens, platform information, and notification metadata.
Sentry
Purpose: error tracking and technical stability. Data processed: technical and device-related information.
RevenueCat
Purpose: management and validation of in-app purchases. Data processed: purchase status and identifiers.
The data storage is in the EU where possible and data processing agreements in accordance with Art. 28 GDPR are in place.
8. Data Retention
We store personal data only as long as necessary for providing the service, fulfilling contractual obligations, and complying with legal requirements.
Gameplay data is stored as long as your account exists.
Data is deleted when you delete your account, request deletion, or retention is no longer required.
Deletion is performed within a reasonable period as part of our regular processes.
9. Data Security
We implement appropriate technical and organisational security measures to protect your data.
No system is completely secure. While we take all reasonable steps to protect your data, absolute security cannot be guaranteed.
10. Your Rights under GDPR
You have the right to access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing, and lodge a complaint with a supervisory authority.
Requests can be sent to: hello@wildcard.at
11. Reporting Inappropriate Content
If you encounter quiz content that is incorrect, offensive, or unlawful, please report it within the app or contact hello@wildcard.at.
We will review and remove such content where required.
12. Children
QuizRivals is not intended for persons under the age of 14.
We do not knowingly collect data from children.
13. Changes to this Policy
We may update this Privacy Policy from time to time.
The current version is always available in the app.
A Wildcard product. All rights reserved.