Privacy Policy

Last updated: March 27, 2026

KpopQuiz (kpopquiz.org) respects your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What we collect

When you sign in with Google or Discord, we receive:

  • Your email address
  • Your display name
  • Your profile picture URL (if available)

We do not receive or store your Google or Discord password.

When you use KpopQuiz, we also collect:

  • Quizzes you create (questions, answers, settings)
  • Quiz play records (score, time taken, date)
  • Likes you give to quizzes
  • Your username, display name, bio, and avatar URL (as set by you in Settings)
  • Your XP, level, and badges (calculated from your activity)

2. How we use your data

We use your data to:

  • Display your profile and quizzes to other users
  • Calculate scores, rankings, XP, and leaderboards
  • Show quiz statistics (play counts, average scores, pass rates)
  • Generate Quiz of the Day selections
  • Improve the platform and fix bugs

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies and local storage

KpopQuiz uses:

  • Authentication cookies (managed by Supabase) to keep you signed in
  • No tracking cookies
  • No third-party analytics cookies
  • Local storage for UI preferences (such as dismissed banners)

4. Third-party services

We use the following third-party services:

  • Supabase (database and authentication) - stores your account and quiz data
  • Vercel (hosting) - serves the website
  • Google OAuth and Discord OAuth - for sign-in only

Each of these services has their own privacy policy. We encourage you to review them.

5. Data visibility

By default, the following is publicly visible to all users:

  • Your username and display name
  • Your avatar
  • Quizzes you create
  • Your XP level and badges
  • Your play statistics

The following is private and never shared:

  • Your email address
  • Your OAuth provider details
  • Your specific play-by-play history on other users' quizzes

6. Data retention

Your data is retained as long as your account is active. If you want to delete your account and all associated data, contact us at contact@kpopquiz.org and we will process your request within 30 days.

7. Children's privacy

KpopQuiz is not directed at children under 13. If you are under 13, please do not create an account. If we learn that we have collected data from a child under 13, we will delete it promptly.

8. Your rights

Depending on your location, you may have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to certain uses of your data

To exercise these rights, contact us at contact@kpopquiz.org.

9. Security

We use industry-standard security practices including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and row-level security on our database. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

11. Contact

For privacy-related questions or data requests, contact us at contact@kpopquiz.org.