Privacy Policy
1 Introduction
This policy describes how Qfunny collects, uses, stores, and protects your personal information when you use our website and services.
2 Information We Collect
What you provide
- Account registration: username, email address, password, first and last name
- Profile: avatar, bio, country, language
- Content: quizzes, questions, answers, descriptions you create
- Communications: messages sent to our support team
Social login (Google, Facebook, Apple)
When you sign in with a social provider we receive your name, email address, profile picture, and provider user ID. We do not receive your social media passwords.
Automatically collected
- Usage data: pages viewed, features used, quiz interactions, time spent
- Device data: IP address, browser type, operating system
- Cookies: see our Cookie Policy for details
Quiz performance data
When you take quizzes we store your scores, answers, completion times, and attempt history to show you your progress and power leaderboards.
3 How We Use Your Information
- Create and manage your account and enable core quiz features
- Save your preferences, progress, and settings
- Improve the platform through analytics (only with your consent)
- Send account notifications and respond to support requests
- Detect fraud, enforce our Terms of Service, and keep the site secure
- Comply with legal obligations
4 Legal Basis (GDPR)
For users in the European Economic Area, we process personal data on the basis of:
- Consent — for analytics and advertising cookies
- Contract performance — to provide the service you signed up for
- Legitimate interests — for security monitoring and fraud prevention
- Legal obligation — where required by law
5 How We Share Your Information
Public information
Your username, avatar, and bio are visible to all visitors. Quizzes you create are public unless you set them to private.
Service providers
We share data with providers who help us operate Qfunny — hosting (LWS.fr), email delivery, and analytics (Google Analytics). They are contractually bound to process data only as instructed.
Social platforms
If you use social login, those platforms may set their own cookies — see their own privacy policies.
Legal requirements
We may disclose data to comply with legal obligations, respond to lawful authority requests, or protect the rights and safety of Qfunny and its users.
6 Data Retention
We keep your personal data for as long as your account is active and as necessary to provide the service, comply with legal obligations, and resolve disputes.
When you delete your account, your personal data is anonymised within 24 hours. Quiz attempt records are retained in anonymised form for service integrity. You can request full erasure by emailing privacy@qfunny.com.
7 Your Privacy Rights
Delete Your Account & Data
You have the right to permanently delete your Qfunny account and all associated personal data. Here is exactly what happens when you do:
Sign in to access account deletion in your Settings page, or email privacy@qfunny.com to request deletion without an account.
8 Data Security
- Encryption: all data in transit uses SSL/TLS (HTTPS)
- Passwords: hashed with bcrypt — we never store plain text
- Access controls: personal data is accessible only to authorised processes
- CSRF protection: all forms are protected against cross-site request forgery
- Secure hosting: servers hosted on LWS.fr in France (EU)
9 Children's Privacy
Qfunny is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with their data, please contact privacy@qfunny.com and we will delete it promptly.
10 International Data Transfers
Your data is hosted in France (EU) via LWS.fr. If data is transferred outside the EEA we ensure appropriate safeguards are in place such as Standard Contractual Clauses approved by the European Commission.
11 Third-Party Services
We integrate with the following services — each governed by their own privacy policy:
12 Policy Updates
We may update this policy from time to time. Material changes will be communicated by updating the date above, posting a notice on the site, and where required by law, requesting renewed consent.
13 Contact & Data Protection
For privacy requests, data deletion, or questions about this policy:
We will respond to all requests within 30 days.