Privacy Policy

1. Information we collect

• Account information: your email address, and a display name if you choose to add one.
• Learning activity: the questions you are served and your answers, whether they were correct, and your wisdom points, energy, level and answer counts, with timestamps.
• Arena matches: the questions in each match, your answers and how long they took, the result and the wisdom points won or lost. Your opponent sees your display name (or “Player” and four digits if you have not set one), your level and your answers in that match, but never your email address.
• Corrections you submit: the question, the answer you gave, the type of problem and your message, along with our decision, any reply and any wisdom points awarded.
• Sign-in data: one-time sign-in codes (stored only in hashed form and valid for 10 minutes) and session records, including a hashed session token, the browser or app you signed in with (user agent) and when the session was last used.
• Guest play: if you play without an account, a random guest identifier stored in your browser and a count of the questions you have answered. It does not identify you personally.
• Technical information: like most websites, our hosting provider automatically records request logs that include your IP address, browser type and the pages or API endpoints requested. We use these logs to keep the Service secure and working.
• Messages you send us: if you email us, we keep the message and your contact details to respond.

We do not ask for, and you should not provide, sensitive information such as government ID numbers.

2. How we use information

• To provide the Service: create and sign in to your account, serve questions, and track your progress.
• To send you sign-in codes by email. We do not send marketing email.
• To keep the Service secure, prevent abuse (for example, limiting how often codes can be requested) and fix problems.
• To understand, in aggregate, how questions are answered so we can improve our content.
• To review the corrections you send, reply to you and fix questions.
• To comply with the law and enforce our Terms of Use.

3. How we share information

We do not sell or rent personal information, and we do not share it for targeted advertising. We share it only:

• With service providers that run the Service for us under contract and may use the information only to provide their services: Vercel (hosting), Neon (database) and Resend (delivery of sign-in emails).
• For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, property or safety of XT SOFTWARE LABS LLC, our users or others.
• In a business transfer, such as a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
• With your consent, or in de-identified or aggregate form that cannot reasonably identify you.

4. Cookies and local storage

We use one essential cookie, qtl_session, to keep you signed in. It expires after 30 days or when you sign out. Guest play stores a random identifier in your browser’s local storage. We do not use advertising or third-party tracking cookies. If you block these, sign-in or guest progress will not work.

5. How long we keep information

We keep account information and learning activity while your account exists. Sign-in codes expire after 10 minutes, and sessions expire after 30 days. When you ask us to delete your account, we delete or de-identify your personal information within 30 days, except where we must keep it to comply with the law, resolve disputes or enforce our agreements. Copies in backups and provider logs are removed on their normal schedules.

6. Your choices and rights

• You can view your progress and change your display name on your profile page.
• You can ask us for a copy of your personal information, ask us to correct it, or ask us to delete your account by emailing quiztolearn@xtsoftwarelabs.com from the email address on your account. We may need to verify your request.
• Depending on where you live (for example, California or Washington), you may have additional privacy rights. We honor these requests as required by law and will not discriminate against you for exercising them.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 13, do not create an account. Users aged 13 to 17 should use the Service with a parent or guardian’s permission. If you believe a child under 13 has given us personal information, contact us and we will delete it.

8. Security

We use reasonable safeguards, including encrypted connections (HTTPS) and storing sign-in codes and session tokens only in hashed form. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping access to your email account secure, because it is used to sign in.

9. Where information is processed

We and our service providers operate in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States.

10. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date, and if the changes are significant we will take reasonable steps to let you know. Continuing to use the Service after an update means you accept the updated policy.

11. Contact us

Questions or requests about this policy: quiztolearn@xtsoftwarelabs.com. XT SOFTWARE LABS LLC.