1. Data We Collect
- Account data: email address, username, and hashed password when you register.
- Game data: quiz scores, match history, and achievements linked to your account.
- Technical data: IP address (for rate limiting), browser/device type via standard server logs.
- Payment data: processed by Stripe or Iyzico; we do not store full card numbers.
2. How We Use Your Data
- To provide and improve the quiz service.
- To display leaderboards and track your progress.
- To process subscription payments.
- To enforce rate limits and prevent abuse.
- To send transactional emails (account confirmation, password reset).
We do not sell your personal data to third parties.
3. Data Retention
Account data is retained for as long as your account is active. You may delete your account at any time via the Profile → Settings page, which will remove your personal data within 30 days. Aggregated, anonymised statistics may be retained indefinitely.
4. Third-Party Services
- Neon (PostgreSQL): database hosting — EU region.
- Upstash (Redis): session caching and leaderboard data.
- Stripe / Iyzico: payment processing.
- Vercel: web hosting and edge functions.
5. Your Rights (GDPR / KVKK)
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Object to or restrict certain processing activities.
- Data portability (receive your data in a machine-readable format).
To exercise any of these rights, contact us at privacy@diziquiz.com.
6. Cookies
We use a single authentication cookie (dq_token) to keep you logged in. We do not use advertising or tracking cookies.