Privacy Policy

We collect only what we need to run Brainizz and to show your learning progress:

• Account information — your username, email address and, if you sign up with email, a securely hashed password.
• Quiz activity — the quizzes you start and complete, the answers you choose, your scores and the time taken.
• Progress data — XP, levels, streaks, achievements and daily goal progress calculated from your activity.
• Technical data — basic information such as IP address, browser type and request logs used for security and troubleshooting.

If you register with an email address and password, your password is never stored in plain text. It is hashed using industry-standard algorithms before it is saved. We use your email address to sign you in, to send password-reset messages you request, and for essential account notices.

If you choose “Continue with Google”, Google authenticates you and shares your name, email address, verified-email status and a unique account identifier with us. We verify this information directly with Google on our servers. We do not receive your Google password and we do not access your Google contacts, files or other data.

Your use of Google sign-in is also subject to Google's own privacy policy. You can remove Brainizz's access at any time from your Google Account settings.

• To create and secure your account and keep you signed in.
• To score quizzes, calculate XP, levels, streaks, achievements and daily goals.
• To show your history, dashboard and statistics.
• To operate the public leaderboard.
• To protect the service against abuse, fraud and security threats.
• To improve quizzes and fix problems, including by measuring how the site is used.
• To show advertising, which helps keep Brainizz free to use.

The leaderboard publicly shows your username, level, total XP, quiz count and streak. Anyone can open your public profile from the leaderboard, which also shows the month you joined, your rank, your quiz statistics (such as average score, accuracy and perfect scores), the achievements you have unlocked and your average score in each category.

Your email address, real name and individual quiz answers are never shown publicly. Choose a username you are comfortable sharing; you can change it from your profile.

We use a strictly necessary, HttpOnly cookie to keep you signed in securely, and short-lived access tokens held in your browser's memory. We may use your browser's session storage for small conveniences (for example, completing the Google sign-in flow). We use Google Analytics cookies to understand how the site is used, as described in Analytics below. Our advertising partner, Google, also uses cookies and similar technologies to show ads and measure them, as described in Advertising below.

We use Google Analytics to understand how visitors use Brainizz — for example which pages and quizzes are visited, how people arrive at the site, the type of device and browser, and approximate location (country or city, derived from your IP address). Google Analytics uses cookies for this. We do not send your name, email address, username or quiz answers to Google Analytics, and we use the reports only in aggregate to improve the site.

If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are only used after you consent. You can opt out of Google Analytics on every website with the Google Analytics opt-out browser add-on, and read how Google uses information from sites that use its services.

Brainizz shows ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

• You can opt out of personalised advertising in Google Ads Settings.
• You can opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info or, in Europe, youronlinechoices.eu.
• Learn how Google uses information from sites that use its services.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through a message provided by Google before personalised ads or non-essential advertising cookies are used. You can change your choices at any time with the “Privacy choices” link at the bottom of every page. Ads never have access to your Brainizz account, quiz answers or email address.

We use encrypted connections (HTTPS) in production, hashed passwords, expiring and revocable sign-in tokens, rate limiting and server-side validation of all quiz submissions. No system is perfectly secure, but we work to protect your information and will act promptly if we become aware of a security incident.

Quiz and question images are provided by Brainizz administrators and may be stored on our servers or with a cloud storage provider. We do not collect images from learners.

We rely on a small number of service providers — for example hosting, database, email delivery, file storage and Google (for Google sign-in, Google Analytics and, as described above, advertising). They process data on our behalf only as needed to provide their service. We do not sell your personal information.

We keep your account and quiz history for as long as your account is active. Server logs are kept for a limited period for security purposes. When you delete your account, we delete or anonymise your personal information unless we are required to keep it by law.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can update your username and password from your profile. For other requests, contact us at noreply.brainizz@gmail.com.

To delete your account and associated quiz data, contact us at noreply.brainizz@gmail.com from the email address linked to your account. We will confirm the request and complete it within a reasonable time.

Brainizz is not directed at children under the age required by local law to consent to data processing without parental approval. If you believe a child has provided us with personal information without appropriate consent, contact us at noreply.brainizz@gmail.com and we will delete it.

We may update this policy from time to time. When we make significant changes we will update the effective date above and, where appropriate, notify you through the service.

Questions about this policy or your data? Contact Brainizz at noreply.brainizz@gmail.com.