Last updated: October 20, 2026
Privacy Policy
Trivia Traveler is a quiz game that works without an account or sign-up. If you like, you can sign in with Apple or Google to back up your progress (Section 2). This page describes what data is collected, who processes it, for what purpose, and for how long.
1. Data Controller
Netnovate LLC
7901 4th ST N STE 300
St. Petersburg, FL 33702
USA
Email: [email protected]
2. Game progress on the device and on our server
Your game progress is stored on the device. Which questions you have seen and how you answered them is stored only there; our server only receives answers that are not linked to you and adds them up into totals per question (see "Answer rates per question" below). If the app is deleted, the game progress on the device is gone.
As soon as the device is online, the app sends an evaluation of the game progress to our server. This lets us see how far players get and at which points players stop, and we use it to improve difficulty, content and offers. The evaluation is linked only to a random identifier that the app generates itself on first launch. It contains no name, no email address, and no device or advertising identifier.
The following is transmitted:
| Item | Meaning |
|---|---|
| Random identifier | A random string generated by the app, plus a secret that is stored only as a verification value |
| Platform and version | iOS or Android, app version and version of the question pack, operating system version (such as “Android 12” or “iOS 18.4”, without the device model) and, on Android, whether the app runs in Google’s test lab (so that test devices are left out of the statistics) |
| Where the install came from | Android only: Google Play tells the app which link it was installed from, for example “google-play / organic” or the ID of an ad campaign. We store this text exactly as Google Play provides it. If the install came from an ad, it contains the Google Ads click identifier (gclid, gbraid) and the campaign. We use it only to see which ads bring new players; we do not store your device’s advertising ID |
| Country | The country a request comes from; our CDN Cloudflare derives it from the IP address and passes on only the country code, we do not store the IP address here |
| Progress | Stations reached, stars and best score per station, number of rounds and failed rounds per station, total number of correct and incorrect answers |
| Play time | How long the app was open on which day, installation date |
| Coins and purchases | Coin balance, where coins came from and what they were spent on, purchased items, in-app purchases with time and list price |
| Character | Chosen game character and its accessories, the boat |
| Play habits | Number of hints, lucky-wheel spins and rewarded ads watched, supplies |
| Reminders | Whether reminders are switched on and how often a notification was tapped (Section 4) |
| Play history | What happened in the game and when, with the time: app opened and closed, screens shown, rounds with station, result and duration, completed worlds and continents, coins earned and spent, lucky wheel, ad videos (and whether an ad was tapped), purchases, shop and wardrobe, downloaded images, on Android the reason the system last closed the app (for example low memory) and its memory use, and when the app is closed, its memory use and the device’s total and free memory (without the device model) |
The legal basis is our legitimate interest in a functioning, fair and improved game under Article 6(1)(f) GDPR. The evaluation is overwritten with every report and is deleted once the device has not reported anything for twelve months, or if you request deletion (Section 11). We delete entries in the play history after twelve months, and together with the whole game record. The play history only goes to our own server, not to Google or anyone else; the "Game statistics" switch (Section 6) does not affect it.
Answer rates per question
When you answer a question for the first time, the app sends to our server, in batches, which question it was, in which language, which answer you chose or whether time ran out, whether it was correct, how long you took and whether you used the hint. The server only keeps totals per question, such as "1,240 answers, 63% correct". We do not store your individual answers, and the totals cannot be traced back to you. So that a batch is not counted twice, we keep its identifier for 30 days together with the app's random identifier and the number of answers in it. This shows us questions whose difficulty is set too high or too low and lets us show how many travelers got a question right. The legal basis is, as above, our legitimate interest under Article 6(1)(f) GDPR; the "Game statistics" switch (section 6) does not affect this count.
Challenging friends
If you challenge friends with a link (trivia-traveler.com/app/mit/…), our server stores which
questions the challenge contains, in which language, your result and the name you enter for it, together with
the app's random identifier and your character. Anyone who plays the link in a browser sends us their answers,
their answer times and, if they like, a name. Names and results are only visible to people who have the same
link. For each link we also count how often the page was opened, a round was started and a store button was
tapped, and whether a messenger fetched the link's preview (which tells us that it was shared, and through which
service). So that your own visits do not count as visits by your friends, we store for each link an encrypted
short value of the network you created or shared it from (shortened to the network range, not your IP address);
it is deleted together with the link. We do not store IP addresses for this, and the page sets no cookies; only
your browser remembers, in its
local storage, that you have already played a challenge. If you install the app on Android through such a link,
"Where the install came from" (above) contains the link's code. A link can be played for 30 days; 120 days after that we
delete it together with all its rounds. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in
offering the feature and seeing whether it is used.
Backing up your progress with Apple or Google (optional)
In Settings you can sign in with Apple (on iPhone) or with Google. A copy of your complete game progress is then also kept on our server, so you can continue after switching phones or reinstalling the game. Sign-in is handled by Firebase Authentication (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Firebase receives an identifier of your account and your email address from Apple or Google; with Apple you can hide your address, in which case Firebase receives a relay address. We do not ask for your name.
On our server we only store the identifier Firebase assigns to your account, the provider (Apple or Google), your game progress with a short summary (stars, stations, coins, character), and when and from which device it was last backed up, plus the last ten backups so we can restore an earlier state if something goes wrong. Here the game progress also includes which questions you have already seen. We do not store your email address or your name.
The legal basis is the performance of the service you use by signing in, under Article 6(1)(b) GDPR. You can sign out at any time in Settings; your backup is kept. With "Delete account" in Settings we immediately delete your backed-up progress including earlier backups, and your Firebase account is deleted; with Apple, the app's connection to your Apple ID is revoked as well. Without the app you can request this by email, see Delete account.
3. Server and retrieval of game content
The app occasionally downloads an updated question pack from trivia-traveler.com and
sends it the data described in Sections 2, 4 and 5. As with any access to a website, this involves
the device's IP address.
The server is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen) in a data center in Germany. The connection runs through Cloudflare's network (Cloudflare, Inc., USA), which protects the site against attacks and forwards the requests; Cloudflare processes the IP address in doing so. The transfer to the USA is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare is certified.
The legal basis is the legitimate interest in secure and functional operation under Article 6(1)(f) GDPR. Server logs are deleted after 14 days.
4. Push notifications
The app can remind you when your next free spin on the lucky wheel is ready, when your supplies are full again and when your boats can still race in the regatta that day. This happens only if you have allowed notifications in the system prompt. Each reminder can be switched off individually in the app under Settings, "Reminders"; you can withdraw the permission entirely in your device settings.
Messages are delivered through Firebase Cloud Messaging, a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For this, the device receives a push identifier from Firebase, which is sent to our server. At the scheduled time, our server sends the title and text of the reminder together with this identifier to Google, and Google delivers it via Apple or Android, respectively. Nothing is sent at night (9 pm to 8 am local time). Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is your consent under Article 6(1)(a) GDPR, which you give by granting the permission in the system prompt. If Google reports an identifier as invalid, for instance because the app was deleted, we delete it immediately.
5. Question reports
If someone considers a question to be wrong or misleading, they can report it in the app using the flag icon. This is voluntary. The report goes to our own server and is used solely to find and correct errors in the questions.
The following is transmitted:
| Item | Meaning |
|---|---|
| Question | The identifier of the reported question |
| Reason | A reason from a fixed list, such as "answer is wrong" or "typo" |
| Free text | Optional, up to 500 characters |
| Random identifier | A random string that the app generates itself on first launch |
| Platform and version | iOS or Android, app version and version of the question pack |
| Time | When the report was received |
The free text is stored exactly as written. Please do not include a name, address or other personal details in it; they are not needed to correct a question. If the device is offline at the time, the report waits on the device and is sent with the next connection. A device can send at most 20 reports per hour.
The legal basis is our legitimate interest in correct game content under Article 6(1)(f) GDPR. Reports are deleted once they have been processed, and at the latest after twelve months.
6. Usage analysis with Firebase Analytics
The app includes Google Analytics for Firebase (Google Ireland Limited). Usage analysis runs from the first launch. You can switch it off and on again at any time in Settings under "Privacy" with the "Game statistics" switch; while it is off, nothing more is collected.
Firebase records how the game is used: a random identifier for this app installation, events such as opening the app or finishing a round, device model, operating system, language, app version, and the approximate country that Google derives from the IP address. Google Signals is switched off. We only see aggregated reports, never individual people.
Crash reports: If the app crashes or fails to start, it sends an error report through Firebase Crashlytics (Google Ireland Limited): the technical error message, the state of the app at that moment, device model, operating system version, app version and a random installation identifier. This helps us fix problems quickly. The "Game statistics" switch also turns crash reports off.
Measuring our own advertising: We also advertise Trivia Traveler using Google Ads. Only if you have consented to personalised advertising (Section 8) and have not switched off game statistics, and on the iPhone additionally allowed tracking in Apple's prompt, does the app give Firebase permission to use the analytics data for advertising purposes. Google can then recognise whether you came to the game via one of our ads, measure the success of our ads, and optimise them accordingly. On the iPhone, Firebase also uses the advertising identifier (IDFA) for this; on Android, Firebase never collects the advertising ID. Without this consent, no data is sent to Google for advertising purposes, and Google only estimates success in aggregate form. On the iPhone, Apple also reports anonymously and in aggregate via SKAdNetwork whether an installation can be attributed to an ad; Google does not receive any information about you in the process. The legal basis for this measurement is your consent under Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG); you can withdraw it using the "Personalised advertising" or "Game statistics" switch.
The legal basis for usage analysis is our legitimate interest in evaluating and improving the game under Article 6(1)(f) GDPR. You can object at any time by switching off "Game statistics." Google stores the events for 14 months. Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google.
7. In-app purchases
Coin packs, the starter pack and "Ad-free" can be purchased with real money. Payment is handled exclusively through Apple's App Store or Google Play; their respective privacy policies apply. We do not receive any payment or account data, only confirmation of which offer was purchased, which we then credit in the game. So that only paid purchases are credited, the app sends the store's purchase receipt (order number and receipt, no payment data) together with the device's random ID to our server, which verifies it with Apple or Google. We store the result with the offer, order number, purchase time and store country.
8. Advertising
On Android and iOS, the free app contains advertising from Unity Ads (Unity Technologies). These are voluntary rewarded videos offering an in-game reward, and occasional full-screen ads between rounds. The Unity advertising SDK starts with the app. There is no advertising in the browser version.
For delivery, measurement, fraud prevention and technical error diagnosis, Unity may process, among other things, the IP address and the approximate country derived from it, device and app information (such as model, operating system, language, screen and network data), device identifiers, purchase history, ad views and taps, and performance and diagnostic data. We base this processing, which funds and keeps the free app running securely, on our legitimate interest under Article 6(1)(f) GDPR. You can object to it for reasons arising from your particular situation using the contact address given above. You can report inappropriate ads directly in Settings.
Without your consent, advertising is contextual: the app tells Unity that no consent has been given. Unity then does not select ads based on your interests and does not build an advertising profile about you.
With your consent, Unity shows personalised advertising. For this, Unity uses your device's advertising identifier (on Android, Google's advertising ID; on the iPhone, the IDFA, but only if you additionally allow tracking in Apple's prompt) together with the data mentioned above, to select ads based on your interests and measure their success, including across apps and websites of other companies. The app asks you at the earliest on the second day, when you start a rewarded video for the first time. If you decline, the video still plays and the reward stays the same; you also will not see more ads as a result. The same consent allows Google to measure the success of our own advertising for the game (Section 6). The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time in Settings under "Privacy" using the "Personalised advertising" switch, and on the iPhone also in the iOS Settings under "Privacy & Security" → "Tracking." Unity also processes data in the USA. More information is available in Unity's privacy policy: unity.com/legal/game-player-and-app-user-privacy-policy.
Outside the EU, the EEA, the United Kingdom and Switzerland (Android only): there, personalised advertising is switched on by default and the app does not ask separately. The same default allows Google to measure the success of our own advertising (Section 6). You can switch both off at any time in Settings under "Privacy" using the "Personalised advertising" switch. The app determines on the device whether you are in one of these countries from the country of your SIM card and mobile network, your time zone and your language setting; this information does not leave your device. If any of it points to Europe, or none of it is known, the rule for Europe applies: no personalised advertising without your consent. On the iPhone, the rule for Europe applies everywhere.
9. Who the game is intended for
Trivia Traveler is aimed at teenagers aged 13 and over and adults, and is not intended for children under 13.
10. Recipients at a glance
| Recipient | Purpose |
|---|---|
| Hetzner Online GmbH, Germany | Server operation (Section 3) |
| Cloudflare, Inc. | Protection and forwarding of the connection (Section 3) |
| Google Ireland Limited (Firebase) | Sign-in to back up your progress (Section 2), delivery of reminders (Section 4), usage analysis (Section 6) |
| Apple, Google (sign-in) | Confirming your account when you sign in (Section 2) |
| Apple, Google (stores) | Processing of purchases (Section 7) |
| Unity Technologies (Unity Ads) | Delivery of advertising, personalised with consent (Section 8) |
11. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. You can withdraw any consent you have given at any time, with effect for the future. For deletion, a message to [email protected] is sufficient. To help us match your request to the correct entry, please include the random identifier that the app shows in Settings under "Privacy."
12. Changes
If the app changes, this page changes too. The date at the top shows when the current version was published.