GameQuiz Privacy Policy

Version 1.2 — Effective and last updated: 12 September 2026.

1. Operator, controller and privacy contact

GameQuiz is an independent Discord application operated in France under the public name Koziel. The operator determines the purposes and means of the personal-data processing described in this Policy and acts as the data controller for that processing.

Privacy contact: gamequiz.contact@gmail.com.
No Data Protection Officer (DPO) has been appointed at this stage; this email address is the dedicated privacy contact.

2. Scope and sources of data

GameQuiz receives or generates data from the following sources:

• From Discord: server, channel, role and user identifiers; display names; and interaction metadata necessary to process GameQuiz commands, buttons and forms.
• From server administrators: GameQuiz language, time zone, quiz schedule, reminder and notification settings, selected quiz filters and other server configuration choices.
• From players: answers voluntarily submitted through GameQuiz interactions.
• From users of reporting/support features: report category and details, related support messages, the reporting user's Discord identifier and display name, the relevant server, report status and timestamps.
• Generated by GameQuiz: quiz results, scores, rankings, participation counts, streaks, seasons, achievements, quiz history and records used to avoid inappropriate repetition.
• Technical operation: limited application logs and diagnostic information used to operate, secure and troubleshoot the service.

3. Data categories, necessity and consequences of not providing data

GameQuiz follows a data-minimisation approach and is designed not to require access to ordinary Discord message content, presence data or the full server member list.

• Server configuration data is necessary to publish and manage quizzes on a server. Without it, GameQuiz cannot be configured for that server.
• Discord user ID and display name are necessary to associate a participant with an answer, score, ranking, profile and achievements. A person who does not interact with GameQuiz does not need to submit a quiz answer merely to remain a member of the Discord server.
• Quiz answer text is optional in the sense that nobody is required to participate, but it is necessary to take part in a quiz and have the answer evaluated.
• Report and support content is provided only when a user chooses to use those features and is necessary to investigate or respond to the submitted issue.

GameQuiz does not ask users to provide passwords, Discord authentication tokens, payment-card details, precise geolocation, phone numbers, health information or other special-category/sensitive personal data. Users should not include sensitive or unnecessary personal data in quiz-answer, report or support fields.

4. Purposes and legal bases

4.1 Providing the requested GameQuiz service — Article 6(1)(b) GDPR

When a user chooses to interact with GameQuiz, or an administrator chooses to configure it for a server, GameQuiz processes the data necessary to provide the requested functionality under the Terms of Service. This includes receiving and validating answers, publishing corrections, calculating scores, maintaining rankings, profiles, seasons, streaks and achievements, preserving quiz history, applying server settings, and handling reports or support conversations initiated through GameQuiz.

4.2 Security, integrity, support and abuse prevention — Article 6(1)(f) GDPR

GameQuiz may process limited technical, report and operational information where necessary for the legitimate interests of securing the service, diagnosing failures, maintaining data integrity, preventing abuse, investigating reported problems, avoiding inappropriate repetition of quiz content and protecting users, servers and the service. These interests are pursued in a manner designed to minimise the data used. Where this legal basis applies, users may object to processing on grounds relating to their particular situation.

4.3 Legal obligations — Article 6(1)(c) GDPR

Data may be processed or preserved where required to comply with a binding legal obligation, lawful authority request, or applicable regulatory requirement.

5. Answers, reports and visibility on Discord

Answers submitted through GameQuiz remain private to the participant while the quiz is open. When the quiz closes, GameQuiz may publish in the configured Discord channel the participant's Discord display name, submitted answer and whether the answer was accepted, together with the correction and rankings.

Reports and related support conversations are handled through GameQuiz's support/reporting system and are not published as normal quiz results. They may be visible to the people responsible for handling GameQuiz reports and to the reporting user through the relevant support interactions.

Messages already published to Discord become part of the relevant Discord server's message history. Deleting active GameQuiz database records does not automatically delete messages already sent to Discord; those messages are subject to Discord's platform controls and the server's moderation permissions.

6. Retention and deletion

• Written quiz answers: retained in active GameQuiz databases for up to 90 days by default, then the stored answer text is automatically purged. Statistical results may remain without the answer text.
• Scores, results, rankings, streaks, seasons and achievements: retained while needed to provide the persistent leaderboard/profile functionality for that server, until the user requests deletion or the server data reaches the removal deadline described below.
• Reports and support conversations: GameQuiz does not currently define a separate automatic retention period for these records. They remain in active storage while needed to handle and document the report and are deleted when the associated user's active GameQuiz data or the server's active GameQuiz data is deleted, unless retention is required by law.
• If a player leaves a Discord server: historical GameQuiz statistics may remain because they form part of that server's quiz history. The former member can request deletion at gamequiz.contact@gmail.com.
• User deletion request: /delete_my_data (shown as /supprimer_mes_donnees for French-localised Discord clients) deletes the user's active GameQuiz records on that server after confirmation, including associated reports and report conversations where applicable. Existing Discord messages are not altered.
• Server deletion by an administrator: the available server-data deletion command can immediately remove the server's active quiz data, configuration and reports while leaving the bot installed but unconfigured.
• Server removal: after GameQuiz is removed from a server, active server data is kept for a recovery period of up to 30 days by default, allowing an accidental removal/reinstallation to be recovered. It is then deleted from active storage.
• Private backups: rolling technical backups are kept for approximately 14 days. A record deleted from active storage can therefore remain in an older backup until that backup expires. Backups are intended for disaster recovery, not ordinary use, and deleted data is not intentionally restored except where technically necessary for recovery.

If GameQuiz stops operating permanently, Discord API data will be deleted or rendered non-identifying as required by applicable law and Discord's developer requirements, subject only to legally required retention and the expiry of technical backups.

7. Access, sharing and service providers

GameQuiz does not sell Discord user data, use it for targeted advertising, provide it to data brokers, or use it to build advertising profiles.

• Discord provides the platform and API through which GameQuiz receives interactions and publishes responses.
• Railway hosts the GameQuiz application, databases and technical backups and acts as a service provider/processor for hosted GameQuiz data.
• Steam, Twitch / IGDB and RAWG are used for video-game lookup information and imagery. GameQuiz is designed to send game lookup information to these services, not players' Discord IDs, display names, quiz answers, reports or support messages. Steam is the primary screenshot source; IGDB is used for game data and as an image fallback; RAWG is an additional image fallback when configured.
• GitHub Pages hosts this public static website. The operator does not add advertising or custom analytics trackers to these pages. GitHub may independently process standard web-request information, cookies and similar data in accordance with GitHub's own privacy documentation.

8. International transfers

Some service providers operate in the United States or other countries outside the European Economic Area. Where GameQuiz uses a processor to transfer EEA personal data to a country without an applicable adequacy decision, the transfer should rely on an appropriate mechanism required by applicable data-protection law.

Railway's Data Processing Addendum provides for the EU-U.S. Data Privacy Framework where applicable and the European Commission's Standard Contractual Clauses for relevant ex-EEA transfers. Discord states that it uses Standard Contractual Clauses, adequacy decisions where applicable, and the EU-U.S. Data Privacy Framework for international transfers. Other third-party providers are subject to their own privacy and transfer terms. Information about safeguards relevant to GameQuiz can be requested at gamequiz.contact@gmail.com.

9. Security

GameQuiz is designed to use technical and organisational safeguards proportionate to the data processed, including:

• use of Discord's default intents without enabling privileged Message Content, Presence or Server Members intents for the current GameQuiz functionality;
• private per-server data storage and restricted filesystem permissions;
• secrets stored as deployment environment variables rather than in the public site or source code;
• host-level security controls provided by the hosting platform;
• limited retention periods and automatic purging of answer text, backups and removed-server data;
• sanitised error logging designed to avoid exposing secret credentials.

No system can guarantee absolute security. If a personal-data breach occurs, GameQuiz will investigate and mitigate it and will make any notifications required by applicable law or platform rules.

10. Your rights

Where the GDPR applies, you may have the right to:

• access your personal data;
• request rectification of inaccurate data;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive portable data where the legal conditions for portability are met.

GameQuiz provides /my_data / /mes_donnees to export active data associated with the requesting user on the current server, including report data associated with that user where applicable, and /delete_my_data / /supprimer_mes_donnees to erase active user data. For requests that cannot be completed through Discord — including a request made after leaving a server — contact gamequiz.contact@gmail.com.

You also have the right to lodge a complaint with the French data-protection authority, the CNIL, or another competent supervisory authority where applicable.

11. Automated scoring and profiling

GameQuiz automatically compares quiz answers against accepted answers in order to award points and generate game statistics. This automation is used only for the entertainment/game mechanics of GameQuiz and is not used to make decisions producing legal effects or similarly significant real-world effects about a person. GameQuiz does not use Discord API data to profile users for advertising, employment, housing, insurance, credit or similar eligibility decisions.

12. Children and minimum age

GameQuiz is intended only for people who are legally permitted to use Discord and who meet Discord's minimum-age requirements and any higher minimum age required by the law applicable to them.

13. Public website

The GameQuiz public website is a static information site. The operator does not provide user accounts, advertising, payment forms or custom analytics on the site. Hosting-level logs, security functions, cookies and similar technologies may nevertheless be processed by GitHub under GitHub's own policies.

14. Changes to this Policy

This Policy will be updated when a material change affects the categories of data processed, purposes, legal bases, service providers, retention periods, paid features or other relevant privacy practices. The version and effective date at the top of this page identify the current Policy.

15. Contact

GameQuiz public operator name: Koziel
Data-protection requests: gamequiz.contact@gmail.com
Official support: GameQuiz Support on Discord
Terms of Service: https://gamequizbot.github.io/gamequiz-site/terms.html