Privacy Policy
What we collect
- Name/nickname you enter for quiz creation or play.
- Photos/screenshots you upload to build quiz content.
- Quiz answers, scores, and gameplay state.
- Email address, only if you opt in to be notified — when a quiz's ranking reveals, or (if you created the quiz) when a friend plays it and when it reveals.
- Mobile phone number, only if you opt in to a text when a quiz's ranking reveals.
- Basic anti-abuse and reliability data (for example hashed IP and rate-limit counters).
- Basic analytics on how the app is used (pages viewed, in-app actions taken).
How we use data
- Generate quiz questions, roasts, and reveal content.
- Serve active quiz links and scoreboards.
- Email you when a quiz you opted into reveals, and — if you created it and asked to be notified — when a friend plays it, if you asked to be notified.
- Text you — one text per quiz, never marketing — when a ranking you opted into reveals.
- Detect abuse, enforce rate limits, and handle takedown reports.
- Understand how the app is used so we can improve it.
Text notifications (SMS)
If you enter your mobile number on a quiz's waiting screen, we send one text for that quiz when its ranking is ready. That is the only thing your number is used for — no marketing texts, ever — and opting in is never a condition of playing or of any purchase.
- Message frequency: one text per quiz you opt into. Message and data rates may apply.
- Reply STOP at any time to opt out, or HELP for help. You can also ask us to remove your number via support.
- Mobile phone numbers are never shared with or sold to third parties or affiliates for marketing or promotional purposes.
- Text messaging originator opt-in data and consent are not shared with any third parties, except the vendors who deliver the texts (see Service providers).
- US numbers only for now.
Service providers
We do not sell your personal data. Quiz content is shared with people who have the quiz link. To run the app, we share data with a small number of service providers, only for the purpose of providing the service:
- Google (Gemini API) — uploaded photos and the name/nickname you enter are sent to Google's Gemini API to generate quiz questions/roasts and to automatically screen for photos of minors before a quiz can go live. We use Google's paid API tier: per Google's terms, prompts and files you send are not used to train Google's models, and are logged only briefly for safety/abuse detection and legal compliance — not for product improvement.
- Resend — sends the reveal-notification and confirmation emails, if you opt in.
- Telnyx — delivers the reveal-notification text, if you opt in to SMS.
- PostHog — basic product analytics (the "how we use data" items above).
- Cloudflare (Turnstile) — verifies you're a real person before we spend AI resources on a request.
Data retention
Quiz content and photos are kept until the creator deletes the quiz or it is removed for a policy violation. Anti-abuse counters (hashed IP, rate limits) are kept for a short rolling window and are not tied to your identity.
Reports and removal
If you are in a quiz without consent, use the in-app I'm in this quiz report link and/or contact support: alex@midnightdev.dev.
Creators can delete their own quiz. Reported quizzes may be hidden or removed.
Age requirement
This service is intended for users 16 and older. Quizzes never feature minors: photos that appear to include anyone under 18 are automatically excluded and are not published.