Privacy Policy

1. Data we collect

We collect the following categories of data to provide and improve the Service.

• Account / game data: display names you enter to create/join rooms, room codes, selected avatar/animation choices. This data is used to run the multiplayer experience and may be visible to other players in the same room.
• Connection & server logs: IP addresses, timestamps, User-Agent, and socket connection metadata. We store minimal logs for abuse prevention and debugging.
• Analytics (optional): aggregated usage data (pageviews, events) via Google Analytics if you accept the cookie consent banner. IP anonymization is enabled.
• Public assets: non-personal files (geojson, FBX models, textures) used to render the app; these are listed in the project's attributions.

2. How we use your data

• Run the real-time game server and route messages between players.
• Provide, maintain, and improve the Service.
• Detect and prevent abuse, fraud, and security incidents.
• Analyze usage patterns to prioritize features (only with analytics consent).
• Respond to support requests and legal obligations.

3. Legal basis for processing (EEA / UK)

Where applicable, we rely on the following lawful bases for processing personal data:

• Contractual necessity: processing required to provide the multiplayer game and related features (e.g. routing messages to a room).
• Legitimate interests: for abuse prevention, security, and product improvement. We balance these interests against user privacy.
• Consent: for analytics and non-essential cookies; users may accept or decline via the cookie banner.

4. Cookies and tracking

We use a simple cookie-consent mechanism. No analytics or tracking scripts are loaded until you grant consent. The consent choice is stored in your browser's localStorage.

If you accept analytics, we load Google Analytics (GA4) with IP anonymization enabled. You can revoke consent by clearing the localStorage key quizin_analytics_consentor using your browser settings.

5. Third-party services & processors

We use third-party services to operate the Service. These may include (examples):

• Google Analytics (Google LLC): web analytics. Google acts as a processor; Google’s privacy and data processing terms apply. We enable IP anonymization.
• Socket.IO / hosting provider: real-time transport and infrastructure hosting. Providers may process connection logs as part of service delivery.
• Open-source libraries: React, Next.js, Three.js, d3-geo, and others — these are included in the project's dependencies and are licensed independently.

See Contact & credits for attributions and links to external projects.

6. Data retention

We retain connection logs and minimal server telemetry for a limited time to diagnose issues and prevent abuse. Display names and room state exist while a room is active and may be removed shortly after the room expires. Analytics data retention is subject to your consent and Google Analytics settings.

7. International transfers

Some service providers (e.g. Google) process data outside your country. Where transfers occur from the EEA/UK, we rely on the provider's transfer mechanisms and safeguards (e.g. SCCs). Contact us for details.

8. Security

We implement reasonable technical and organizational measures to protect personal data, including encrypted connections (HTTPS) and restricted server access. No system is entirely secure — if you suspect a breach, contact us immediately.

9. Children

The Service is not intended for children under 13 (or higher local minimum age). We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us to request deletion.

10. Your rights

Depending on your jurisdiction you may have rights to access, correct, delete, or port your personal data, and to object to processing. To exercise these rights contact us at triaxisit@gmail.com. We will verify requests to protect security and privacy.

EU/EEA residents may also lodge a complaint with a supervisory authority.

11. Copyright & third-party content

The app uses third-party assets and libraries. See the credits page for attributions and links. If you believe any content on the site infringes your copyright, contact us at triaxisit@gmail.com with a takedown request and supporting details.

12. Changes to this policy

We may update this policy. Material changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

For privacy questions, data requests, or copyright notices contact:
triaxisit@gmail.com

This draft is intended to be a practical, developer-friendly privacy policy template. It is not legal advice — consider having a lawyer review and adapt it to your specific jurisdiction and business requirements.