Scope and status
QuizCon is currently an individually operated, non-production beta service. There is no registered business operator and real-money payments are not enabled. This interim notice describes data processing confirmed in the current application; infrastructure facts that cannot yet be confirmed are listed separately below.
Information QuizCon processes
- Account: email address, display name, password hash, email verification and password-reset tokens.
- Security: registration IP address, authentication/session identifiers, device identifier, client type, platform and app version.
- Service records: pack purchases, downloads, attendance, wallet and point ledgers, payments and refunds.
- Community and creator content: quiz packs, job and marketplace posts, applications, offers, Luxury Hall proposals and uploaded/source URLs.
- Operational records: audit actions, user ID when available, IP address, severity and limited error detail.
- Browser-local data: downloaded packs, selected pack, game progress, sound preferences, device identifier and session token.
Purposes
- Provide accounts, authentication and email verification.
- Provide anonymous and account-linked quiz experiences.
- Deliver purchased packs and maintain transaction integrity.
- Operate creator, jobs, marketplace and Luxury Hall features.
- Detect abuse, secure the service and investigate operational failures.
Recipients and external services
The application uses MariaDB and can use configured email delivery, YouTube/YouTube-nocookie embeds, external image/media hosts and browser-loaded font/CDN resources. No advertising or behavioral analytics SDK was found. The beta deployment's hosting, email, CDN and backup providers must be recorded here when those production services are selected.
Retention and deletion
- Audit logs are deleted after approximately 31 days by application logic.
- Expired client sessions are deleted after expiry plus the configured grace period (currently 7 days).
- Account withdrawal immediately replaces email, display name, registration IP, credentials and active tokens; closes public job and marketplace posts; and signs out the account.
- Transaction, purchase, point and related records remain linked to an anonymized internal user row for integrity.
- Backup retention and destruction behavior are unknown.
Your controls
- Change display name and email from My Page.
- Withdraw the account using the current password.
- Use anonymous quiz access where available.
- Clear browser-local QuizCon data using browser storage controls.
Cookies and automatic storage
QuizCon uses an authentication cookie and an explicit language-preference cookie. Game clients also use localStorage for device/session identifiers, downloaded packs, progress and preferences. No advertising or behavioral analytics SDK was found in the audited application code.
Children
During beta operation, users under 14 should not create an account. Public quiz packs that do not require an account remain available. QuizCon does not collect date of birth and does not yet provide a legal-representative consent process.
Operator and requests
QuizCon is currently operated by an individual for testing and has no registered business information. Privacy, account and service requests can be sent to hompy@buntgames.com. Members can also change account information or withdraw through My Page.
Contact
Privacy, account, service, copyright and moderation inquiries: hompy@buntgames.com
Items to confirm before public or paid operation
- Record the selected hosting, email, CDN and backup providers, regions and retention periods.
- Obtain legal review before accepting accounts from users under 14.
- Confirm retention requirements before enabling real payments or commercial transactions.
- Document response targets and identity-verification procedures for access, correction, deletion and export requests before broader release.