Privacy Policy
Last updated: 27 July 2026
Who we are
CapitalsQuiz is operated by IT Nest Limited, Office 3906, 39/F, The Center, 99 Queen's Road Central, Central, Hong Kong (BRN 77297048), a private company limited by shares incorporated in Hong Kong. IT Nest Limited is the controller of the personal data described here. For anything in this policy — including a request to see or delete your data — write to [email protected].
Playing without an account
You can play CapitalsQuiz without creating an account, and we ask for nothing to let you. In that case the only data involved stays on your device: your daily game counter, your daily-challenge state and cached settings live in your browser's local storage. Every key is listed on our Cookie Policy page.
If you create an account
Signing in is handled by Firebase Authentication, either with Google or with a one-time link sent to your email address. We store the account identifier Firebase issues, your email address, the display name the provider gives us (Google sign-in only) and your subscription state. We never see or store a password.
When you ask for a sign-in link, the link itself is minted by Firebase and delivered by Resend from
[email protected]. To keep that form from being abused we also record, for each request, a one-way hash of
the address, a hash derived from the network the request came from, and the random id stored in the
cq_device cookie. The raw address and the raw IP address are never written to those records.
Payments
Web payments are processed by Stripe; App Store payments by Apple. We never receive or store card numbers — the card is entered on Stripe's own pages. What reaches Stripe from us is your account identifier and your email address, so the payment can be matched to your account; what comes back and is stored is the subscription state — which plan, from which source, when it expires, and the Stripe customer id needed to open the billing portal.
How we measure the site
We count events — a game started or finished, a paywall seen, a checkout opened, a sign-in — using our own collector on our own domain. Each event carries the event name, the quiz mode, the page path and the two-letter country Cloudflare reports for the request. No cookie, no device id and no IP address is stored with it, and there is no way to join two events back into one person. We load no third-party analytics, advertising or tag-manager script.
Who else sees your data
| Who | Role | What they get |
|---|---|---|
| Google (Firebase) | Processor — authentication and database | Email, account id, subscription state |
| Stripe | Independent controller for the payment | Email, account id, and the card details you enter on their pages |
| Resend | Processor — email delivery | Your address and the sign-in link, when you ask for one |
| Apple | Independent controller | App Store purchases only, if you subscribe in the iOS app |
| Cloudflare | Processor — hosting, CDN and our event collector | Request metadata needed to serve the page; country only in stored events |
We do not sell your data and we do not share it for advertising.
Where your data is processed
IT Nest Limited is established in Hong Kong, and Google, Stripe, Resend, Apple and Cloudflare are US-based, so data about you is processed outside the European Economic Area. For transfers out of the EEA and the UK we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU–US Data Privacy Framework, as set out in each provider's own terms.
How long we keep it
- Account record and subscription state: while the account exists, and until you ask us to delete it.
- Sign-in link request records (hashes only, never the address or the IP): 30 days.
- Abuse-limit counters: about 4 hours.
- Analytics events: kept in aggregate, with no identifier that could tie them back to you.
- Payment records held by Stripe: for as long as Stripe's own retention and tax obligations require.
Your rights
If you are in the EEA or the UK you have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to your local data protection authority. Comparable rights may apply under your own law elsewhere. We honour these requests the same way wherever you are: write to [email protected] from the address on the account and we will act within 30 days. Deleting your account removes the account record and its subscription state; what your browser holds you can clear yourself, at any time, from its settings.
Our lawful bases: performing the contract you enter when you create an account or subscribe; our legitimate interest in keeping the sign-in form from being abused and in understanding — without identifying anyone — which quizzes people play; and legal obligation for payment records.
Children
The quizzes suit school-age players, but an account and a subscription do not: you must be old enough to enter a contract where you live, or have a parent do it for you. We do not knowingly collect personal data from children below the age of digital consent in their country. If you believe a child has created an account, write to us and we will delete it.
Changes
We may update this policy as the service changes. The date above says when it was last revised.
Contact
Questions about this policy: [email protected]