Privacy Notice

Who is responsible for your data

Ridiculous Facts for Quiz Nights is run by Stephen Bown, a sole trader in the United Kingdom. Stephen Bown is the data controller for the personal data described here, which means we decide how and why it is used.

What we collect and why

• Account details — your email address, and your name if you sign in with Google. Used to create and run your account. Legal basis: performing our contract with you.
• Login credentials — a securely hashed password, or a Google sign-in link. Used to keep your account secure. Legal basis: contract.
• Membership status — whether your membership is active, when it renews, and reference IDs from our payment provider (not your card details). Used to unlock members' content. Legal basis: contract.
• Technical data — IP address, browser and device information, and basic server logs. Used to keep the service running and protect it from abuse and fraud. Legal basis: our legitimate interests.
• Messages you send us — used to answer support questions. Legal basis: legitimate interests.

We don't sell your data, and we don't send marketing emails unless you've asked to receive them.

Who we share it with

• Paddle — our Merchant of Record, which sells the membership, manages subscriptions, takes payments, handles tax and issues invoices. Paddle collects your payment details directly under its own privacy policy.
• Service providers — the companies that host the website and database, provide sign-in (including Google if you choose it) and the AI tools used to write questions. They only process data on our instructions.
• Professional advisers — such as accountants or lawyers, where needed.
• Authorities — where the law requires it.

International transfers

Some of our providers store or process data outside the UK, for example in the EU or the US. Where this happens we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to standard contractual clauses to keep your data protected.

How long we keep it

We keep your account data while your account is open. If you close it, we delete or anonymise your personal data within 90 days, except records we must keep longer for tax or legal reasons (normally up to 6 years). Server logs are kept for a short period, usually no more than 30 days.

Keeping it safe

We use appropriate technical and organisational measures to protect your data, including encrypted connections, encrypted storage, hashed passwords and strict access controls.

Cookies and local storage

We only use essential storage in your browser to keep you signed in and to make checkout work. We don't use analytics or advertising cookies. You can clear this storage in your browser settings, but you'll be signed out.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email Stephen Bown at stevieb0147@gmail.com. We'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this notice. The date at the top shows when it last changed.