Privacy Policy
Version 1.2 · Published 22 August 2026 · Effective from the public beta release
Trivia Trails was called TriviaBites until August 2026. This is the same policy, the same app, and the same company. Only the name has changed. Nothing about what we collect, who we share it with, or your rights has changed with the rename.
1. Who we are
Trivia Trails is operated by Kestrels Cast Interactive LLC ("we", "us"), a company registered in Sharjah, United Arab Emirates.
We are the data controller for the personal data described in this policy, and we are subject to the data protection law of the United Arab Emirates.
Questions, requests, or complaints: privacy@kestrelscast.com
2. What we collect
Account information. You sign in with Google or Apple. There is no password to create, and we never see or store one. From the provider we receive your email address and basic profile information. You then choose a username and a display name, and pick an avatar. That is the whole of the account information we hold.
Gameplay information. We store the data needed to run the game and keep your progress: scores, answers, game modes played, levels, experience, in game currency and energy balances, streaks, characters and cosmetics you own, friends and multiplayer activity, leaderboard entries, and achievements.
Purchase information. If you buy something, our payments provider records the purchase and tells us what you are entitled to. We do not receive or store your card number or any other payment instrument details. Those are handled by Apple or Google.
Device and technical information. Crash reports, performance diagnostics, app version, device model, operating system version, and a device advertising identifier used for advertising as described in section 5.
Notifications. If you allow notifications, we store a push token so we can send them.
We do not collect precise location, contacts, photos, microphone, or camera data.
3. Why we use it, and our legal basis
| What we do | Legal basis (UK/EU GDPR) |
|---|---|
| Create and run your account, save progress, deliver purchases | Performance of a contract |
| Multiplayer, friends, leaderboards | Performance of a contract |
| Send push notifications | Consent, which you can withdraw at any time in your device settings |
| Show ads, including storing an identifier on your device | Consent, gathered through the consent form described in section 5 |
| Diagnose crashes, monitor performance, keep the game secure, prevent fraud and cheating | Legitimate interests |
| Understand how the game is used so we can improve it | Legitimate interests, using pseudonymous data as described below |
Where we rely on legitimate interests, we have considered the impact on you and limited what we collect accordingly. You can object to that processing. See section 8.
4. Who we share it with
We do not sell your personal data. We do not share it for cross context behavioural advertising. We use the following processors:
| Processor | What it does | Where data is processed |
|---|---|---|
| Supabase | Account, gameplay, purchases, and social data. Our primary database. | European Union |
| PostHog | Product analytics, so we can see how the game is used | European Union |
| Sentry | Crash reports and performance diagnostics | European Union (Germany) |
| Google Firebase Cloud Messaging | Delivers push notifications only | United States |
| Google AdMob | Serves rewarded video ads | United States |
| RevenueCat | Validates purchases and records entitlements | United States |
| Google Sign In / Apple Sign In | Authentication, if you choose to use them | United States |
Analytics are pseudonymous. Our product analytics do not receive your email address, your username, or your IP address. They record actions taken by an account identifier that cannot be traced back to you without our database.
Crash reports are pseudonymous. We strip IP address, email address, and username from crash reports before they are sent. Session recording is disabled.
We also disclose data where we are legally required to, or to establish, exercise, or defend legal claims.
5. Advertising
Trivia Trails shows rewarded video ads only. You choose whether to watch one in exchange for a reward such as extra time. We do not show banner ads or interstitial ads, and we never show an ad you did not ask for.
We serve non personalised ads. Ads are not selected based on a profile of your interests or your behaviour in other apps.
Even non personalised ads require storing and reading an identifier on your device, which Google uses for fraud prevention, to limit how often you see the same ad, and for aggregate reporting. Google's own use of that identifier is governed by Google's privacy policy. If you are in the European Economic Area, the United Kingdom, or Switzerland, we ask for your consent to that before showing any ad, using Google's consent form.
You can change your mind at any time from the privacy option in the app's settings. If you decline, we will not show you ads. Rewards that require watching an ad will not be available, and the app will tell you why and offer to reopen the consent form.
6. How long we keep it
We keep your account data for as long as your account exists.
When you delete your account, we remove your personal data and replace it with an anonymous placeholder so that game history such as leaderboards and past matches remains coherent for other players. Your email address, username, display name, and avatar are erased.
Crash reports and analytics are retained for a limited period according to each processor's retention settings and are pseudonymous, so they cannot be linked back to you afterwards.
7. International transfers
Some of the providers listed in section 4 are outside the European Economic Area and the United Kingdom. Where we send personal data to them, we rely on Standard Contractual Clauses approved by the European Commission, which form part of our agreements with those providers.
8. Your rights
Wherever you live, you can:
- delete your account and all of its personal data at any time, from Settings in the app
- ask us what personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to restrict or stop processing your data
- ask for a copy of your data in a portable, machine readable format
- withdraw consent at any time where we rely on it, including ads and push notifications
To exercise any of these, contact us at the address in section 1. We will respond within one month.
If your country has a data protection authority, you can also complain to it. In the European Economic Area and the United Kingdom, these rights come from the GDPR.
9. Children and young people
Trivia Trails is not directed at children. It is intended for users aged 13 and over, and we do not knowingly collect personal data from anyone younger.
In the European Economic Area and the United Kingdom, if you are below the age of digital consent in your country, you need a parent or guardian's permission for the features that rely on consent, such as ads and push notifications. If a parent or guardian wants a young person's data removed, contact us at the address in section 1 and we will do it.
10. Changes to this policy
Every version of this policy carries a version number and an effective date at the top. If we make a material change we will publish a new version, and where the change is significant we will also tell you in the app.