Privacy Policy
Last updated: October 2026
What we collect
We collect your email address when you sign in via magic link. When you play trivia games, we store your display name, game scores, answer history, streak data, and leaderboard rankings associated with your account. Guest players who join via QR code without signing in have session data stored temporarily.
How we use your data
Your data is used exclusively to operate the AI Trivia Arena service — to run trivia games, maintain leaderboards, track your stats and streaks, and manage your subscription. We do not sell your data to third parties. We do not use your content for advertising.
AI-generated questions
Trivia questions are generated by AI (Claude by Anthropic) and stored in our database. Your answers and gameplay data are not sent to any AI provider. AI is used only for question generation, not for processing user data.
Authentication
We use passwordless magic links via Resend. Your email is used only for authentication and transactional communication (sign-in links, billing receipts). We do not send marketing email without your explicit consent.
Payments
All payments are processed by Stripe. We never store your full card number or payment credentials. Stripe's privacy policy governs how they handle your payment data.
Venue play
When you play at a venue (e.g., via a QR code at a bar or restaurant), your scores appear on that venue's leaderboard. Venue operators can see aggregated stats (total players, top scores) but cannot access your email or personal information.
Data retention
We retain your account data for as long as your account is active. Leaderboard scores are retained indefinitely to maintain historical rankings. You may request deletion of your account and all associated data by emailing CEO@epicai.ai. We will process deletion requests within 14 business days.
Cookies
We use one httpOnly session cookie for sign-in. It is strictly necessary for the service to work and cannot be turned off. Everything else waits for your choice in the cookie banner. If you allow analytics, Google Analytics and Vercel Speed Insights help us understand how the site is used and how fast it loads. If you allow marketing, Google may also use its cookies to measure ads. Both stay off until you say yes, and clearing the cookies for this site brings the banner back so you can choose again. We never sell your data.
Security
Session tokens are stored as hashed values. All traffic is served over HTTPS. We apply industry-standard security headers including CSP, HSTS, and X-Frame-Options. We do not store passwords.
Contact
For privacy questions or data deletion requests, email CEO@epicai.ai.