Privacy Policy

Information We Collect

Guest session. When you first visit, the Service creates a random, signed session identifier and stores it in your browser's local storage. It isn't linked to your name, email, or any other real-world identity — it just lets the Service recognize your browser across a game.

Display name and avatar. You choose a display name, and optionally an avatar, when you join or host a game. They're shown to other players in your room and aren't verified against any identity.

Room and game data. While a room is open, we store the room code, game settings, and each player's display name, avatar, and score so the game can run. If you're signed in, your entry in the room also records your username, so other players can open your profile from the lobby. This data is deleted when the room closes, and idle rooms are cleaned up automatically.

Chat messages. Rooms with chat enabled hold messages temporarily, filtered for profanity, so players in that room can see them. Chat is never written to our permanent database and is deleted when the room closes.

Feedback you submit. If you report a bug, report a question, or suggest a trivia question, the text you submit — along with the name you choose to include — is sent to our team through a Discord webhook so we can review it.

Crash and error data. We use Sentry to catch bugs and crashes. It receives error messages, stack traces, and basic technical details such as the page address and browser type. We configure it not to send your IP address, request contents, login cookies, or session identifiers.

IP address. Cloudflare, our hosting provider, and our own rate limiter read your IP address to prevent abuse, such as spamming rooms or chat. Apart from the login session records described below, it isn't stored in our database or sent to Discord.

If You Create an Account

Accounts are optional. If you create one, we also collect and store:

• ›Your email address — used to sign you in, confirm your address, and send password-reset emails. It is never shown to other players.
• ›Your password — stored only as a salted, one-way hash, so we can't read it. If you only sign in with Discord, we don't store a password at all.
• ›Your username — a unique, public handle shown on your profile, in rooms you join, on trivia you publish, and in friend requests.
• ›Your profile picture, if you upload one — stored with our hosting provider and viewable by anyone who has its link.
• ›Discord account details, if you sign up with or connect Discord — your Discord ID, username, email address, and profile picture. The access tokens Discord issues us are stored encrypted, and your Discord handle is used as a starting username.
• ›Login sessions — each sign-in is recorded with the IP address and browser (user agent) it came from, so you can stay signed in and we can keep your account secure.
• ›Friends and notifications — your friend list, pending friend requests, and notifications about requests and game invites.
• ›Trivia you write — the title, description, questions, and answers of each set, whether or not you publish it.
• ›Reports you file — if you report a published trivia, the report is stored with your account so we can review it and prevent duplicates.

What Other Players Can See

Your public profile. If you have an account, your profile page at forgedintrivia.com/u/your-username shows your username, profile picture, when you joined, and any trivia you've published. Anyone can view it, including people without an account and search engines.

Your activity. Friends you've accepted can see when you're online and which game mode you're playing, and can join you directly if your room is public and still in its lobby.

Trivia you publish. Published trivia is public, credited to your username, and can be viewed, shared, and hosted by anyone. Its share page is generated when the site is rebuilt, so after you unpublish or delete a set, that page may keep showing its old title and description until the next update, and copies may linger in search engines and in links others have shared.

What stays private. Your email address, password, login sessions, friend list, and unpublished trivia are never shown to other players.

Information We Don't Collect

We do not collect or require:

• ›Payment or billing information
• ›Your real name, phone number, or postal address
• ›Your Discord servers, messages, or friends — signing in with Discord shares only your basic profile and email address
• ›Advertising or cross-site tracking cookies
• ›Behavioral profiles, and we never sell your information or share it with advertisers

Cookies and Local Storage

If you sign in, the Service sets cookies that keep you signed in, plus a short-lived one while a Discord sign-in is in progress. They're strictly necessary to run your account and aren't used for advertising or tracking. Cloudflare may also set its own security cookies to protect the Service from bots and abuse. Playing as a guest sets no cookies of ours.

The Service also uses your browser's local storage to remember your guest session identifier, display name, avatar, and any in-progress room or trivia setup you haven't finished. Clearing your browser's site data removes all of it and signs you out.

How Long We Keep Information

Guest data. Your session identifier and display name stay in your browser's local storage until you clear it — the Service does not expire or delete it on its own. Room, player, and chat data live only as long as the room is open, and inactive rooms are cleaned up automatically.

Account data. Your account and everything attached to it — profile, profile picture, friends, and trivia — is kept until you ask us to delete it. Login session records are deleted when you log out, and sessions expire on their own after a period of inactivity. Notifications are deleted after 30 days. Reports you file about other players' trivia are kept after your account is deleted, with the link to your account removed, so moderation decisions survive.

Feedback and error reports. Bug reports and question suggestions stay in our Discord server, and crash reports are kept by Sentry under its own retention schedule.

Who We Share Information With

We don't sell your information or share it with advertisers. We rely on a small number of service providers to run the Service:

• ›Cloudflare — hosts the Service, its database, and uploaded profile pictures, and processes network requests, including your IP address, to deliver and protect the Service.
• ›Resend — delivers account emails, such as address confirmation and password resets, to your email address.
• ›Discord — handles Discord sign-in if you choose it, and receives the content of bug reports and question suggestions you submit, via a webhook to our server.
• ›Sentry — receives error and crash reports so we can fix bugs.

Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect information from anyone under 13 or let them create an account. If you believe a child has used the Service and provided information to us, contact us on Discord and we'll remove it, including any account.

Your Choices

You control your footprint directly:

• ›Play as a guest — hosting and joining games never requires an account.
• ›Change your username, profile picture, and password, or connect and disconnect Discord, from your profile page.
• ›Unpublish or delete any trivia you wrote, at any time.
• ›Delete your account by contacting us on Discord. We'll confirm the account is yours, then delete it along with your profile, profile picture, friends, notifications, and trivia. You can ask us for a copy of your account data the same way.
• ›Clear your browser's local storage to remove your guest session identifier and display name.
• ›Avoid including personal information in your username, display name, chat messages, or published trivia — anything you type there is visible to other players.
• ›Close or leave a room when you're done — its data is deleted shortly after.

Changes to This Policy

We may update this Privacy Policy as the Service changes. We'll update the "Last updated" date above whenever we do.