Privacy Policy

1. The short version

• BrainPickle is free. There is no paid tier.
• We use first-party usage measurement to improve BrainPickle. Signed-in activity can be linked to your account. You can turn optional measurement off below or in app settings.
• We never sell your personal information.
• You can delete your account and its data yourself, at any time.

This policy is from Click Clack Labs LLC ("we", "us") and covers BrainPickle at brainpickle.app, the BrainPickle apps, and our integrations ("the Service").

2. What we collect

Browsing and guest play

You can browse without signing in, and guest play is available on the website. Guest progress may be saved on your device and under a randomly assigned account id. That id does not require your name or email, but it still identifies a player's activity. Signing in lets us associate progress with your account and sync it across devices. The mobile apps and features such as creating quizzes or adding friends require sign-in. Clearing browser storage can remove guest progress that has not been linked to an account.

Account information

When you sign in with Google, Apple, or email (via a one-time code), we store your email address and the display name you choose. Google and Apple may also pass us your name and profile photo.

Play data

Answers, scores, time spent playing, finished and unfinished rounds, streaks, milestones, topics you follow, friend connections, challenge and group room history, league standings, and XP. We use this information to save and resume play, calculate progress, recommend another quiz, and show comparisons and leaderboards. Saved progress and recommendations may also be cached on your device.

Quizzes you create

If you use the quiz generator or manual builder, we store the quiz title, questions, and answers. Your topic request is sent to an AI provider (Google Gemini with Google Search grounding, with Anthropic Claude as a fallback) to write and fact-check the questions.

Usage measurement

We record page views, quiz starts and completions, answers and feature interactions, searches, referring sites and campaign tags, country, language, app version, and device class on our own servers. Events carry a random browser or app-install id and a session id. When a session is signed in, including a guest session, we may link those events to its account id to understand progress and how features are used. These records are pseudonymous, not anonymous.

The measurement id rotates after about 13 months. Our usage-event tables do not store IP addresses or raw browser user-agent strings, and our measurement does not follow you across other websites or send events to a third-party analytics service. We honor Global Privacy Control and Do Not Track by turning off optional web measurement. An opt-out is specific to your browser or app installation; essential account, result-saving, security, and service-delivery records are still needed to run the features you use.

Optional usage measurement on this browser. Turn that off.

Error reports

We use Sentry for error and performance monitoring. Diagnostic information may include stack traces, browser and device details, request context, and an account id when available. Our hosting and infrastructure providers may also process technical connection and security logs. These diagnostics help us investigate failures and slow loading.

Email and push

You can choose daily quizzes, streak reminders, a weekly digest, and product updates in account settings. These recurring email categories are off by default for new accounts; existing preferences stay as you set them. Challenge and requested-topic notifications have their own settings. Emails are sent through Amazon SES. Engagement emails carry a 1×1 tracking pixel and rewritten links, so we can see whether it was opened or clicked; unsubscribing stops that too. If you turn on push notifications in your browser or the app, we store the push subscription or device token needed to deliver them. Engagement emails include an unsubscribe link, and notification categories can be turned off in your account settings.

Friends, leagues, challenges, and group rooms

Friends can see your display name, avatar, weekly correct-answer totals, Daily results, and topic summaries shown in the friends experience. Other players in a league can see the name and score shown in its standings. Opponents and room participants can see the names, scores, and timing information displayed for their game. Friend codes, challenge links, room links, and published quizzes are shareable; people you share them with may pass them on. Removing a friend stops access through that friendship, but cannot recall a link, screenshot, or result someone has already shared.

Slack and Alexa

If the BrainPickle Slack app is installed in a workspace, we store the workspace id, channel settings, and bot token, plus Slack user ids, display names, answers, and scores for that workspace's leaderboard. Everything is deleted when the app is uninstalled. The Alexa skill keeps quiz state only for the length of the voice session and stores nothing about you on our servers.

IP addresses

Our application uses IP addresses in memory to rate-limit requests and block abuse. For some anonymous actions, such as email signup or following a topic, it stores a one-way hash to discourage repeat abuse. IP addresses are not displayed publicly or stored in our usage-event tables. Hosting and delivery providers may process them in operational logs and to serve requests.

On your device

Browser storage holds your quiz progress, streak, theme choice, analytics opt-out, the measurement id, install prompt state, and the referral source when you arrive through a shared link (e.g. "whatsapp"). None of this is sent to us except as described above.

3. How we use it

• Run the Service: quizzes, scores, streaks, leaderboards, challenges, rooms
• Show your name and scores where you choose to compete
• Generate quizzes from the topics you ask for
• Send the emails and notifications you have on
• Find and fix errors
• Understand which features are used, in aggregate
• Prevent abuse and enforce rate limits

4. Content and sources

Quizzes may be generated with AI or written by people. Source links let you check the information behind a question; questions can still be wrong. A question report includes the question, the issue you select, any explanation you submit, and an account id when available. Please do not include sensitive personal information in a quiz request or report.

5. Who processes your data

• Supabase — database, authentication, and file hosting
• Vercel — web hosting
• Google — sign-in, AdSense (web) and AdMob (apps) advertising, and the Gemini API
• Apple — sign-in
• Apple, Google Firebase — app push notifications (iOS and Android)
• Anthropic — fallback quiz generation
• Amazon Web Services (SES) — email delivery (Resend on standby)
• Sentry — error monitoring
• Slack — the Slack integration and internal operational activity alerts; alerts use short player labels rather than email addresses
• Amazon Alexa — if you use the voice integration

Each has its own privacy policy. We do not sell or rent your data to anyone.

6. Cookies and advertising

We use cookies for sign-in and service preferences, including difficulty and time zone, and a short-lived security check when installing the Slack app. We also use browser and app storage for saved play, cached quizzes, settings, and the optional measurement ids described above. Optional measurement can be turned off even though it does not use a tracking cookie. Older iOS versions may show non-personalised banner ads from Google AdMob, with consent where required. Ads are disabled in iOS 1.1.0 and the Android launch release. The website shows no ads today. If we add them, we will update this policy first, and in regions that require consent before advertising scripts load, we will ask for it before any load.

7. How long we keep it

Account data and play history are generally kept while your account exists. You can request deletion using the account controls below. We remove account data within 30 days, subject to information we must retain for legal or security reasons. Published quizzes and reports may remain with the account attribution removed. Shared game records may also remain after the account link is removed. Account deletion removes analytics account links; remaining pseudonymous event records follow their retention schedule.

Our scheduled retention periods are 400 days for usage events and 90 days for play-funnel events. Group rooms stop accepting play after 24 hours; expiry is not a promise that all related records are erased at that moment. Backup copies may remain until they rotate out. Statistics that no longer identify a person may be retained for longer.

8. Security

Connections are encrypted (HTTPS), access to data is restricted, and inputs are validated server-side. No system is perfectly secure, and we will notify you as the law requires if a breach affects your data.

9. Your rights

• See the data we hold about you
• Correct it
• Delete your account and data yourself at /delete-account or from your account page
• Export your play history
• Turn off usage measurement (section 2) and email (every message, or account settings)

Depending on where you live and which laws apply, you may also have rights to object to or restrict processing, withdraw consent, use an authorized agent, appeal a request decision, or complain to a privacy regulator. We do not discriminate against you for exercising applicable privacy rights. To make a request, use the controls above or contact us; we may need to verify that you own the account before releasing or deleting its information. You can ask for access, correction, or deletion regardless of where you live.

10. Children

The Service is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.

11. Do Not Sell or Share My Personal Information

We do not sell personal information or share it for cross-context behavioral advertising. Disclosure to the service providers described above is used to operate BrainPickle. The optional measurement control in section 2 is available to everyone, and we honor Global Privacy Control on the website. Contact us with questions about these choices.

12. Where your data lives

Our core service is hosted in the United States, and our providers may process information in other countries where they operate. Privacy protections can differ by country. Where applicable law requires a transfer safeguard, we use the relevant contractual or other lawful transfer mechanism. Contact us for information about the safeguards applicable to your data.

13. Changes

When this policy changes in a way that matters, we will say so on the Service or by email. The date at the top is always current.

14. Contact

[email protected]

Click Clack Labs LLC
418 Broadway, Ste R, Albany, NY 12207