1. The short version
We collect information needed to operate otiya and do not sell your data. Advertising tags are paused across the site. Players do not need an account to join a game; a nickname and technical session information are still used to run it.
2. What we collect
If you create an account: your name, email address, date of birth, country and whether you chose to hear from us about quiz ideas, updates and offers. Your date of birth is kept privately with your account so we can enforce the adult account rule and support birthday features. We also record an approximate signup country from our hosting provider so we can understand where otiya is being used. When anyone opens a page on our website, we count the visit without cookies: the page (with game codes and ids removed), the name of the website that sent you there, and the approximate country, region and city our hosting provider gives us. To count each person once a day, our server makes a one-way code from your network address and browser that changes every day and cannot be turned back; your IP address is never stored, and the code is deleted after two days. On otiya Kids pages we count only the visit and the country. If you build quizzes: the questions, answers and any photos you add. If you contact us about school or education access: the professional contact details, role, organisation, setting, approximate learner count and message you choose to submit. Please do not send pupil names, diagnoses or medical information through that form. If your school asks for a sponsored place, we also keep whether it is a public school and its place on the waiting list, and share the school's name and town with a possible sponsor before we put you in touch. If your organisation pledges to sponsor schools: the contact details, organisation, country and preferences you give us (how many schools, where and which), used only to arrange sponsored places. If you join a live game: the nickname and avatar you choose plus a temporary guest/session identifier needed to keep your seat and reconnect you. If you choose Play your way settings during a live game, those support preferences are kept in your own browser and are not added to your player record or shown to the host. A reduced-answer-choice request may be processed for the current question so the server can return a safe subset of options, but the Play Profile itself is not stored in the room. Coarse live-play location is counted only in aggregate and is not stored on your player record.
3. Where it is stored
Accounts and quizzes are stored using Google Firebase, the same infrastructure trusted by millions of apps. Passwords are handled entirely by Firebase Authentication, so otiya never sees or stores them.
4. What hosts can see
Hosts see the nicknames, avatars and scores of players in their game. They never see anyone's email address or personal details. In an Inclusive Live room, a player's private Play your way preferences are not shown to the host.
5. What we do not do
We do not sell or rent your information. We use no analytics cookies, and this release does not load advertising tags, including after an earlier consent choice.
Some school tools work entirely on your device. When you import questions from another quiz tool or a Word or text file, the file is read in your browser and never uploaded. A parent update is written in your browser from your saved class reports and sent by you through your own WhatsApp or email; otiya does not send or keep it. Exam practice answers stay on the device used for the practice.
6. Third parties
otiya uses Google Firebase for accounts and data, Google Fonts for typefaces, and Brevo to send account emails. If you choose to receive quiz ideas, updates and offers, Brevo also records that choice and sends those messages. Google Ads tagging is currently paused across otiya, including adult, Kids and pupil-play routes. Excel imports load the SheetJS spreadsheet reader from its official content delivery service. The import file is processed in a browser worker, not uploaded by the importer. CSV and JSON imports do not need that external reader. otiya AI is powered by Google Gemini. When you ask it for questions, the subject you type is sent to Google. If you attach a document, that file is also sent to Google Gemini and is used to generate the questions you asked for. We do not keep a copy of the file after the questions are written, and it is not added to your quizzes unless you choose to add the questions. Your existing quizzes are not sent to Gemini unless you explicitly choose Make this quiz more inclusive. If you use that tool, the questions and answer keys in the review pass are sent to Gemini so it can prepare alternate wording and visual-support suggestions. otiya does not change the quiz from that review until you approve the suggestions. Safe AI retries: generated questions and review suggestions are temporarily held in a server-only request record, linked to your account, so a retry can recover the same response. Access to this retry response expires after one hour; expired records are eligible for background deletion. The record does not separately store your uploaded file or original request text. Generated suggestions may contain information from your inputs. Usage counts and security metadata are separate from the saved quiz. If you choose a language other than English, the page is translated by Google Translate. Google receives the page text and may set cookies. Nothing is sent to Google unless you choose a language.
Request safeguards: selected online actions use a private, hashed account or guest identifier to limit repeated requests. These security counters do not contain quiz text, names, email addresses, game codes, diagnoses or Play Profile choices. Counter records become eligible for background expiry after 24 hours without an accepted request; deletion depends on the configured Firebase expiry policy. Protected endpoints also record a random request reference, endpoint, status and duration for troubleshooting. These new request logs do not include your request contents. Where enabled, Firebase App Check uses Google reCAPTCHA Enterprise for app verification, separately from advertising.
7. Your choices
You can play entirely without an account, delete your quizzes at any time in the app, download a copy of your account data (your profile, personal quizzes and raffles) with Download my data on your account page, and request full account deletion from your account page or by emailing us. Marketing messages are optional. You can also opt out of otiya lifecycle emails using the unsubscribe option in those messages. Essential Firebase verification and password-reset emails may still be sent when you request or need them.
8. How long we keep things
We keep data only as long as we need it, and delete it automatically when its time is up. A clean-up runs every hour.
- Live game rooms (nicknames, avatars, answers, scores and pictures): 90 days after the room was last used.
- Homework and its results: 12 months after the closing date, or sooner if the teacher deletes it.
- Saved class reports (class totals only): 12 months, or sooner if the host deletes them.
- otiya AI retry records: 1 hour. Files and photos sent to otiya AI are not kept.
- Security request counters: 24 hours. Daily visit codes: 2 days.
- Play online runs and boards: 45 days. Guest profiles not used for 90 days are removed. League rows are removed after 365 days without play, and unused leagues close after 365 days.
- Accounts and saved quizzes: while you use otiya. Ask for deletion from your account or by email, and we delete within 30 days.
otiya Kids keeps only anonymous totals. The full schedule for schools is at otiya.xyz/schools/retention.
9. Play online
Play online is for adults, 18 and over. Other players only ever see your username. Please don't use your real name as a username. Guests never need to give us a real name or an email address.
What we keep: your username; your scores, and the answers and answer times in each round, so every round is scored fairly; the country our hosting provider works out from your network, for country leaderboards (we never keep your address or IP address); your friends, friend requests, blocks and any reports you send; the topic ideas you suggest or give a thumbs up to; and the leagues you start or join. In a league, everyone in it (and anyone who opens a public league) sees each member's username and Daily challenge scores. The person who starts a league chooses whether it is public or private and can remove a member. Rounds answered faster than anyone can read are kept off public leaderboards and checked by our team.
Guests: a guest's username, scores and friends are tied to the guest identity on that device. To stop one network creating lots of guest players, our server makes a one-way code from the network address that changes every day and counts new guest players against it. The address itself is never stored, and the counter becomes eligible for deletion after a day.
How long we keep it: rounds, leaderboard entries and challenge links are set to be removed 45 days after they are made. A guest's profile and username are set to be removed after 90 days without play. A league member's row is removed after 365 days without play, and a league nobody uses for 365 days closes. Deletion after those dates depends on the configured Firebase expiry policy. A Play online profile linked to an account stays while the account exists.
When we delete your account we also remove your Play online data: your profile and username, friends, blocks, requests you sent, rounds, leaderboard entries, league memberships and topic ideas still waiting for review. Topic ideas we have already approved stay on the list without your username, and leagues you started stay for their other members without your username. Reports you sent stay with our moderators.
10. otiya Kids
otiya Kids keeps the child's play data on the adult's device. It is built for children aged 3 to 12 playing on one device, with the adult who owns that device present.
When you add a child you can use a suggested nickname or type a name, choose an avatar and tap an age band. Those details never leave the device. Names, avatars, age bands, answers, scores, streaks and personal bests stay in that browser's local storage and are never written to our database. Clearing your browser data removes them.
To understand whether the Kids product is useful, otiya sends a small anonymous usage count when a Kids game starts or completes. It can include the chosen question pack, whether the game is solo or group, the number of play places and the number of rounds. It does not include a child's name, age band, avatar, answers, score or any child identifier.
otiya Kids needs no game code and no account for any child. Nobody outside the room can see or join a Kids game. We do not hold personal information about a child who plays otiya Kids.
11. Children generally
otiya is suitable for all ages to play, and playing requires no account.
Accounts are for adults. You must be 18 or over to create one, or older where your country's law requires it. We ask for your date of birth at sign-up and keep the date privately with the account so we can apply that rule and support birthday features.
Kids mode is built for children aged 3 to 12 playing on an adult's device with that adult present. The early learning games for ages 3 to 5 store nothing except their settings, stars and stickers on that device. Child names, avatars, age bands, answers and scores remain on that device. Only anonymous product-usage totals such as a game start/completion, pack, solo/group mode, play-place count and rounds are sent to otiya.
We do not knowingly collect personal information from children. If you believe a child has created an account or that we hold information about a child, email us and we will delete it.
12. Payments
No payment details are collected anywhere in otiya today. If billing launches, it will run through an established payment provider and card details will never be stored on our servers.
13. Storage and cookies
This release does not load advertising tags or set new advertising cookies. An earlier consent preference may remain on your device but cannot enable the paused tag. Previously stored cookies can be removed using your browser settings. We use no analytics cookies. We also use your browser's local storage for things the app needs to work: keeping you signed in, remembering your sound choices, holding a quiz draft so you do not lose it, saving raffle lists, remembering private Play your way preferences for live games, and letting you rejoin a game you were disconnected from. If you use otiya Kids, a service worker may also cache the Kids app shell and prepared question/activity files on that device so the core Kids experience can reopen offline after a successful first visit. That cache contains product files, not a child's personal play data. Firebase Authentication stores a sign-in token on your device while you are logged in. For security, a signed-in account is logged out on that device after 14 days without activity. When a signed-in person actively browses or uses otiya, we update their last active date so they are not mistaken for an inactive user. Hidden background tabs do not count as activity.
14. Your rights by region
If you are in the UK or the European Economic Area, you have the right to access, correct, export or erase your personal data, and to object to processing, under the UK GDPR and the EU GDPR. If you are in Nigeria, the Nigeria Data Protection Act gives you similar rights. If you are in California, you may request access to or deletion of your information and we will never sell it. To exercise any of these rights, email hello@otiya.xyz or use the deletion request in your account, and we will respond within 30 days.
15. Where data is held
Account and quiz data is stored on Google Firebase servers in a European multi-region. Where data crosses borders, Google's standard contractual clauses apply.
16. Google Classroom and Microsoft Teams
Teachers can choose to post otiya homework as an assignment in Google Classroom or Microsoft Teams, and to send pupils' scores back as draft grades. This only happens when a teacher connects their own Google or Microsoft account and allows it. otiya then uses a short-lived access token in the teacher's browser to: list the teacher's own courses or classes; create the assignment with the homework link and due date; read the class list and the assignment's submissions so the teacher can match each otiya nickname to a pupil; and save the score the teacher confirms as a draft grade. The token, the class list and the grades are used only in the teacher's browser for that task. They are not sent to or stored on otiya's servers, not used for advertising, not sold, not used to train AI models, and not shared with anyone else. The browser remembers only which assignment belongs to which homework code (course and assignment identifiers, no pupil information). Teachers can remove otiya's access at any time in their Google Account (Security, Third-party apps) or in their Microsoft account (My Apps). otiya's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
17. Contact
Privacy questions: hello@otiya.xyz.
