Privacy

Last updated 3 October 2026

History Trivia can be played without ever telling us who you are. Creating an account is optional and only unlocks more of the game; it never asks your age. You can create one with Google sign-in or with an email address and a password. This page explains what stays on your device, what an account adds, and how to see or delete it.

Who is responsible

This game is run by Mateus Araujo Santos, an individual based in Brazil. You can reach a human at contact@historytrivia.org.

Playing without an account

The event of the day needs no account — up to two a day, in any era. Your progress in it — experience points, which events you have uncovered, the difficulty you picked, and whether you have played today — is saved only in your browser's local storage. It never leaves your device and we cannot read it. Clearing your browser data erases it, and nothing of yours is lost anywhere else, because there is nowhere else.

If you create an account

An account unlocks a limited number of free questions in the eras that are otherwise paid, carries your progress to another device, and puts you on the leaderboard. There are two ways to create one, and we never ask for your birth date with either:

• Signing in with Google gives us your name, your email address, and your profile photo — nothing more. Google handles the password; we never see it.
• Email and password: you give us a display name, your email address and a password. We never store the password itself — only a one-way bcrypt hash of it, which cannot be turned back into the password. If you forget it, we send a reset link to that address through our email provider, Resend; that is the only email we send.

We do not verify email addresses today, so please use one you own: it is where a password reset link would go.

With an account, your XP, the events you have uncovered, your difficulty setting, your free questions in each locked era, and your round-by-round history are kept on our server, tied to your account. This is what lets your progress follow you to another device, and it is also what makes the leaderboard trustworthy: your score is checked on our server from your raw answers, not taken on trust from your browser. Signing in also sets a session cookie that keeps you logged in — this one is not a measurement choice, it is what makes an account work at all, so it is not part of the cookie banner below.

If your account has ever scored a point, you appear on the public leaderboard: other players see your name, your photo, and your total XP. Your email address is never shown there or anywhere else.

You can see your XP, your rank, and your recent rounds on your Profile page at any time, and you can delete your account — with everything tied to it — from Settings, in one step. See “Your rights” below.

If you subscribe

Payment is handled entirely by Paddle.com, our reseller and Merchant of Record, in a secure checkout window run by Paddle. We never see or store your card number; what we keep is Paddle's own reference for your subscription, which is what lets us know it is active and lets you open Paddle's billing portal to manage or cancel it. Paddle's own privacy policy covers what it does with your payment and billing details.

Cookies and measurement

We use Google Analytics to understand how the game is played: how many people start a round, which questions people give up on, whether the daily round brings anyone back. This is the only thing that leaves your device, and it is your choice.

• If you decline, no analytics cookie is set and the Google Analytics script is never downloaded. Nothing about your visit is sent anywhere.
• If you accept, Google Analytics sets cookies that let it recognise a returning browser, so that ten visits from you are not counted as ten people.
• Until you answer, measurement runs without cookies: we can see that a visit happened, but not that it was the same browser as yesterday.

Advertising features are switched off and cannot be switched on by accepting: no ad personalisation, no ad measurement, and no cross-device linking through Google accounts. We do not run ads, we do not sell data, and we do not build profiles of players.

Google processes this data on servers in the United States. Google acts as our processor under its data processing terms.

What we never collect

No readable password — with Google sign-in we never see one, and with email sign-in we keep only its one-way hash. No date of birth, no payment details, no precise location, not from anyone, account or not. The game asks you to click a spot on a world map; that click is a guess about history, and it says nothing about where you are.

Children

History Trivia is made for a general audience and is not directed at children under 13. Creating an account never asks for a birth date, or anything else about your age — Google sign-in only requests your name, email and photo, and email sign-in only a display name, email and password. We do not knowingly collect personal information from children. If you are a parent or guardian and have a question about this, please write to us.

Your rights

If you are in the European Union, the United Kingdom, or Brazil, the law gives you the right to see what data is held about you, to correct it, to have it deleted, and to withdraw consent.

If you never created an account, there is very little to exercise these rights against: the honest answer to “what do you have on me?” is “nothing that could be matched to you”. You can withdraw analytics consent at any time by clearing this site's data in your browser, which brings the choice back.

If you have an account, your Profile page shows what we hold — your XP, your rank, your era progress and your recent rounds — and Settings lets you delete the account and everything tied to it in one step, no email required. The only thing that pauses a deletion is an active subscription: cancel it first from the billing portal (linked from Settings), so the payment provider never keeps charging a card with no account behind it, then delete.

You also have the right to complain to a supervisory authority — your national data protection authority in the EU, the ICO in the United Kingdom, or the ANPD in Brazil.

Changes

If this policy changes in a way that affects you, the date at the top changes with it.