Privacy policy

Who we are

Lock It In is a live quiz service at lockitin.party, run by an individual rather than a company. For data protection purposes, Lock It In is the controller of the information described here.

If you host games

Hosts need an account. We keep:

• Your email address, and your name if you sign in with Google. We never see your Google password.
• The quizzes you write, including any images and slides you upload.
• A history of the games you have run: settings, results, and each player's nickname, team, answers and scores.

Uploaded images and slides are stored at long, unguessable web addresses so that players' devices can load them during a game. Anyone who has such an address can view that file, so don't upload anything confidential.

If you play

Players don't need an account. When you join a game we handle:

• The nickname you type and the team you join.
• Your answers, including drawings, and the reactions you send.

The other people in the room and the host can see these, and they may be shown on the big screen. Pick a nickname you are happy for the room to see.

After a game ends, your nickname, team, answers and scores are saved to the host's game history. Drawings are not saved.

Cookies and browser storage

We only use storage that the service needs to work:

• A sign-in cookie that keeps hosts logged in.
• A cookie that remembers which sign-in method a host used last.
• On players' devices: your nickname, a token that lets you rejoin a game after a refresh, and your sound setting.
• In the PowerPoint add-in: the link to the room it is paired with.

We don't use advertising or cross-site tracking cookies.

Analytics

We use Vercel Web Analytics to count page views. It doesn't use cookies and gives us totals rather than profiles of individual visitors.

Why we use this information

• To run the service you asked for: signing hosts in, saving quizzes, running games and showing results.
• To keep the service secure and working, and to understand roughly how much it is used.

We don't sell personal information and we don't use it for advertising.

Who helps us run the service

These providers process information on our behalf, and may do so outside the UK:

• Supabase: accounts, quizzes, uploads and game history.
• Cloudflare: the live game rooms.
• Vercel: website hosting and analytics.
• Google: only if you choose to sign in with Google.
• An email delivery provider: sending sign-in links to hosts.

How long we keep it

• Live game rooms are wiped 6 hours after the game ends, or after 24 hours without activity if the game is never finished.
• Quizzes, uploads and game history are kept until the host's account is deleted.
• Host accounts are kept until the host asks us to delete them.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct or delete it, or object to how we use it. Hosts can ask us to delete their account, which removes their quizzes, uploads and game history. Email us and we will respond within a month.

If you played in someone's game, the host can also see your answers in their game history, so it is often quickest to ask them first.

If you are in the UK and unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Hosting is for adults. Players of any age can join a game, and we only ask them for a nickname; hosts running games for children should make sure real names aren't used.

Changes

If we change this policy we will update the date at the top of this page. For significant changes we will email hosts.

Contact

Questions or requests: privacy@lockitin.party