Privacy Policy

This is an English translation of our Italian privacy policy. If the two versions differ, the Italian version prevails.

Last updated: October 27, 2026

This policy explains what personal data we collect on OneDayQuiz, why we collect it, who we share it with and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

ONiDEA adv Srl unipersonale
Via Adeodato Ressi 16, 20125 Milan, Italy — VAT no. IT10309720968
Email: info@onedayquiz.com

We have not appointed a Data Protection Officer (DPO), as we are not legally required to.

2. What data we process, why, and on what legal basis

2.1 Browsing

When you visit the site, our systems automatically collect some technical data: IP address, browser and device type, operating system, pages visited, date and time, and referring page. We use this data to run the site, keep it secure and diagnose problems. Legal basis: legitimate interest in providing and protecting the service (Art. 6(1)(f) GDPR).

2.2 Account

To sign up, we collect a username, email address, password (stored in encrypted form) and country. Your country is suggested automatically based on your browser language or your IP address, which we only use at that moment and do not keep for this purpose: you can change it before signing up and at any time from your Account page. For accounts created before October 26, 2026, the country was set to Italy, because until then the site was only available in Italian; you can change it from your Account page in the same way.

Your game data is linked to your account: scores, completed quizzes, progress in interactive stories, available hints and preferences. The site’s leaderboards, which anyone can see, show your username, your score and your country as a small flag. Legal basis: performance of the service agreement you accept when you sign up (Art. 6(1)(b) GDPR).

2.3 Site statistics

If you consent through the cookie banner, we use Google Analytics 4 to understand how the site is used: pages viewed, visit length, traffic sources and device type. Legal basis: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

2.4 Advertising

Our pages show ads provided by Google AdSense. If you consent through the cookie banner, Google may use cookies and identifiers to select, personalize and measure ads. If you decline, ads may still appear, but they are not personalized: the banner tells Google you have refused (Google Consent Mode), and Google only uses data such as the page content and your approximate location. Legal basis: consent (Art. 6(1)(a) GDPR).

2.5 Spam protection

To prevent automated submissions and fraudulent sign-ups, we use CleanTalk, which analyzes technical and behavioral data from your session (IP address, browser data, interactions with forms). Legal basis: legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).

2.6 Support

If you write to us, we process your email address and the content of your message to reply and keep track of your request. Legal basis: responding to your request and, for complaints, performance of the contract (Art. 6(1)(b) GDPR).

2.7 Communications

Service messages (confirmations, passwords, receipts, notices of significant changes) are necessary to manage your account. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Marketing messages (news, new content, offers) are only sent to people who have given specific, separate consent, which can be withdrawn at any time using the link in each message. Legal basis: consent (Art. 6(1)(a) GDPR).

2.8 “How well do you know me” quiz

The quiz you create is contained in the link you share and is not saved on our systems: the name you type, the questions and the answers stay in the link and are not sent to us. Anyone who receives the link can read its content, so don’t use it for confidential information.

We only count, anonymously and in aggregate, which answers are chosen for the ready-made questions and how many are guessed correctly, by day and by type of relationship (friends, couple, family). We do not link these counts to an account, IP address, cookie or any other identifier: they are totals, not personal data. The questions you write yourself are never sent, not even to the counters.

The aggregate counts may be published as statistics.

3. Providing your data

Browsing the site does not require you to provide identifying data. Account data is required to sign up: without it we cannot provide the service. Consent to statistics, advertising and marketing messages is optional, and refusing it does not prevent you from using the site.

4. Who we share data with

Data is processed by the controller’s authorized staff and may be shared with the following parties, acting as processors or as independent controllers:

• Cloudways: site hosting, infrastructure and backup storage;
• Google Ireland Limited: site statistics (Analytics 4), advertising (AdSense), fonts (Google Fonts);
• CleanTalk: spam filtering;
• ShortPixel: image optimization;
• The email service used to send our messages;
• Consultants, accountants and professionals for accounting and tax obligations;
• Public authorities, when required by law or necessary in legal proceedings.

Data is not made public or sold to third parties for their own marketing purposes.

5. Transfers outside the European Union

Some providers (in particular Google) may also process data outside the European Economic Area, mainly in the United States. In these cases the transfer is based on an adequacy decision of the European Commission or on standard contractual clauses and the other safeguards provided by Articles 44 et seq. of the GDPR.

6. How long we keep data

• Account and game data: as long as the account is active. After a deletion request it is erased, except for what must be kept by law.
• Accounting and tax documents: ten years, as required by Italian civil and tax law.
• Browsing data and technical logs: as long as needed for security and diagnostics, normally no more than twelve months.
• Statistics and advertising: according to the periods stated in the Cookie Policy and in the providers’ policies.
• Support correspondence: as long as needed to handle the request and, for complaints, for the applicable limitation period.
• Consent to marketing messages: until withdrawn.

7. Cookies

The site uses technical cookies and, with your consent, statistics and marketing cookies. The full list, their duration and how to change your choices are in the Cookie Policy. You can change your mind at any time using the “Cookie preferences” link on every page.

8. Children

The site is suitable for a wide audience and includes content designed for children and teenagers too. An account can be created by anyone aged fourteen or over, the age set by Article 2-quinquies of the Italian Personal Data Protection Code for consent to information society services; below that age, sign-up is only possible through a person with parental responsibility.

If a parent or guardian believes a child has given us personal data without the necessary consent, they can write to info@onedayquiz.com: we will check and delete the data.

9. Your rights

You can exercise the rights set out in Articles 15 to 22 of the GDPR at any time: access your data, ask for it to be corrected or erased, restrict processing, object to processing based on legitimate interest, receive your data in a structured format (portability), and withdraw any consent you have given without affecting the lawfulness of processing before the withdrawal.

Send your requests to info@onedayquiz.com. We reply within one month, which may be extended by two months for complex requests.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, Italy — garanteprivacy.it), or with the authority of the EU country where you live or work.

10. Automated decision-making

We do not carry out automated decision-making that produces legal effects or similarly significantly affects you. Ad personalization, if you consent to it, is handled by the advertising networks according to their own policies.

11. Changes to this policy

This policy may be updated when the services we use or the applicable law change. The date at the top of the page shows the latest revision; significant changes are announced on the site and, where necessary, communicated to registered users.