Privacy Policy
This is the privacy policy for wa-trivia.com ("Weighted Averages", "we", "us"), a live trivia game system operated by [OPERATOR NAME / LLC].
What we collect
When you play, we collect only what's needed for the game to work:
- Display name and team name you type in.
- Game data: your answers, wagers, scores, and response times for each game you play.
- Team join codes captains create.
- IP address, used for rate-limiting and abuse prevention. IPs appear in server logs and are not stored in our game database.
- Functional cookies (see Cookies below).
We do not collect: email addresses, phone numbers, real names, payment information, precise location data, or any identifiers from third-party trackers. We don't run analytics or advertising scripts.
How long we keep it
- Game records (team names, scores, wagers, audit history) persist indefinitely so that returning teams keep their historical leaderboards. A team's history is keyed only to the team name you entered.
- Auth tokens (admin sessions, presenter tokens, captain team-join links) expire on a fixed TTL and are purged automatically.
- Server logs with IPs rotate on the hosting provider's standard schedule and are kept only as long as needed for security and debugging.
Cookies and local storage
We use two functional cookies:
wa-admin-token— keeps an admin signed in for up to 24 hours after login. HttpOnly, Secure in production.wa-presenter-token— keeps the presenter screen authenticated for up to 8 hours after a host issues a token. HttpOnly, Secure in production.
We also use your browser's localStorage to remember your team and display name across
page reloads (wa-session, wa-prefs). Clearing your browser storage logs you
out and removes prefilled names.
We do not use any tracking, advertising, or analytics cookies.
Third parties
The site is hosted on DigitalOcean and proxied through Cloudflare for CDN and DDoS protection. Both providers see your IP address as part of normal request handling. Their privacy policies apply to that processing.
We do not sell, rent, or share your data with anyone else.
Your rights
You can ask us to delete your team's records by emailing [CONTACT EMAIL] with the team name and the venue you played at. We'll remove the team's history (or anonymize it if removal would orphan other players' records) within 30 days.
If you're in the EU, UK, California, or another jurisdiction with specific data rights (GDPR, CCPA, etc.), the same email handles access, correction, and deletion requests under those laws.
Children
This service is not directed at children under 13 and we don't knowingly collect data from anyone under 13. If you believe a child has provided data, email [CONTACT EMAIL] and we'll remove it.
Changes
We'll update the "Last updated" date at the top when this policy changes. Material changes will be announced on the venue's screens and on the player landing page.
Contact
[OPERATOR NAME / LLC]
[MAILING ADDRESS]
[CONTACT EMAIL]