1. Information Used by the App
Game Center identity: If you sign in to Apple Game Center, the app uses the app-scoped and team-scoped player identifiers, display name, and Game Center profile information supplied by Apple to provide online identity, matchmaking, invitations, leaderboards, achievements, opponent presentation, and Trivington Social. The Social service verifies a signed Game Center identity proof before creating a service session. When both online opponents have Social enabled, each receives a service-signed, recipient-bound identity assertion that can only be used by that opponent for exact post-match Social lookup; it grants no account access.
Trivington Social: The service stores a Game Center-linked social profile, including your display name, chosen handle, friend code, and discoverability preference. It also stores friend requests, mutual friendships, blocks, player reports and report reasons, and the status and timestamps needed for those features. Exact handle and friend-code lookup is provided; there is no public feed or chat.
Shared competitive profile: If you enable profile sharing, the Social service stores your selected bundled duck avatar or a normalized copy of the Game Center image you explicitly select, plus aggregate profile metrics: title, level, total XP and XP progress, rating and recent rating history, wins, losses, draws, total matches, total questions answered, total correct answers, total answer time, average answer time, best streak, and answered/correct totals for every trivia category. These aggregates are visible only to you, unblocked mutual friends, and unblocked recent opponents whose access grant has not expired. The shared profile does not include individual match records, opponent identifiers, question identifiers, submitted answers, or daily performance buckets. You can disable sharing independently of deleting your Social account.
Friend challenges: The service stores the challenger and recipient, selected language/category, challenge status, expiry, and a short-lived opaque rendezvous identifier and GameKit player group. The actual trivia match still runs peer-to-peer through Apple GameKit; questions, answers, timing, scores, and results are not uploaded to the Social service.
Gameplay information: During an online match, questions, answers, timing, scores, connection state, and match results are exchanged directly between the two players through GameKit. The app stores your progression and match history on your device.
Local profile: Your chosen display name, country, title, statistics, and avatar preference are stored on your device. You may choose a bundled Trivington duck avatar or, with your explicit selection, your Game Center image. A normalized copy of that Game Center image is uploaded only when profile sharing is enabled.
iCloud progression backup: For signed-in Game Center profiles, the app may store profile progression and category mastery in your private iCloud key-value store so they can be restored on another device. Match history and custom avatars are not included. Device-guest profiles are never backed up.
Question feedback: If you choose “Email Report,” the app asks your mail app to prepare a message to support containing the question, marked answer, selected report reason, optional details, and your Game Center or device-guest player identifier. Nothing is sent unless you review and send that email. Support correspondence is retained only as needed to investigate the report and respond.
Notifications and device registration: Streak and return reminders are scheduled locally. If you grant notification permission and use Trivington Social, the app sends a randomly generated installation identifier, Apple Push Notification service (APNs) token, app bundle identifier, and APNs environment to the Social service. A social push contains only an event type and opaque record identifier; the app re-fetches the authoritative social state after receiving it. Apple routes push notifications and may process related device and delivery information.
2. Information We Do Not Collect
Trivington does not collect email addresses, phone numbers, advertising identifiers, precise location, contacts, browsing history, chat messages, or photo-library contents. The Social service does not receive individual match records, opponent identifiers, question identifiers, submitted answers, or daily performance buckets. It receives aggregate progression and category counters only when you enable the shared competitive profile described above. We do not sell personal information, use it for advertising, or use it to track you.
3. How Information Is Used
- To authenticate online play through Game Center
- To match players and run real-time trivia games
- To create searchable handles and friend codes, process mutual friendships, and enforce blocks and reports
- To coordinate optional friend challenges before the peers connect through GameKit
- To deliver social-event notifications after permission is granted
- To calculate scores, progression, titles, and category mastery
- To publish an access-controlled competitive profile when you enable sharing
- To submit leaderboard scores and achievement progress to Game Center
- To restore eligible progression through the player's private iCloud store
- To investigate question feedback that you choose to email to support
- To schedule optional local reminders after permission is granted
4. Service Providers and Apple Services
Cloudflare provides the Worker, database, private object storage, and network infrastructure used for Trivington Social and processes Social-service information on our behalf. Trivington also uses Apple Game Center, GameKit, APNs, iCloud key-value storage, and local notifications. These providers may process information under their own terms and privacy policies. See Cloudflare's Privacy Policy and Apple's Privacy Policy.
5. Sharing and Visibility
Your online opponent receives the identity and match information needed to play and display the result. Other Trivington Social users can see the profile information needed for exact lookup, requests, friendships, challenges, and safety controls, subject to your discoverability setting and blocks. If you enable competitive-profile sharing, its aggregate fields and selected avatar are visible only to you, unblocked mutual friends, and unblocked recent opponents with an unexpired 30-day access grant. Scores and achievements submitted to Game Center may be visible according to your Game Center privacy settings. We disclose information to Apple and Cloudflare only as needed to provide these functions, and do not share it with data brokers.
6. Retention and Your Controls
- View and update: Use the Profile, Social, and Settings screens. You can change your handle, regenerate your friend code, or turn off discoverability.
- Profile sharing: You can enable or disable the shared competitive profile in Settings. Disabling it removes the shared dossier and its private Game Center avatar copy without deleting local progression.
- Social safety: You can decline or cancel requests and challenges, remove friends, block users, and submit player reports in the app.
- Delete Social data: Settings > Trivington Social > Social Profile > Delete Trivington Social Account deletes the public profile (including handle, friend code, shared competitive profile, and private avatar copy), friendships, requests, challenges, and notification tokens associated with that Social account. A minimal stable Game Center identity link and block/report safety records are retained so deletion and recreation cannot bypass another player's safety choice. This does not delete local progression or Apple Game Center data.
- Delete Trivington data: Settings > Reset Local Data removes the local profile, match history, category mastery, custom avatar, and Trivington's iCloud progression backup.
- Game Center: Manage Apple Game Center identity, friends, privacy, reporting, and blocking through Apple's settings and Game Center interfaces.
- Notifications: Manage notification permission in iOS Settings. The app replaces rotated APNs tokens and unregisters its service token when appropriate.
Social profiles and mutual friendships remain until removed or the Social account is deleted. Pending requests and challenges expire; notification registrations are removed or replaced as the app and service learn of changes. Minimal identity tombstones, blocks, and reports may be retained for abuse prevention and enforcement. Recreating a deleted Social profile requires an explicit in-app action. Deleting the app normally removes local data but does not by itself delete a Social account. Game Center leaderboard and achievement records are controlled by Apple and may remain associated with your Game Center account.
7. Children's Privacy
Trivington Social is unavailable when Game Center reports that multiplayer or communication is restricted, including applicable child or parentally restricted accounts. Local bot play and other permitted features remain subject to Apple's parental controls and the account holder's settings. If you believe personal information was provided contrary to these controls, contact us.
8. Security
Local data is protected by iOS application sandboxing. The Social service verifies signed Game Center identity proofs, uses authenticated sessions, and issues short-lived challenge rendezvous values. Online matches and Apple-service traffic use Apple's platform security. No system can be guaranteed completely secure.
9. Changes to This Policy
We may update this policy when the app or applicable requirements change. The effective date above identifies the latest revision.
10. Contact Us
Questions about this policy can be sent to support@trivington.com.