— Privacy Policy —

Your data, your control.

How we collect, use, share and protect personal data — whether you host quizzes, play in one, buy from our shop or just visit this site. Written in plain English and complete.

Version 2.2 · Last updated: 13 October 2026 · Effective from: 8 October 2026

1. Who we are and what this policy covers

QuizGames Live ("we", "us", "our") is a service operated by HFGlobal Ltd, a company registered in England and Wales (company number 11551377), registered office 1 Sopwith Crescent, Wickford, Essex, SS11 8YU. We are the data controller for the personal data described in this policy and are registered with the Information Commissioner's Office (ICO) under registration reference ZC267647.

This policy applies to the QuizGames Live website (quizgameslive.com), the QuizGames Live application (live.quizgameslive.com), the QuizGames Live connector software, our shop, and our emails. It does not cover LiveConnectPro, which is a separate HFGlobal Ltd service with its own privacy policy, or any third-party platform (such as TikTok) that you use alongside our service.

Questions, requests or complaints about personal data: [email protected]. We aim to reply within 5 working days and will answer any formal request within one month.

2. Who this policy is for

We handle personal data about four groups of people. The rest of this policy says what we collect about each and why.

  • Hosts — streamers and creators who create an account and run quizzes.
  • Players — viewers who take part in a host's quiz by typing answers into the host's live chat. Players never create an account with us.
  • Shop customers — anyone who buys physical or digital goods from our shop.
  • Visitors and contacts — anyone who browses this website, joins a mailing list, leaves a review, or contacts us.

3. What we collect

3.1 Hosts

  • Account details — email address, display name, password (stored only as a one-way hash; we cannot read it), your unique host code, and the date you joined.
  • Subscription and billing — your plan, plugins, bundles and AI credit purchases; your Stripe customer reference; subscription status and renewal dates; the last four digits and expiry of your card (Stripe holds the full card details, we never see them); your billing currency and country; invoices and receipts.
  • Content you create — quizzes, questions, answers, categories, images, audio and video you upload, scoring rules, and your quiz settings.
  • Connected platforms — your TikTok (and, when available, YouTube, Twitch or Kick) username and the connection details needed to read your live chat. We never see or store your platform password.
  • Quiz activity — when you run quizzes, which quizzes, how many players took part, and the leaderboards produced (see 3.2).
  • AI features — if you use the AI Quiz Builder or AI Cover Lab, the prompts, topics and settings you enter, and the output generated.
  • Reviews — if you leave a review, its text, star rating, the display name you choose, and the date.
  • Support and messages — anything you send us through the in-app inbox, support tickets or email, and our replies.
  • Notifications — if you turn on browser push notifications, the push subscription your browser gives us so we can deliver them.
  • Session and security — login sessions, the IP address and browser used to sign in, sign-in times, and security events such as password changes and magic-link logins.

3.2 Players

When you take part in a host's quiz, the host's streaming platform sends the host's chat to our connector. From that chat we process:

  • Your public username and profile picture on that platform, and the platform's user identifier.
  • The answers you type into the chat during the quiz.
  • Your scores and position on the host's per-quiz, monthly and all-time leaderboards, how many quizzes you have played with that host, and whether the host has marked you as a "superfan".

We do not receive your email address, real name, date of birth, payment details or private messages. We only receive what you make public in a live chat. Your leaderboard data is visible to the host who ran the quiz and to that host's audience when the host displays it on stream.

Because we receive this data from the streaming platform rather than from you, and have no way to contact you directly, we are not able to notify each player individually; this policy is how we tell you. Hosts are responsible for their own use of the platform and for what they show on their streams; we are the controller for the leaderboard records we store.

3.3 Shop customers

  • Order details — the items ordered, prices, currency and order date.
  • Contact and delivery — your name, email address, delivery address and (optionally) phone number.
  • Payment — handled by Stripe; we receive confirmation of payment and the last four digits of your card only.
  • Fulfilment — tracking numbers and delivery status from our print-on-demand partners.

3.4 Visitors and contacts

  • Mailing list and pre-registration — email address, the page you signed up from, and the date.
  • Contact form and email — your name, email address and message.
  • Website use — only if you accept analytics cookies: pages visited, approximate location (country), device and browser type, how you arrived at the site, and how you scroll, click and move around each page (anything you type is hidden). See section 11.
  • Advertising measurement — only if you accept marketing cookies: the pages you visit on our website, whether you start a free trial or send us a form, and browser and device identifiers, collected by the Meta Pixel. See section 11.
  • Technical logs — IP address, request time and any error, kept briefly for security and fault-finding.

We do not collect special category data (such as health, religion, ethnicity or sexual orientation) and we ask you not to send it to us.

4. Why we use it and our lawful basis

UK GDPR requires us to have a lawful basis for each use of personal data. These are ours:

  • Performing our contract with you — creating and running your account, running quizzes, producing leaderboards, taking payment, delivering shop orders, providing AI features and support.
  • Our legitimate interests — keeping the service secure and preventing fraud and abuse; fixing faults; understanding how the service is used so we can improve it; defending legal claims; sending existing customers service messages and, where permitted, information about similar products (you can opt out at any time). Where we rely on legitimate interests we have checked that our interest is not overridden by your rights.
  • Your consent — analytics and marketing cookies; marketing emails to people who are not yet customers; browser push notifications; publishing your review. You can withdraw consent at any time and it will not affect anything done before you withdrew.
  • Legal obligation — keeping tax and accounting records, responding to lawful requests from authorities, and meeting our duties under consumer and data protection law.

Players: we process players' chat data on the basis of our legitimate interest in providing the quiz service that the host has asked for, and the host's legitimate interest in running an interactive show. We only use it to run the quiz and keep the host's leaderboards.

We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

5. Players: what hosts can and cannot do

Hosts see their own players' usernames, scores and leaderboard history inside their dashboard. Hosts agree in our Terms of Service to use that information only to run their shows, and not to export it, sell it or use it to contact players outside the platform. If you are a player and want your data removed from a host's leaderboards, email us with the host's name and your platform username and we will remove it.

6. Who we share data with

We share personal data only with the service providers below, each of which processes it on our instructions under a written contract, and with authorities when the law requires. We never sell it.

  • Stripe Payments UK Ltd / Stripe Inc. — payment processing, subscription billing, invoices and fraud screening. Stripe privacy policy.
  • DigitalOcean LLC — hosting of our application and database, in its London (United Kingdom) data centre.
  • Cloudflare Inc. — content delivery and protection against attacks for our websites; sees IP addresses and request data in transit. Also provides Cloudflare Web Analytics, which counts page visits without cookies and without identifying or tracking individual visitors.
  • Resend Inc. — sends our transactional and marketing emails and tells us whether an email was delivered, opened or a link clicked.
  • Anthropic PBC — provides the AI model behind the AI Quiz Builder and AI Cover Lab. Only the prompt and settings you enter for that feature are sent; no account, billing or player data is included. Under its API terms, Anthropic does not use data sent through its API to train its models.
  • Printful Inc. and Printify Inc. — print and ship physical shop orders. They receive your name, delivery address, email, phone number (if given) and the items ordered.
  • Google LLC (Google Analytics 4) — website analytics, only if you accept analytics cookies.
  • Microsoft Corporation (Microsoft Clarity) — website analytics, heatmaps and anonymised recordings of visits, only if you accept analytics cookies. Microsoft privacy statement.
  • Meta Platforms Ireland Ltd (Meta Pixel) — measures our Facebook and Instagram adverts, only if you accept marketing cookies. For collecting this data through our website, Meta and we are joint controllers; once Meta receives it, Meta uses it as an independent controller under its own privacy policy, which also explains how to exercise your rights with Meta.
  • Streaming platforms (TikTok, and others as we add them) — we read your public live chat through the platform's systems. Each platform's own privacy policy governs what it does with your data.
  • Professional advisers and authorities — accountants, lawyers, insurers, HMRC, the ICO, courts and police, where necessary to run the business or where legally required.

If HFGlobal Ltd sells or transfers the QuizGames Live business, personal data may be transferred to the new owner under the same protections as this policy, and we will tell you before that happens.

7. International transfers

Some of the providers in section 6 are based in, or process data in, the United States. When we transfer personal data outside the UK we rely on the UK Government's adequacy regulations where they apply (including the UK Extension to the EU–US Data Privacy Framework for certified US companies), and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional safeguards needed. You can ask us for details of the safeguard used for a particular provider.

8. How long we keep it

  • Host accounts — for as long as your account is open. When you ask us to close your account we delete or anonymise your account data within 90 days, except invoices, payment records and anything we must keep for tax, accounting or legal reasons, which we keep for 6 years after the end of the relevant financial year. Accounts whose subscription has lapsed are kept so you can come back, but we review and remove accounts with no activity for more than 24 months.
  • Quizzes and uploaded media — while your account is open, then deleted with it.
  • Player leaderboards — per-quiz boards are kept for 90 days after the quiz; monthly boards are reset at the start of each month; all-time totals are kept while the host's account is open. Player usernames in these records are removed on request (section 5).
  • Shop orders — 6 years after the order, for tax and consumer-law reasons.
  • Reviews — while published, and for 12 months after removal so we can respond to any dispute.
  • Support messages and emails — 3 years from the last message in the conversation.
  • Mailing list — until you unsubscribe or 24 months of inactivity, whichever is first. We keep a record of unsubscribed addresses so we do not email them again.
  • Login sessions — until you log out, or automatically 30 days after you signed in.
  • Technical logs — up to 90 days.
  • Analytics — Google Analytics data for up to 14 months; Microsoft Clarity recordings for 30 days (up to 13 months for any we save) and its other data for up to 13 months; aggregated statistics that identify nobody may be kept indefinitely.
  • Advertising measurement — Meta Pixel cookies last up to 90 days; Meta keeps the data it receives under its own privacy policy.

9. How we protect it

  • All traffic to and from our sites and application is encrypted (HTTPS/TLS).
  • Passwords are stored only as salted one-way hashes using an industry-standard algorithm.
  • Payment card data is handled entirely by Stripe, a PCI DSS Level 1 certified provider; it never touches our servers.
  • Access to production systems and data is limited to the people who need it, protected by strong authentication, and logged.
  • Our database is backed up regularly and backups are encrypted.
  • We keep our software and dependencies up to date and review security regularly.

No system is perfectly secure. If we become aware of a personal data breach that is likely to put your rights at risk, we will tell you without undue delay and report it to the ICO within 72 hours as the law requires.

10. Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

  • Access — ask for a copy of the personal data we hold about you.
  • Rectification — have inaccurate data corrected. Hosts can edit most account details directly in their dashboard.
  • Erasure — ask us to delete your data where we no longer need it or you withdraw consent.
  • Restriction — ask us to pause use of your data while a dispute is resolved.
  • Portability — receive data you gave us in a machine-readable format, where we process it by automated means on the basis of consent or contract.
  • Object — object to processing based on our legitimate interests, and to direct marketing at any time (we will always stop marketing when you ask).
  • Withdraw consent — for anything based on consent, at any time.

There is currently no self-service button to delete your account or export your data; both are done on request. To exercise any right, email [email protected] from the email address on your account, or tell us your host code or platform username so we can find your data. We may ask for proof of identity. We will respond within one month; if a request is complex we may extend this by up to two further months and will tell you why. These rights are free to exercise unless a request is clearly unfounded or excessive.

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Cookies and similar technologies

We use a small number of cookies and similar storage, in three groups.

11.1 Strictly necessary (always on, no consent needed)

  • qgl_session — keeps you signed in to the application. Deleted when you log out or the session expires.
  • qgl_admin_token — keeps our staff signed in to the admin area. Not set for ordinary users.
  • Local storage of your cookie preference, your in-quiz settings and leaderboards on your own device, and security tokens used during form submission and payment.
  • Cookies set by Stripe on checkout pages to prevent fraud.

11.2 Analytics (only with your consent)

If you accept analytics cookies we use Google Analytics 4 to understand how the website is used: pages visited, approximate country, device and browser, referring site, and events such as button clicks and form submissions. We use Google Consent Mode, so until you accept, Google receives only cookieless "consent denied" signals containing no personal data. Once you accept, Google sets cookies beginning _ga which last up to 13 months. Google may process this data in the United States under the safeguards in section 7.

If you accept analytics cookies we also use Microsoft Clarity, which shows us heatmaps and anonymised recordings of how visitors scroll, click and move around our pages, so we can see where the site is confusing. Anything you type into a form is hidden before it leaves your device, and recordings are not linked to your name or email address. Clarity sets cookies beginning _clck and _clsk, and Microsoft may set MUID; these last up to 1 year. Microsoft may process this data in the United States under the safeguards in section 7.

We also use Cloudflare Web Analytics to count page visits. It sets no cookies, stores nothing on your device and does not identify or follow you, so it runs for all visitors.

11.3 Marketing (only with your consent)

If you accept marketing cookies we load the Meta Pixel, which tells Meta Platforms Ireland Ltd when someone visits our website, starts a free trial or sends us a form, so we can measure and improve our adverts on Facebook and Instagram. Meta may link this to a Facebook or Instagram account you are signed in to. It sets cookies beginning _fbp and _fbc which last up to 90 days. Until you accept, the Meta Pixel is not loaded at all. Meta may process this data in the United States under the safeguards in section 7.

11.4 Changing your choice

Click Cookie settings in the footer of any page to change your preferences at any time. You can also block or delete cookies in your browser settings, though the application will not work without the strictly necessary ones.

12. Marketing emails

We send marketing emails (product news, tips and offers) only to people who have asked for them, or to existing customers about our own similar products where you were given the chance to opt out when you gave us your details, as permitted by the Privacy and Electronic Communications Regulations. Every marketing email has an unsubscribe link, and you can also unsubscribe by emailing us. Unsubscribing does not stop essential service emails such as receipts, security alerts and changes to our terms.

Our email provider records whether an email was opened (using a small invisible image) and which links were clicked, so we can see what is useful and stop sending what is not. We rely on our legitimate interest in measuring our emails for this; you can prevent open-tracking by turning off automatic image loading in your email app, and link-tracking by unsubscribing.

13. Children

Hosts must be at least 18 years old. The website and the host application are not directed at children and we do not knowingly collect data from anyone under 18 as a host.

Players take part through third-party streaming platforms, which set their own minimum ages (for example, TikTok requires users to be at least 13 and only allows those aged 18 or over to go live). We do not knowingly process data about children under 13. If you believe we hold data about a child that we should not, email us and we will remove it.

14. Automated decision-making

We do not make decisions about you using automated processing alone that would have a legal or similarly significant effect on you. Quiz scoring is automatic, but it only affects a game.

15. Changes to this policy

We will update this policy when our practices or the law change. For material changes we will email registered hosts and post a notice on the website at least 14 days before the change takes effect. The version number and dates at the top tell you when it was last changed. Earlier versions are available on request.

16. Contact

HFGlobal Ltd (trading as QuizGames Live)
1 Sopwith Crescent, Wickford, Essex, SS11 8YU, United Kingdom
Email: [email protected]
ICO registration: ZC267647

For all other enquiries, see our contact page. Our Terms of Service, Returns Policy and Shipping Policy also apply.