Last updated 23 October 2026

Who is behind this

The service is run jointly by Solhaug Helse og Utdanning, company number 928 777 030, and Utdannet.No Espen Faugstad, company number 999 033 237, Norway. For privacy questions, email hey@trivvy.net.

When you play as a guest

You need no account. The nickname and avatar you pick are stored in your own browser, along with a random guest id that lets you back into your room if the connection drops. The guest id is mirrored in a cookie, because some browsers clear browser storage after a week. It is never linked to a name, an email or a device.

When you create an account

We store your email address, your password in encrypted form, and your display name. The email is used only to sign in and to reset your password. We never send newsletters, and the address is not shared with anyone.

When you are logged in

For each login we store the IP address and which browser and device you used (the user agent), so the login can be secured. The record is deleted when you log out, and all of them are deleted when you delete your account. If you log in with Google, we get your name and email address from Google, never your password.

What you do in the game

We store the answers you type, how long you took, your points and the outcome of each round. That is what the leaderboards, the rating and your statistics are built on. Your answers are shown to the others in your room once the solution appears – that is part of the game. Those of us who run Trivvy can see what an account or guest has played, when and with what result, to understand how the game is used. The guest id is not shown, not even to us.

How answers are judged

Most answers are settled by the app itself, comparing your text with the solution. When it is unsure, the question and your answer are sent to OpenAI for a verdict. Who answered is not included.

When you share a link

If you share a link from the app, we put a random id in it and count that the link was shared and that someone opened it. We see the number, not who.

Visits, country, device and social media

Each time a page is opened, we add one to a number for that day, for the country the visit came from, for the kind of device (iPhone, Android, PC or the app) and for how it came in (direct, from a search, from a social platform or from another website). The country and device are worked out when the page opens, and neither the network address nor the browser details are stored. If you come from a link on Facebook, Instagram or another social platform, we also count the platform and the post the link was in. If you start a game during the same visit, we also add one to a number for how the visit came in. How you came in is only remembered while the page is open, and is not stored on your device. For each country we also count the language your browser asks for, which county or state the visit came from (never the city), and how many games are started. That is the whole measurement: we use no cookie, store no IP address, browser details or id, and cannot see who came or link the visit to anything else you did.

Notifications

If you turn on notifications, we store the address your browser gives us for notifications (a push subscription), with your language and your account or guest ID. The notification is delivered by your browser's own push service, for example Google, Apple or Mozilla. If you turn notifications off or delete your account, the subscription is deleted.

Ads

The game is free, and we show ads during the pauses between questions – never while a question is on screen. The ads are delivered by Google, which may use cookies to make them relevant. You choose whether to allow that the first time you see an ad, and you can change your choice at any time.

Google and its partners use cookies to show ads based on your earlier visits to our site and other sites. How Google uses data from sites and apps that use its services. You can opt out of personalised ads in Google's ad settings.

Who processes data for us

We never sell your data. These providers process data on our behalf:

• Vercel – running the site and technical logs
• Neon – the database, stored in the EU (Frankfurt)
• OpenAI – judging answers the app is unsure about
• Resend – sending password emails, from the EU
• Google – ads and consent handling

Cookies

We use cookies for four things: the language you picked, your guest id, signing in, and your choice about ads. None of them follow you to other sites.

The app for iPhone and iPad

The app shows the same game as the website and stores the same information, described above. It adds a marker to the device's browser information saying the request comes from the app, so we can adapt it. Ads in the app are delivered by Google AdMob, in the same pauses as on the website. The first time, the app asks whether you allow tracking across other apps, in Apple's own dialog, and in the EEA whether you consent to personalised ads. If you say no, you get ads that are not tailored to you, and the app does not use the device's advertising ID. You can change your choices under Profile → Ad choices in the app and in iPhone Settings under Privacy & Security → Tracking. The app has no chat, and you sign in with email and password. It does not ask for access to your camera, location, contacts or photos.

How long we keep things

Rooms are deleted shortly after the round ends. Challenges live for a few days. The results behind leaderboards and ratings are kept for as long as you have an account.

When you delete your account

You delete your account yourself under Profile. Your profile, email address, logins, rating, friends list, notifications and the rounds you played alone are deleted straight away. Where you played with others – in a room, a challenge or a battle – the result stays with them as “Deleted player”, with no name and no link to you, so their history has no gaps. Card reports stay without a name. If your account has a password, you must enter it; if you log in with Google, your login must be less than 10 minutes old.

Your rights

You can ask to see what we store, have it corrected, or have it deleted. With an account you delete it yourself under Profile, as described above. As a guest, clear your browser storage – or write to us and we will tidy up. You may also complain to your national data protection authority.

Children

The game is made for teenagers and adults. If you are under 13, you need a guardian's consent to create an account.