Privacy

Last updated 24 October 2026.

Who we are

QuickFire is run by Welshdag, based in Wales, United Kingdom, which also runs Timetable Creator and Placement Rota. Welshdag is the data controller for the personal data described here. Contact: [email protected].

Players

Players don’t need an account. To join a game you enter a PIN and a nickname. While the game runs, the host and everyone in the room can see your nickname and your score. When the game finishes we keep the host’s report: your nickname, your score and position, which answer you picked for each question and how long you took. We don’t ask for your name, email, age or school, and we don’t use your answers for anything else.

Use a nickname, not your full name. Hosts, especially in schools, should ask players to do the same.

Your phone keeps a random “seat” code for up to 6 hours, so that if you refresh or lose signal you rejoin as the same player.

Hosts

To host you create an account with your name, email address and a password (stored only as a scrambled hash). We keep the quizzes and images you add, and the reports from games you host.

Why we use it

To provide the service you asked for: running quiz games and showing the host the results (contract, and for players, the host’s and our legitimate interest in running the game they joined).

How long we keep it

Live games are only held in memory and are gone shortly after they end. Game reports are deleted automatically after 90 days, or sooner if the host deletes them. Quizzes and images stay until the host deletes them or their account. “Delete my account” on the dashboard removes the account, its quizzes, images and reports straight away.

Who we share with

We don’t sell your data or use it for advertising. We use these service providers, who only process it to provide their service to us: Cloudflare, which carries all traffic to the site; one.com, our server, in a data centre in Leipzig, Germany; Resend, which sends password reset emails; Google Fonts, which our pages load fonts from, so Google receives your IP address; and Google Drive, which stores our encrypted nightly backups. Cloudflare, Resend and Google may process data in the United States. Where that happens, the transfer is protected by the UK Extension to the EU-US Data Privacy Framework or by the UK’s approved contract terms for international transfers.

Backups

Encrypted backups are kept for up to 35 days, so data that’s deleted disappears from backups within 35 days.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to how we use it, and get a copy to take elsewhere. Email [email protected] and we will reply within one month. If a player wants their answers removed from a report, the host can delete that report, or you can contact us. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk), but please contact us first so we can try to put it right.

Cookies

One cookie keeps hosts signed in. Your sound setting and player seat code are kept in your own browser. No tracking or advertising cookies.