Privacy

Local-first by default.

QuoAnno does not require an account. Endless Mode, Four Points and Daily results remain local-first. If you choose to register and connect your progress, selected results and statistics are also stored for cross-device synchronization.

Local game progress

Local game progress does not need to be uploaded to QuoAnno servers. You can export the player profile, Endless statistics, Daily progress and statistics, and Four Points progress and statistics to a JSON file, then import that file in another browser. The file does not include analytics attribution, Live Party reconnect credentials or Challenge participant credentials.

Optional accounts

If you create an account, QuoAnno stores your email address, chosen public display name, email-verification records, account preferences and server-side sessions in PostgreSQL. Session rows do not retain your IP address or browser user agent. Authentication rate limits use non-reversible address fingerprints that are removed after they are no longer needed. Your email is used to verify access and is never displayed publicly. Only the public display name and an eligible leaderboard result may be shown publicly when leaderboard features are available.

When you explicitly connect progress from a browser, QuoAnno stores a non-additive snapshot of older aggregate statistics and immutable completed-game records. Those records contain mode, score, completion time, question count, category configuration and question IDs where the local mode already has them. Daily records also retain the completed guesses, points and accuracy needed to restore the recap; Four Points records retain answer choices, correct dates, streaks and the completed session seed. They are kept while the account exists, subject to a bounded game-history limit.

Cloud progress does not contain timeline pointer movements, analytics identifiers, Live Party host or reconnect credentials, Challenge participant tokens, invite codes or browser metadata. Duplicate run IDs are ignored so reconnecting devices do not add the same progress twice.

You can delete your cloud account and synchronized data from the account page. This invalidates account sessions and removes account-scoped progress from PostgreSQL. Progress already stored locally in the current browser remains until you separately reset or clear it.

Endless Mode

Your display name, selected categories, score, streak and played-question IDs are stored in this browser using local storage. Clearing site data or using another browser or device can reset that local copy. If you connect an optional account, completed answers and derived statistics can also synchronize to that account.

Four Points

Your current Four Points session, selected categories, answers, score and mode-specific statistics are stored in this browser. Completed sessions can synchronize when you connect an optional account; unfinished sessions remain local. Naming yourself on the result screen is optional and uses the same local player profile as the other modes.

Daily Mix

Today's progress, guesses, score, completion time, Daily streak and best-score statistics are stored in this browser. Practice replays do not change or synchronize as an official result. QuoAnno stores each Daily's UTC date, number, generation version and ordered question IDs in PostgreSQL so previous Dailies survive deployments; this archive contains no player names, guesses, scores or browser identifiers. Naming yourself on the result screen is optional, and the Daily remains fully playable without an account.

If you start today's Daily while signed in, QuoAnno can also store one official server-verified attempt for that account and UTC date. The attempt contains the Daily definition, submitted guesses, per-question scores and final score. The server calculates those scores using the same scoring rules as the game. Anonymous attempts are not submitted to the public leaderboard.

The public leaderboard shows only a chosen public display name, score and rank for active accounts that opted in. It does not show email, device details, country or precise completion time. Turning visibility off removes the result from public ranking without deleting the private score.

Live Party

When you create or join a room, QuoAnno temporarily stores your display name, room membership, guesses, scores and operational timestamps in PostgreSQL. Anonymous reconnect credentials are stored in your browser. No email address or account is required, and IP addresses are not used as player identities.

Room expiry

Active rooms expire after six hours. Finished rooms are retained for up to 24 hours so players can reconnect to the final results, after which the room, memberships, answers and scores are deleted together. The V1 service also uses short-lived, non-reversible address fingerprints in application memory for abuse-rate limiting; they are not stored in the database and disappear when the process restarts.

Challenge

When you create or accept a Challenge, QuoAnno temporarily stores the challenge name, creator display name, selected categories, fixed question IDs, participant display names, guesses, scores and operational timestamps. An anonymous participant token is stored in your browser so the same official attempt can be restored. Display names are labels, not verified identities.

Challenge expiry

Challenges and all associated memberships, answers and scores are deleted after 30 days. New attempts and result viewing stop when that deletion occurs. Short-lived, non-reversible address fingerprints used for creation and join rate limits remain only in application memory.

Question suggestions

If you suggest a question, QuoAnno stores the event title, category or suggested category, BC or AD year, date certainty, your explanation, your reason for finding the moment interesting, up to three source links, optional editorial notes, and the review status and reviewer notes in PostgreSQL. The form does not ask for your name, email address or an account, so nothing in a submission identifies you and there is nothing to attribute a published question to. Suggestions remain private to the editorial review process — there is no public queue and no way to look up a submission — and never enter the game automatically. They are retained until reviewed or deleted.

Submission rate limiting uses the same short-lived, non-reversible address fingerprint described above. The fingerprint remains in application memory and is not stored with the suggestion.

Voluntary feedback

Voluntary feedback is stored in PostgreSQL when you choose to send it: the rating, optional comment, optional answer about what felt hardest, normalized originating route, game mode when applicable, mobile or desktop device class, application version and submission time. The form does not ask for your name, email address, precise location or other contact details.

Your IP address is not stored with your feedback. A short-lived, non-reversible address fingerprint is kept only in application memory to limit spam. Raw comments and ratings remain private to the product review process, are deleted after 12 months, and are not published publicly. If database backups are enabled, deleted rows may remain until those backups rotate.

Acquisition analytics

Analytics is disabled by default. When a deployment enables it, QuoAnno records a small set of product events such as landing, starting a mode, completing the Daily, and sharing. Standard campaign tags — source, medium, campaign, and content — are stored as first-touch attribution in local storage for up to 90 days and as current-session attribution in session storage. Values are shortened and restricted to campaign-safe characters; email addresses, URLs, and control characters are rejected. QuoAnno does not include player names, room or challenge codes, questions, dates, guesses, answers, full page URLs, or referrer URLs in these events.

The built-in console provider is for development and sends no analytics traffic over the network. The product-event pipeline described above loads no third-party tracking script. A deployment that adds a further external provider must update this notice and meet its applicable consent and legal requirements before enabling it.

Visitor measurement

QuoAnno loads Simple Analytics to count page views. It is cookieless and sets no identifier in your browser, so it cannot follow you between sessions, devices or other websites. It records aggregate information about the visit — the page viewed, the referring site, and coarse country, browser and device type — and does not build a visitor profile or sell data. No player name, score, guess, room code or challenge code is sent to it.

This deployment is configured with collect-dnt enabled, which means page views are counted even when your browser sends a Do Not Track signal. To opt out entirely, block simpleanalyticscdn.com in your browser or an extension; QuoAnno remains fully playable without it.