Privacy Policy

Last updated September 10, 2026

Bible Quiz AI is a small, free Bible trivia site run by an individual. This page explains, in plain language, what we collect, why, and how you can see or delete it.

What we collect

• If you create an account: your email address and a scrambled (hashed) copy of your password. We never store the password itself and cannot see it.
• As you play: the answers you give, your scores, points and streaks, Journey Mode progress, and the time of your last sign-in. This is what powers your scorecard.
• If you write to us: the name, email address and message you send through the contact page, and any suggestions you submit.
• Automatically: our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for a short time to keep the site running and to stop abuse. We use these only for that purpose.

We do not collect payment details, location, or anything from your device beyond what a normal web browser sends. Playing as a guest creates no account and stores no personal data.

What we don't do

• We do not sell, rent or share your personal data with anyone for marketing or advertising.
• We do not run ads or third-party analytics or tracking cookies.
• We do not use your data to train AI models.

Cookies

We set one cookie: a session cookie that keeps you signed in and remembers the quiz you are in the middle of. It is essential for the site to work and carries no tracking. Our page styling is loaded from a public content delivery network (jsDelivr), which sees your browser's request like any other web server would.

Why we use your data, and our legal basis

• To run your account and scorecard (performing the service you asked for).
• To reply to messages you send us (performing the service you asked for).
• To keep the site secure and working (our legitimate interest in running the site safely).

Who can see it

Your data is stored in a database hosted by Supabase and the site runs on Render, both in the United States. Notifications to the site owner are sent through Resend. These providers process data only on our behalf. Otherwise, only the site owner and any administrators the owner appoints can access your data, and only to run the site.

How long we keep it

For as long as you keep your account. When you delete your account, everything tied to it is removed immediately and permanently, including any contact messages sent from the same email address. Copies in our database provider's routine backups are overwritten on a rolling schedule and are never used to bring a deleted account back. If you write to us without an account, we keep the message only as long as needed to reply and then for our records; you can ask us to delete it at any time.

Your rights and how to use them

Wherever you live, you can:

• See and download your data: sign in and open My Account, then choose Download JSON.
• Delete your account and all your data: on the same page, enter your password and confirm. It takes effect at once, with no waiting period.
• Correct something, ask a question, or delete without a password: use the contact page from the email address on the account. We answer within 30 days and usually much sooner.

If you are in the EU, UK, or a country or US state with a privacy law, you may also have rights to restrict or object to processing, to data portability, and to complain to your local data protection authority. We will honour requests under those laws regardless of where you live. We do not discriminate against anyone for exercising their rights.

Children

Accounts are for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it promptly. Anyone can play as a guest without giving us any information.

AI-generated content

The illustrations in Journey Mode were created with AI image tools, and some quiz questions were drafted with AI assistance and then reviewed by a person. There is no chatbot on this site, and we do not send any of your data to AI services.

Security

Passwords are hashed with PBKDF2-SHA256, connections use HTTPS, and sign-in attempts are rate-limited. No system is perfectly secure; if we ever learn of a breach affecting your data we will tell you by email as the law requires.

Changes and contact

If this policy changes in a meaningful way we will update the date at the top and, for account holders, mention it on the site. Questions go through the contact page.