Privacy

Trivball is an independent, non-commercial project run by one person. That person is the data controller for the small amount of processing described below. Trivball isn’t a company, has no staff and sells nothing. If you have a question, a correction or a request about your data, write to us.

Your IP address. Cloudflare, which serves the site, sees it so it can deliver pages and block attacks. Trivball doesn’t store it. We keep no log of page requests. The only logs we keep are error reports (see below), and they don’t include your address.

Party nicknames, room codes and game text. When you play a party game, the room holds the nickname you type, the room code and the running scores. In Trick Play the room also holds the fake answers players type, and in Sideline Call the one-word clues. That’s how players see each other and how scores update. You don’t have to use your real name. A simple filter keeps obvious rude words off the big screen, and the host can remove anyone. All of it is deleted with the room.

A random player id and secret. Your device makes these up, and they’re never linked to you. They’re only there so refreshing your phone in the middle of a game doesn’t cost you your place or your score. The secret stops another player from reconnecting as you.

Player searches. When you type a player’s name, we send the text to our own server, which looks it up in our own list of players and sends back suggestions. Nobody else sees it. We don’t log searches or connect them to you.

Challenge links. When you tap Share after a solo game, we save the board you played, its filters and your result line under a random code for 30 days. That way the link opens the same board for a friend. Nothing that identifies you is saved with it.

Overall visit numbers. Page views and how fast pages load, from Cloudflare Web Analytics. More on this below.

Anonymous usage counts. Simple tallies of what happens in the games, like a board started, finished or left, a Skip or Share tapped, a board that failed to build, or a page that hit an error, plus roughly where a visit came from and how long since you last played. They show us which games work, which break and whether people come back. More on this below.

Email you choose to send. Only if you write to the address at the bottom of this page.

We use Cloudflare Web Analytics to count page views and see how fast pages load. It’s built for privacy. It sets no cookies, stores no identifier for you, and can’t follow you to any other website. It only reports overall numbers, like how many people opened a page and how fast it loaded. There’s no way to pick you out from it.

Anonymous usage counts. The games also add one to a counter when something happens on a board. That means a board started, cleared, missed, given up, left halfway, skipped, shared or failed to build. Daily, Gauntlet and party room starts and finishes are counted too. Each count holds only the game, the sport, how it was played (solo, Daily, Gauntlet, party or couch) and what happened, all picked from a fixed list.

Each time a page loads, we also count two more things, each as one word from a fixed list. The first is roughly where the visit came from: a search engine, Reddit, Discord, a social site, a chat app, a friend’s challenge link, another website, or nowhere (you typed the address). Your browser works out that word itself. The address you came from is never sent. The second is how long since you last played on this device: today, yesterday, 2 to 7 days, 8 to 30 days, longer, or never. Your browser works it out from the scores it already keeps for your Locker. Only that rough bucket is sent, never a date, and nothing new is saved on your device for it.

A count never includes an identifier, your IP address, your browser details, a page address, your answers, your scores or anything you type. No cookie is set and the counts save nothing in browser storage, so a count can’t be linked to you. A page sends its counts in small batches, so counts from one visit arrive at about the same moment. Nothing we store says which visit they came from.

If a page hits an error, we count that the same way. We keep only a short label for the kind of error (part of the page didn’t draw, a file didn’t download, or something else went wrong) and never the error message or its details. Each count is stored with only the time it happened, in Cloudflare Workers Analytics Engine, and we only ever read back totals. If your browser sends Do Not Track or Global Privacy Control, nothing is counted at all.

There’s no Google Analytics, no advertising network, no tracking pixel, no fingerprinting and no behavioral profiling. Nothing here is used to build a picture of you, and nothing is sold to anyone.

Trivball sets no cookies.

The one exception is Cloudflare, which serves and protects the site. Sometimes it shows a security check, for example when your network looks like a source of automated traffic. If you pass it, Cloudflare sets one strictly necessary security cookie, cf_clearance, so you aren’t checked again. It’s not used for tracking or advertising, and Trivball can’t read it. Most visitors never see one.

Everything below is saved only in your browser. It’s never sent to us, and it isn’t a cookie. Clearing your site data removes all of it, and you can erase it from Settings too.

“Move my stats” in Settings turns your scores, Daily history, achievements and settings into a code. You copy that code to another device yourself. Your browser makes the code, and it’s never sent to us. It doesn’t include your party id or secret.

Kept until you clear it (local storage)

• Your nickname and your game settings.
• Your best scores and play counts for each game.
• Which games you played recently.
• The random id and secret described above.
• The code of the last room you hosted or joined, so you can rejoin it, and which rooms you’ve joined.
• Your saved party setup choices, and which games (solo and party) you’ve already seen the rules for.
• Your Daily Challenge progress, streak, best score, recent history and followed sports, plus which Daily round you’re partway through.
• Your scores and progress on past Dailies you played from the archive.
• The few achievement facts your Locker can’t read from your scores. These are a perfect Darts checkout, a Degrees of Separation link with just 1 player in between, the sports you cleared a board in today, and how many Daily and Gauntlet boards you’ve played and cleared.
• Whether you’ve said “Not now” to the reminder to save a backup of your stats.
• A small list of which team logos need a backdrop so you can see them clearly.
• A list of player photos ESPN doesn’t have, so your browser doesn’t keep asking for them. Each one expires after 3 days.

Cleared when you close the tab (session storage)

• A snapshot of a run in progress, including a Daily round or a Gauntlet board, so refreshing doesn’t lose the board you were on.
• The boards you’ve already had in that tab, so a refresh doesn’t give you one again.
• A Call Your Shot, Sideline Call, Bidding War or Trick Play game you’re playing on one screen, so a refresh can pick it back up.
• The big screen’s answer key for the party round on screen, so refreshing the TV doesn’t lose the round.
• A chain of party rounds you’re partway through.
• Your Keep 3 Cut 5 calls on a party board, so a refresh doesn’t lose them.
• A note that a room you were in has ended, so the join screen can tell you.
• Your scroll position on pages you’ve visited, so Back takes you to the same place.

Our own server answers player stats and searches from a copy of the data we collect from ESPN, TheSportsDB and the nflverse roster data. Your browser doesn’t contact them for that. We collect it ourselves, not from your connection, so none of those sources see your IP address or anything about you when we look up stats or search for a player.

Player photos and team logos are the exception. They load straight into your browser, like an image from any other site would. They come only from ESPN’s image servers for every sport, from the NHL’s image server (assets.nhle.com) for some older NHL team logos, and from TheSportsDB for soccer player photos. So those three get your IP address and browser user agent when a board shows photos or crests, and they can see the request came from trivball.com. We don’t send them anything else, and we get nothing back about you. But we can’t say they see nothing, because they see what any image host sees.

If you’re in the UK or the EU, the processing above relies on legitimate interests (UK/EU GDPR Article 6(1)(f)). Those interests are running a game that works and is reasonably fast and secure, and knowing overall whether people use it. We handle only the minimum needed for that. None of it is used to make decisions about you, and none of it is combined into a profile.

The UK’s rules on this are PECR, the Privacy and Electronic Communications Regulations, as the ICO applies them. They cover storing or reading anything on your device, not just cookies. This site does store things on your device, in the browser storage listed above. So the real question is whether each saved item is strictly necessary for something you asked for. Each one is. Your settings, your scores and streaks, the room you’re rejoining and the snapshot that survives a refresh are the features themselves. They aren’t a way of watching you, and none of it is advertising, cross-site tracking or profiling. That’s why there’s no banner for you to dismiss.

Party room data is deleted right away when the host ends the room. If a room is left behind, it’s deleted automatically after 6 hours with no activity. Nothing is archived, so once a room is cleared there’s nothing left to look up.

Analytics. Cloudflare keeps the overall numbers on its own schedule, and they contain no identifier for you. Anonymous usage counts are kept for up to 3 months, then deleted.

Browser storage stays until you clear it. Run snapshots go when you close the tab. It’s all on your device, so you’re in control.

Request logs. There aren’t any. The site doesn’t log page requests. Cloudflare keeps its own operational and security logs for a short time under its own policies. That includes Cloudflare’s network error reports: if a request to the site fails, your browser may tell Cloudflare about it (with your IP address), so Cloudflare can spot problems on its network.

Error logs. When something breaks on our side, like a search that fails or a board that won’t build, we record what went wrong in our own code so we can fix it. That’s the error message and where in the code it happened. It never includes your IP address, what you typed or searched for, or anything that identifies you. Cloudflare keeps these logs for up to 7 days, then deletes them.

Cloudflare hosts the site and serves every request. It also runs the party rooms, provides the analytics described above, and forwards mail sent to the address on this page. Cloudflare runs a global network, so your data may be handled outside your country, including outside the UK and EU. That happens under the safeguards in Cloudflare’s own data processing terms.

The person who runs the site lives outside the UK and EU. If you email the address on this page, your message is read there. That’s the only way anything reaches the person running the site. Gameplay never does.

ESPN, TheSportsDB and the open source nflverse roster data supply the sports data. As explained above, only ESPN, the NHL’s image server and TheSportsDB ever get your IP address. That only happens when your browser loads a player photo or team logo, never for stats or searches.

Mail sent to the contact address goes through Cloudflare Email Routing to a personal mailbox. So Cloudflare and that mailbox’s provider handle your address and whatever you write. Nothing else on this site emails anyone, and writing in is completely optional. You don’t need an email address to play.

There are no other third parties, and nothing is ever sold.

If you’re in the UK or the EU, you have the right to ask what we hold about you and get a copy of it. You can also ask us to correct or delete it, or object to or restrict how it’s handled. Wherever you are, you’ll get the same answer. Write to the address at the bottom of this page and you’ll hear back within a month.

Usually there’s nothing to hand over. There are no accounts, and party rooms are gone within hours. Everything else lives in your own browser. You can delete all of it yourself by clearing this site’s data in your browser settings, or with one tap on “Clear local data” in Settings.

If you’re in the UK and think your data has been handled badly, you can complain to the UK’s regulator, the Information Commissioner’s Office. If you’re in the EU, your national data protection authority does the same job. We’d be grateful for the chance to put it right first.

Sports trivia is for all ages, and kids under 18 may well play here. The site is built so that needs no special handling. There are no accounts, no advertising, no profiling, no cross-site tracking and no direct messages between players. Nothing asks for a real name, an age, an email address or a location. The most private settings are the only settings, so there’s nothing to turn off. The only things a player can type for others to see are a party nickname, a Trick Play answer and a Sideline Call clue. Only people in that room see them, and they’re deleted with the room.

If you have a question about this notice, or about data you think we hold, write to the address below. To report a security issue, see security.txt. You can also read our Terms of use.

Privacy request:contact@trivball.comCopy address