Privacy
Trivball is a free sports-trivia game. There are no accounts, no user profiles, no advertising, and no cross-site tracking. It does still process a small amount of information in order to work at all — this page says exactly what, why, and for how long.
Who runs this site
Trivball is an independent, non-commercial project run by one person, who is the data controller for the limited processing described below. It is not a company, it has no staff, and it sells nothing. For anything on this page — a question, a correction, or a request about your data — write to contact@trivball.com.
What is processed, and why
Your IP address — Seen by Cloudflare, which serves the site, in order to deliver pages and to block attacks. It is not stored by Trivball, and Worker request logging is switched off, so page requests aren't retained with your address attached.
Party nicknames and room codes — When you play a party game, the nickname you type, the room code and the running scores are held by that room's server so players can see each other and scores update. Type a nickname rather than your full name if you'd rather not use one — nothing checks it.
A random player id and secret — Generated on your device, never linked to you, and used only so that refreshing your phone mid-game doesn't cost you your place or your score. The secret is what stops another player reconnecting as you.
Player searches — When you type a player's name, the text is sent to this site's server, which asks ESPN on your behalf and returns suggestions. Searches aren't logged or associated with you.
Aggregate visit statistics — Page views and performance timings, via Cloudflare Web Analytics — see below.
Email you choose to send — Only if you write to the address above.
Analytics
This site uses Cloudflare Web Analytics to count page views and measure how quickly pages load. It is privacy-focused by design: it sets no cookies, stores no identifier for you, and cannot follow you to any other website. It reports aggregate figures — how many people opened a page, and how fast it was — not individuals, and there is no way to single you out from it.
There is no Google Analytics, no advertising network, no tracking pixel, no fingerprinting and no behavioural profiling, and nothing here is used to build a picture of you or sold to anyone.
Browser storage
Everything below is stored only in your browser, is never sent to us, and uses no cookies. Clearing your site data removes all of it.
Kept until you clear it (local storage): your nickname; your game settings; your best scores and play counts per game; which games you played recently; the random id and secret described above; the code of the last room you hosted or joined, so you can rejoin it; your saved party setup choices; and whether you dismissed the "install this app" prompt.
Cleared when you close the tab (session storage): a snapshot of a run in progress, so refreshing doesn't lose the board you were on.
Game data, and what ESPN can see
Player statistics and search results are fetched by this site's server from ESPN and Wikipedia, not by your browser. Those requests come from Cloudflare, so ESPN and Wikipedia do not see your IP address or anything about you when the site looks up stats or a player search.
Player photos and team logos are the exception. They load directly from ESPN's image servers into your browser, the same way an image embedded from any other site would. That means ESPN receives your IP address and browser user-agent when a board shows photos or crests, and can see that the request came from trivball.com. We don't send them anything else, and we get nothing back about you — but we can't claim they see nothing, because they see what any image host sees.
Lawful basis
If you are in the UK or the EU, the processing above relies on legitimate interests (UK/EU GDPR Article 6(1)(f)): running a working, reasonably fast, reasonably secure game, and understanding in aggregate whether it is being used. It is the minimum needed for those purposes, none of it is used to make decisions about you, and none of it is combined into a profile.
Those rules — PECR, as the ICO applies them — are about storing or reading anything on your device, not about cookies specifically. This site does store things on your device: the browser storage listed above. So the question is not whether there are cookies, but whether each stored item is strictly necessary for something you asked for. Each one is — your settings, your scores and streaks, the room you are rejoining, and the snapshot that survives a refresh are the features themselves, not a means of watching you — and none of it is advertising, cross-site tracking or profiling. That is why you are not being asked to dismiss a banner.
How long things are kept
Party room data — deleted immediately when the host ends the room, and automatically after 6 hours with no activity if a room is simply abandoned. Nothing is archived, and once a room is swept there is nothing left to look up.
Analytics — aggregate figures are retained by Cloudflare on their own schedule; they contain no identifier for you.
Browser storage — until you clear it (or, for run snapshots, until you close the tab). It's on your device, so you control it.
Server request logs — Worker invocation logging is switched off, so the site keeps none of its own. Cloudflare retains its own operational and security logs briefly under its policies.
Who else is involved
Cloudflare hosts the site, serves every request, runs the party-room servers, provides the analytics described above, and forwards mail sent to the address on this page. Cloudflare operates a global network, so processing may take place outside your country, including outside the UK and EU, under the safeguards in Cloudflare's own data-processing terms.
The person who runs the site is based outside the UK and EU, so if you email the address on this page, that message is read there. This is the only part of the site where anything reaches the operator personally — gameplay never does.
ESPN and Wikipedia supply the sports data. As set out above, they receive your IP address only when your browser loads a player photo or team logo — never for stats or searches.
Mail sent to the contact address is handled by Cloudflare Email Routing and delivered on to a personal mailbox, so your address and whatever you write are processed by Cloudflare and by that mailbox's provider. Nothing else on this site emails anyone, and writing in is entirely optional — the games need no address at all.
There are no other third parties, and nothing is ever sold.
Your rights
If you are in the UK or the EU, you have the right to ask what is held about you, to have it corrected or deleted, to object to or restrict processing, and to receive a copy of it. Wherever you are, asking gets the same answer — write to the address above and you'll hear back within a month.
In practice there is usually nothing to hand over: there are no accounts, party rooms are gone within hours, and the rest lives in your own browser — where you can delete all of it yourself by clearing this site's data in your browser settings.
If you are in the UK and think your data has been handled badly, you can complain to the UK's regulator, the Information Commissioner's Office. If you are in the EU, your national data protection authority does the same job. We'd appreciate the chance to put it right first.
Children
Sports trivia appeals to all ages, and this site may well be used by under-18s. It is built so that this needs no special handling: there are no accounts, no advertising, no profiling, no cross-site tracking, no direct messaging between players, and nothing that asks for a real name, an age, an email address or a location. The privacy-protective settings are the only settings — there is nothing to turn off. The one piece of free text a player can enter is a party nickname, which is visible to the others in that room and is deleted with the room.
Questions
Anything about this notice, or about data you think the site is holding: contact@trivball.com. Security issues: security.txt. See also our Terms of use.
Last updated 2 September 2026.