Privacy notice
My Game Results is a service that shows live results of Loquiz games — scoreboards, maps and photo walls — for the organisations that run those games. This notice explains what personal data the service handles, why, for how long, and what you can do about it.
Who is responsible
- Client accounts: Christiansen Consulting OÜ is responsible (the “controller”) for the data of the organisations that have an account.
- Game results: the organisation that ran your game (the event organiser) decides what is collected in Loquiz and what is shown. For that data we act on the organiser's behalf (as a “processor”). If you played in a game, the organiser is your first contact — we will help them answer you.
What data is handled
- Client accounts: username, password (stored only as a one-way hash), company name, country, subscription dates, an optional email address, the Loquiz API key (stored encrypted), logo and brand colour, and saved page setups.
- Security records: failed sign-in attempts with the IP address, and a log of sign-ins and account actions with the IP address.
- Game results shown on result pages: team names, team members' names where the organiser entered them in Loquiz, scores and statistics, and photos or videos submitted during the game. These are read live from Loquiz each time a page is shown; the service does not keep its own copy of them. Saved setups store page settings only (for example which game, the title, and which photos to leave out).
Why
- To provide the service the organiser has signed up for (contract): accounts, sign-in, result pages.
- To keep the service secure (legitimate interest): limiting sign-in attempts and keeping an activity log.
- To send account emails when an email address is on file (contract): invitations, password resets and subscription reminders.
Public result links
An organiser can share a result page as a public link. Anyone who has the link can open it, so organisers should share it only with the intended audience. Public links:
- expire after the period the organiser chooses (1 to 30 days) and can be turned off at any time;
- receive only what the page actually displays — the content of answers, hidden photos and test plays never reach the viewer's browser; team members' names only if the organiser chose to show them;
- set no cookies and are marked so that search engines do not index them.
Cookies and browser storage
- Signed-in users get one session cookie, which is necessary for signing in. It is removed when you sign out or close the browser.
- Some result pages keep their own settings in your browser's local storage, on your device only.
- Public links set no cookies.
- The Media Gallery page — for signed-in users and on its public links — uses Google Firebase for emoji reactions: it gives the browser a random anonymous Firebase identifier (kept in the browser's storage, not in a cookie) and stores reaction counts per game and photo.
Who else is involved
- Zone (Estonia, EU) — hosting of the service and sending of account emails.
- Loquiz (EU) — the game platform the results come from. Photos and videos are loaded by your browser directly from Loquiz's file storage, so that storage sees your IP address.
- Google Firebase — Media Gallery reactions only. Google may process this data outside the EU; such transfers rely on the EU–US Data Privacy Framework and standard contractual clauses.
- If a Live Map uses the built-in example map image, the image is loaded from Wikimedia Commons.
Fonts and page scripts are served by this service itself; no data is passed to font or script providers.
How long data is kept
- Failed sign-in records: 24 hours.
- Activity log: 12 months.
- Public links: deleted 90 days after they expire.
- Password-reset and invitation links: until used or expired.
- Client accounts: for as long as the account exists. When an account is deleted, its setups, public links, logo and activity-log entries are deleted with it.
- Game results: kept in Loquiz under the organiser's Loquiz account and settings, not by this service.
Your rights
You can ask for access to your personal data, and for it to be corrected, deleted, restricted or handed over to you, and you can object to its use. Write to apps@christiansen.ee. If you played in a game, you can also ask the event organiser directly — for example to have a photo removed from the results.
You can also complain to a data protection authority: in Estonia the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or the authority in the country where you live.