Magical Trivia

Privacy Policy

Last updated: November 12, 2026

Who we are

Retro LLC (“Retro,” “we,” or “us”) operates Magical Trivia, an unofficial trivia app for a general audience aged 13 and older. This policy explains information handling in the current free version, including TestFlight testing. Contact support@retro.llc for privacy questions.

Information we use

  • Account information: an account identifier and credentials needed to authenticate and associate progress with your account. Sign in with Apple provides an app-specific identifier and may provide a name or email address according to your authorization. We do not receive your Apple Account password. Email sign-in uses the email address you provide and a sign-in code. We also use email to confirm an address you add or change. Sign-in codes or tokens may also be used securely to maintain or revoke your app connection, including during account deletion. Guest play creates an account without asking for a name or email address.
  • Profiles and groups: your display name and flair, group names and descriptions, membership and join requests, roles and preferences.
  • Gameplay: question and challenge identifiers, accepted answers, outcomes, scores, guess counts, completion information, and records needed to save, synchronize and recover play. Typed answers are sent to our service for checking. We also save incorrect-answer text privately with your progress, along with a fingerprint used to recognize repeated guesses. Drafts and answers awaiting synchronization may remain on your device.
  • Answer feedback: when you report an answer you think should have been accepted, we save the question reference, the answer you select and any note you submit for private editorial review. Other players cannot see these reports.
  • Question suggestions: the question, answer, explanation, category and source information you submit. Suggestions are private to our review team until editorial approval; they are not automatically published. Unsubmitted drafts remain on your device.
  • Safety reports and blocks: the people you block, reports you submit, relevant profile or group content captured with a report, and moderation decisions. We use these records to enforce blocks, investigate abuse and act on reports. They are not a public report feed, and we do not show your reporter identity to the reported player.
  • Optional usage analytics: if you choose to share usage analytics, we send PostHog information about features you use, such as opening or completing a round, using Practice filters, joining a group or playing a friend challenge. Events include a random installation identifier, timestamps, app version, build, distribution channel and limited outcomes or counts. We do not include your game account identifier, name, email, typed answers, search terms, group names or invitation links. We do not record screens or automatically capture everything you tap. PostHog receives network information needed to deliver the events, including the connection’s IP address. We configure PostHog to discard that address from stored analytics events and disable location enrichment for these events.
  • Technical information: hosting and authentication providers process IP addresses, request details, timestamps and error information needed to deliver and protect the service.

If you contact us, we receive your email address and the information you send, including any screenshots or attachments. We use it to answer your request, troubleshoot problems and maintain necessary support records. Please avoid sending passwords, payment-card details or unnecessary sensitive information.

Why we use it

We use information to provide and check trivia, save progress, operate groups and friend challenges, deliver account emails and optional social notifications, review question suggestions and answer feedback, provide support, prevent abuse, diagnose errors and maintain the service. We do not sell personal information or use it for targeted advertising.

The current version has no advertising, subscriptions or in-app purchases. With your choice to share optional usage analytics, we use PostHog to understand which features people use and improve the app. We do not connect the analytics identifier to your game account or use it for advertising. We do not track you across other companies’ apps or websites for advertising, or send your answers to a third-party generative-AI service for grading.

Providers and sharing

Supabase provides authentication, database, hosting and content delivery. Apple provides Sign in with Apple, App Store distribution and push notification delivery. Resend delivers sign-in and account-confirmation emails sent through Supabase, processing recipient email addresses, message contents and delivery information needed to send them. These services process information necessary for their functions. See Supabase’s privacy information, Apple’s privacy information and Resend’s privacy information.

PostHog provides optional product analytics through its US-hosted service. It processes the limited usage events described above when you enable them. See PostHog’s privacy information.

When security verification is required, such as for guest or email sign-in, Cloudflare Turnstile processes browser, device and network signals (including IP address) to help distinguish legitimate use from automated abuse. The verification web view may use cookies or browser storage needed for the challenge. We do not put your Magical Trivia account identifier, trivia answers or sign-in session into the verification page. It is a security service, not an advertising feature. See Cloudflare’s Turnstile Privacy Addendum. Verification is used only when this feature is enabled.

Members of your groups can see your display name, flair, membership, daily scores and which questions you answered correctly, incorrectly or revealed. Correct and accepted answers, and any incorrect answers you choose to share, are visible after the viewer finishes that day’s challenge or when viewing a past day. Incorrect-answer sharing is off by default. Turning it on lets eligible group members see your saved incorrect answers. Turning it off hides them without deleting your private history; turning it back on shares the saved answers again. Older text that was never saved or was already removed cannot be restored. Blocking, membership and moderation controls still limit access. Do not put private information in a display name or group description. We do not access your address book.

In a private friend challenge, participants can see each other’s display name, flair and progress. After both finish, they can compare scores and which questions each player answered correctly, incorrectly or revealed. Incorrect-answer sharing is off by default. If a player turns on Share my incorrect answers in Profile, their opponent can also see their saved incorrect answers after both finish. Turning sharing off hides that text without deleting private history; turning it back on shares the saved answers again. Blocks and moderation controls still limit access. Challenge invitation links let a recipient preview and join the challenge, subject to invitation, membership and block controls.

Blocked players are left out of each other’s group score views. If you block a group owner, they can still see an unnamed member entry and that you blocked them, so they can manage membership. They do not receive your current nickname, flair or answers through that entry. You can see the nickname saved when you blocked someone to help you choose the right person to unblock. Safety reports remain private; other players cannot see who sent a report.

When you share results, the system share sheet sends the information to the people or services you choose. The result card contains the result and question categories or movie titles, not question wording. Approved trivia suggestions may be published as app content; the published trivia can remain after deletion of its contributor’s private account and submission record.

We may disclose information when required by law or when reasonably necessary to protect people, prevent fraud or abuse, or secure the service. If the service changes ownership, personal information may transfer with it subject to applicable law and notice requirements.

Your device, widgets and reminders

Settings, cached questions, progress and drafts remain on your device to support responsive and interrupted or offline play. Sign-in sessions use Apple’s Keychain. The widget shares public question previews with the app; it does not receive your sign-in session or private scores.

Daily reminders are scheduled on your device at the time you choose. Manage them in the app or iOS Settings.

If you enable Group notifications, we store your device’s notification token and an installation identifier associated with your account. Our service uses Apple’s push notification service to send group updates, such as join requests and approvals, and friend-challenge updates, such as an invitation or results becoming ready. You can turn Group notifications off in Profile or iOS Settings. Group notification text can include the group’s name; friend-challenge notifications can include a participant’s display name and question count. Notification text does not include answers or invitation links. Playing trivia does not require location, contacts, camera or microphone permission.

Retention and account deletion

We retain your account and saved gameplay while needed to provide the account and its history. To delete them, open Profile → Account & sign-in → Delete account. This removes the account and associated private profile, gameplay, membership and submitted-question records from the active app database. If you are a group’s only owner and other members remain, transfer ownership or delete the group first. A transferred group may remain for its members. Reports submitted by other people may retain the reported content and related moderation decisions after a reported account is deleted, where needed to investigate abuse, protect the service or meet legal obligations; they are restricted to authorized review staff.

Signing out or uninstalling is not account deletion. Uninstalling does not delete your server account and may leave a credential in Keychain. Guest progress may become inaccessible if you lose the guest session before linking an Apple account or adding email access. If you cannot access the app, contact support for help with deletion.

For older accounts without a stored Apple authorization token, the app provides instructions for stopping Sign in with Apple in Apple Account settings after account deletion. For accounts with a stored token, the service revokes that authorization as part of deletion. If a temporary service error prevents completion, the app shows an error so you can retry or contact support.

The app discards unsent analytics events older than seven days when it next runs or attempts delivery. Its limited queue may discard older events sooner. Our PostHog project is configured to retain analytics events for two years. Expired events are removed through periodic cleanup, so deletion may happen after that period. PostHog’s operational records and backups follow its service and backup practices.

We retain information for the purposes described here, considering whether you still use the relevant service, unresolved support requests, security needs and applicable legal obligations. Service-provider logs and recovery backups follow separate retention cycles. Removing information from an active system does not necessarily remove every backup copy immediately. Contact us to ask about retention or deletion for your situation.

Your privacy choices

Usage analytics is off until you enable it. Change your choice on this device in Profile → Privacy → Share usage analytics. Turning it off stops collection and discards unsent events. A request already received by PostHog cannot be recalled by this switch, and events already sent are not automatically deleted when you disable analytics or delete your game account. We keep this analytics identifier separate from your game account. Contact support@retro.llc with questions about previously shared analytics or deletion requests.

Depending on where you live, you may have rights to access, correct, obtain a copy of, delete or restrict the use of your personal information; object to certain processing; withdraw consent for future processing; or appeal our response. You may also complain to your local privacy regulator. Contact support@retro.llc to make a request. We may ask for information needed to verify your identity or authority to act for another person. We will not penalize you for exercising applicable privacy rights.

Where a legal basis is required, we process information to provide the service you request, pursue legitimate interests such as security and support, comply with legal obligations, or act on your consent where required. Withdrawing a permission may prevent the related feature from working.

You can edit your profile, leave a group, manage reminders and Group notifications, choose whether to share incorrect answers, and delete your account. We do not use automated decisions about you that produce legal or similarly significant effects; automated trivia scoring determines game results only.

Security and international processing

We and our service providers may process information in countries other than your own. Privacy protections may differ between countries. You can contact us for information about the providers and safeguards applicable to your information. No internet service or device is completely secure; we use safeguards appropriate to the information and service.

Children

Magical Trivia is intended for people aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Do not provide someone else’s personal information, especially a child’s, in a profile, group or trivia suggestion. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. Where local law requires parental permission for an older minor, that permission is required.

Changes and contact

We will update this page as practices change and provide additional notice or seek consent when required for a material change. The date above identifies this revision.

Privacy and support: support@retro.llc. See also our Terms of Use and website privacy notice.