Politique de confidentialité

This policy explains what personal information My Company Trivia collects, why, and what you can do about it. My Company Trivia is run by IT Support 101 Inc., an Ontario corporation. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Two kinds of information

• Information organizations put into the service, such as their staff accounts, quizzes and players' results. Here we act on the organization's behalf, as its service provider. The organization decides what's collected and why, and our data processing terms apply. If you're a player or staff member, your organization's admin is usually the best first contact.
• Information about our own customers and visitors, such as the person who signs up, billing contacts, and people who use the contact form. For this, we're responsible.

What we collect

What	Why
Account details: name, email address, and a password stored only as a one-way scrambled hash	To sign you in and send service emails, like invites and password resets
Organization details: name, plan, logo, settings	To run the organization's account
Billing details: plan, renewal dates and a Stripe customer reference. Stripe handles card details; we never see full card numbers	To take payment and show billing status
Non-profit and education pricing applications: the organization's legal name, type, country, registration number, website and the proof document an admin uploads. The document is deleted 90 days after we review it	To check the organization qualifies for the discount
Quiz content and uploads: questions, pictures, video and sound. Photos have location and camera details removed when uploaded	To run quizzes
Game and training results: the nickname a player types, their answers, scores and timings, and for signed-in staff, their name	To run games, show scores and leaderboards, and give organizations training reports
Campaign details for people without an account: the name and email they enter	So their training results stay together across visits and devices
Contact form messages: name, email, company and message	To reply to you
Technical details: IP address, browser details and the time of requests	To keep the service secure, stop abuse such as password guessing, and fix problems
Visits to our public live demo games: a scrambled (hashed) marker made from your IP address and browser details, which changes every day and can't be turned back into either; your country (from Cloudflare); the kind of device (phone, tablet or computer); and the website that sent you, if any	To count how many people see, watch and join the demos, without knowing who they are. Kept for up to 2 years
Theme ratings: the stars and comment you give a theme, the site language you used, and a scrambled (hashed) form of your rating cookie	To choose which looks to keep, and so each browser has one rating per theme that it can change

We don't use advertising, we don't sell or rent personal information, and we don't use customers' content to train artificial intelligence models.

The Battle Arena

The Battle Arena is our public trivia game. Anyone can play with just a nickname. For it we keep:

What	Why
Your nickname, country flag, results, rating, season results, badges and friends list	To run battles and show the leaderboards
Your player code, and your PIN if you set one. The PIN is stored only as a one-way hash	So you can carry on as the same player on another device, and nobody else can
Your picture, if you upload one. We cut it to a small square and save it fresh, which also removes any location or camera details in the original. It shows to other players. Stock pictures are ours	To show your picture beside your name
If you switch on invite alerts: the address your browser's push service gives us. We send it only an empty signal; your browser then asks us what's new. The push service (Google, Mozilla, Apple or Microsoft, depending on your browser) sees only that a signal was sent	To tell you when a friend invites or challenges you
Scrambled (hashed) markers of your device, network and browser. They can't be turned back into your address	To keep the boards fair: spotting one person playing themselves, a second player made to preview the Daily Duel, and players who were banned

You can remove your picture (pick initials in your profile), switch alerts off, change your name or remove your PIN at any time. A site admin can remove a picture or a name that breaks the rules. To have your Battle Arena player removed completely, contact our Privacy Officer.

Cookies

We only use cookies the service needs to work:

• a sign-in cookie, which ends when you close your browser;
• player cookies, which keep you in a game if your phone reloads, and keep you in an Auto Quiz from round to round;
• a screen cookie on TVs paired with an organization's account;
• a device cookie that lasts up to two years, so the same phone is recognized as the same player in an organization's games and their scores add up on the leaderboards. It holds a random number, not your name. Clearing your browser's cookies removes it.
• a language cookie (mct_lang) that lasts one year, set when you pick a language, so the site stays in that language;
• a theme rating cookie (mct_voter) that lasts two years, set when you open our theme rating pages, so you have one rating per theme that you can change. It holds a random number, not your name.

When the home or pricing page shows an announcement pop-up, your browser remembers (in its own storage) that you've seen or closed it, so it doesn't keep coming back. That note never leaves your device.

The Battle Arena also remembers a few settings in your browser itself (sound on or off, invite alerts, the last modes you looked at). They never leave your device.

When you join a game, we note your country from your network location (provided by Cloudflare) or your phone's language setting, so a flag can show beside your name. We don't record your precise location.

We don't use analytics or advertising cookies. Cloudflare, which protects the site, may set its own security cookies, and the sign-up and contact pages use Cloudflare Turnstile to tell people from bots.

Who helps us run the service

We use these service providers. Each gets only what it needs to do its job, under its own privacy and security commitments.

Provider	What they do	Where
Contabo	Hosts our servers and database	United States
Cloudflare	Network protection, and Turnstile on the sign-up and contact pages	Global network
Stripe	Payments	United States
Microsoft	Sends our emails, through Microsoft 365	Microsoft data centers
Backblaze	Stores our encrypted backups	United States

Because our servers and some providers are in the United States, personal information is stored and processed outside Canada, and may be accessible to courts and authorities there under their laws.

We may also disclose information if the law requires it, or to protect the safety and security of the service and the people who use it.

How long we keep it

• Accounts and organization data: while the account or organization exists. When an organization is deleted, its data is removed from the live service straight away.
• Self-paced attempts that were started but never finished: 30 days.
• Battle Arena: results, ratings and answers stay while your player exists; the question text of each battle is cut down after 30 days. An uploaded picture is deleted when you replace or remove it, and an alert address when you switch alerts off or your browser drops it. Old challenges and hosted rooms: 7 to 30 days.
• Uploads that aren't used in any quiz: 7 days.
• Email links for sign-up and password resets: they expire within 24 hours and are removed within a week.
• Records used to stop abuse, such as repeated sign-in attempts: 1 day.
• Encrypted backups: up to 12 months, after which they're deleted automatically.

How we protect it

Connections are encrypted with HTTPS. Passwords are stored as one-way hashes. Each organization's data is kept separate, and people only see what their role allows. Backups are encrypted before they leave our server. Access to our servers is limited to the people who need it, using key-based sign-in rather than passwords.

Your choices and rights

• See or correct your information: you can change your name and password under Your account, and ask us for a copy of what we hold about you.
• Delete: you can delete your own account under Your account, and an admin can export or delete their organization's data under Your data.
• Withdraw consent: you can stop using the service at any time. Some information may need to be kept for legal or billing reasons.

To ask about any of this, contact our Privacy Officer at [email protected], or write to us at the address below. We'll reply within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

Children

My Company Trivia is made for workplaces. It isn't aimed at children under 13, and players join with just a nickname.

Changes

We'll post any changes here with a new date, and give customers notice by email or in the service for changes that matter.

Contact

Privacy Officer, IT Support 101 Inc.
91 King Street East, Suite 135, Bowmanville, Ontario L1C 5E2, Canada
[email protected]