Privacy Policy

Last updated: 2026-08-31

Squillz is a private, invite-only learning platform. For any questions about your data, use our contact form.

What we store

Your account: your email, your display name, a BCrypt hash of your password (never the password itself), and when the account was created. If you signed up with an invite code, we keep a record of which code you used and who issued it.

What you do here: your quiz results, and each individual answer you gave — which question, which option you picked, whether it was right, and when. That is what the progress and highscore pages are built from.

What you write: messages you post on the message board, kept with your display name, and anything you send through the contact form — including your name and email if you fill them in, and which chapter or question the message was about.

Your session: one cookie named SESSION, and a matching row in our database recording that you are signed in. It is required to log in at all, so there is no version of the site that works without it. A signed-in reader is logged out after 30 days of inactivity; an administrator after 12 hours.

What we do not store

No analytics, no tracking cookies, and no advertising of any kind. No page on this site loads anything from another company — no fonts, scripts, or images from anywhere but this server — so simply reading Squillz does not tell a third party that you were here.

We do not keep your IP address. It is used only to limit how often anyone can log in, register, search or send a message, and it is held in the running application's memory for at most an hour before being discarded. It is never written to the database.

Where it is kept

On a single server we rent from Hetzner in Helsinki, Finland — inside the EU. The database is not reachable from the internet at all; only the web front end is. Nothing is shared with, sold to, or processed by anyone else.

The database is backed up once a night to that same server, and backups are kept for 14 days. This is the one thing worth knowing about deletion: when you delete your account it is removed from the live database immediately, but it can persist in those backups until the last one containing it expires.

Your rights

You can request access, correction or deletion of your data at any time. If you have an account you can also export your data and delete your account directly from your profile page. You have the right to lodge a complaint with the Swedish data protection authority (IMY).

Quiz content is provided as-is — we make no guarantee that every question or answer is technically correct.