Privacy.

Updated October 29, 2026

Who operates Trivia Deck

Trivia Deck is operated by Code Canvas Studio LLC, doing business as Trivia Deck. For privacy questions or requests, email support@triviadeck.app.

Visiting this website

The public pages do not ask you to create an account or submit a form. The website application does not set cookies, use local storage, or load advertising or analytics. Fonts, images, and styles are served from this website.

Your browser sends technical information needed to deliver pages, such as your IP address, requested URL, and browser information. Hosting and network providers may process this information for delivery, security, and troubleshooting. We use Cloudflare for DNS and email forwarding. If Cloudflare’s web proxy is enabled, it also processes website traffic. Proxy and hosting configuration can affect what technical records are kept.

Contacting support

If you email us, your email provider, Cloudflare’s forwarding service, and our inbox provider process the message. We receive your address and whatever information you include so we can answer your question and investigate problems. Send only information needed for your request, and do not send sign-in codes or credentials.

Accounts and backups

The public website does not sign you in or access your backups. Connected features in the desktop app use a separate accounts API. That service uses Supabase for authentication and account data, Resend for automated email, and Backblaze B2 for supported media storage.

When you use connected features, information can include your email, account identifier, registered computer details, and show or session data you choose to back up. Media backup depends on the features available to your account. Local show content is not uploaded by visiting this website.

Signing in with Google or Discord

When offered on the sign-in page, you can choose Google or Discord instead of an email code. Supabase handles authentication with the provider you choose. Information shared for sign-in can include a provider account identifier, email address and verification status, and basic profile information such as a display name or profile image. Our account service uses your account identifier and email to connect you to your Trivia Deck account, registered computers, and backups. We do not receive your Google or Discord password.

We request basic identity and email access for sign-in. This sign-in integration does not request access to your Google mail or Drive files, Discord messages, or Discord server administration. Signing in with the same verified email may link the provider to an existing account through Supabase. Using a different email can create a separate account.

The provider and Supabase process sign-in requests under their own terms and privacy notices. They may use cookies or similar technologies on their authentication pages. See Google's privacy policy, Discord's privacy policy, and Supabase's privacy policy. The available sign-in choices can differ between development, testing, and public releases.

Sign-in and browser storage

The separate account sign-in page uses browser session storage during social sign-in to hold a temporary security verifier and the details needed to return you to the desktop app. This storage is used to complete the sign-in you requested, not for advertising or analytics. The sign-in attempt is valid for up to ten minutes. The stored entry is removed when the provider returns to the sign-in page or when a new app sign-in starts in that tab. If you abandon the sign-in, the entry can remain in the tab's session storage until a later attempt removes it or your browser clears that storage.

The sign-in page holds the authentication access token in memory while completing the desktop handoff; it does not save that token in browser local storage. The desktop app receives a separate computer token, stored using the app's credential storage, so it can remain signed in until you sign out or the computer's access is revoked. You can use your browser's controls to clear stored site data; disabling required browser storage can prevent social sign-in from completing. Email-code sign-in remains an alternative.

Questions, access, and deletion requests

Contact us if you have a question about your information or want to request access, correction, or deletion. You can also change your account's email or delete your account yourself, from the Account page in the app; a deleted account is erased for good 30 days later, with its backups. We may need to verify that the request concerns your account. Please identify whether your request concerns a website visit, a support message, or your account and backups so we can handle it appropriately.

Updates

We will update this page as the website and connected services change. The date above identifies the current text.