Skip to content
ponko
Create a quiz
← Back to Ponko

Privacy Policy

October 5, 2026

1. Who controls your data

Ponko (playponko.com) is operated by the Ponko team. For any question or request about your data, contact privacy@playponko.com.

2. What we collect

  • Account data: your email address, a securely hashed password (or your Google account email/name if you sign in with Google — we never see your Google password), and an optional nickname.
  • Quiz content: quiz titles, questions, answer options, and any image URLs you add.
  • Game data: join codes, timestamps, and settings (like shuffle or public sharing) for games you host — and, for a self-paced quiz, its deadline, the choices made when sending it (who it is for, pass mark, extra field, final ranking) and each player's progress through it.
  • Player data: the name and avatar a participant types/picks when joining a game, and, when the host of a self-paced quiz asks for it, the class, team or department they type. If that host chooses, the other players of the quiz see its final ranking (names, avatars, scores and that class, team or department) once it has closed. Joining a game doesn't require an account — this data isn't linked to any Ponko login.
  • Usage answer (optional): if you choose to answer “What will you mainly use Ponko for?”, we store your answer (teaching, training at work, studying, playing with friends or family, or other) with your account. We only look at it as totals across all users, to understand who uses Ponko and what to improve. It is never shown publicly, never shared with players, and changes nothing about how Ponko works for you. You can change or clear it at any time in Account settings. It is included in your data export and deleted with your account.
  • Local device storage: your theme, language and sound choices; the codes that let your browser control a game you're hosting, or continue a game or self-paced quiz you joined; and, to fill them in next time, the name and avatar you last joined with and the choices you last made when sending a self-paced quiz. This stays on your device and is only sent to Ponko's own servers.
  • Infrastructure logs: our hosting providers (see below) may log technical data such as IP address and browser type for security and reliability, as is standard for any web service.

Ponko uses browser storage in two ways. Strictly necessary storage — your sign-in session, your theme and language choice, the temporary code that lets your browser control a game you host, and the one that lets you continue a game or self-paced quiz you joined — is always active, because the service cannot work without it. The name, avatar and self-paced quiz choices you last used are kept only on your device, to fill them in next time. Advertising storage is asked for by Google's own consent dialog, which appears on the content pages that carry ads — the home page, the gallery, quiz pages, the blog and the FAQ. Nothing is stored for advertising and no ad is requested until you answer it, and you can change or withdraw your answer at any time using "Cookie settings" in the footer of those pages.

3. Why we process it

To provide the service you asked for (hosting/playing quizzes, your account, AI quiz generation), to keep the service secure and prevent abuse, and to improve it. We never sell your data, and we don't hand your account, quiz, or game data to advertisers. Ponko does show ads to cover the cost of free hosting: if you allow it in Google's consent dialog, Google AdSense may use advertising storage to choose what you see, and what it collects is governed by Google's own privacy policy.

4. Who we share it with

Ponko runs on a small number of infrastructure providers, who process data on our behalf:

  • Supabase — database, authentication, and file storage.
  • Anthropic — drafts quiz questions with AI. Only quiz content is sent to Anthropic's API: the topic and settings you enter when generating a quiz; the topic and the quiz's other questions when you regenerate one question; and, for a quiz drafted by AI, its title, description, language, questions and answer options (poll options excepted), together with tags already used on public quizzes, to suggest its tags, description and category — when it is saved, and again from the editor if that step has to be retried. Your account details and players' data are never sent.
  • Vercel — hosts the application.
  • Google AdSense — shows ads, and asks for consent itself through its own dialog; nothing is stored for advertising or used to personalise ads until you agree there.

These providers may process data outside your country, under their own compliance frameworks. We don't share your data with anyone else, and never sell it.

5. How long we keep it

Account data and quizzes are kept until you delete them or your account. Games you've hosted (and their players' results) are kept as a record until you delete that quiz/game or your account — deleting your account anonymizes past games instead of erasing them outright, so the people you played with keep an accurate history.

If you answer "How did it go?" after a game, your rating and comment are kept separately from the game, so they remain after the game or your account is deleted; they are not linked to your name. We quote a comment on the website only if you ticked the box allowing it, and only as written. Please don't include other people's names. To have your feedback deleted or your permission withdrawn, email us at the address above.

6. Your rights

Under GDPR and similar laws, you can:

  • Access & export your data — use "Export my data" in Account settings.
  • Correct your data — edit your nickname or password in Account settings.
  • Delete your account and data — use "Delete my account" in Account settings.
  • Object or restrict processing, or ask a question — email us at the address above.
  • Complain to a data protection authority — you can lodge a complaint with the authority in your own country. Ponko is operated from France, so ours is the CNIL (cnil.fr).

7. Children

Ponko isn't directed at children under 16. If you believe a child has given us personal data without appropriate consent, contact us and we'll remove it.

8. Security

We use industry-standard measures (encrypted connections, hashed passwords, access controls) to protect your data, but no online service can guarantee absolute security.

9. Changes

We may update this policy as Ponko evolves. The date at the top shows the last revision.