Privacy policy

Who is responsible for your data

Tipsrundor.se is operated by Enkla Bitar AB (Swedish company registration number 5595007567), which is responsible for the personal data described here.

Data and purposes

When you sign in with Google or Facebook, we receive the account identifiers, email address and name that provider shares. We use them to create and manage your account and saved quiz walks. We also process quiz questions and answers, and technical details such as IP address, browser, device, requested pages and security logs needed to operate and protect the service. We do not ask for your date of birth.

If you send a message through the contact form, we process its contents and, if supplied, your email address to review and reply. Please do not include sensitive personal data in the form.

Legal bases

We process account and quiz data needed to provide the service to perform our user agreement (GDPR Article 6(1)(b)). We process contact messages for our legitimate interest in receiving, reviewing and replying to enquiries and reports (Article 6(1)(f)); if you ask us to take steps before entering an agreement, Article 6(1)(b) may apply. We process limited security data for our legitimate interest in protecting the service (Article 6(1)(f)). Website statistics are processed only with your consent (Article 6(1)(a)), which you can withdraw on the cookies page.

Sharing and service providers

We use Supabase for authentication and storage, Cloudflare to deliver the website, an analytics service for website statistics after consent, and Google and Meta when you choose their sign-in. Google and Meta receive data when you use their sign-in.

A quiz shared by link can be viewed by anyone with the link. Do not share links to content that should remain private.

Retention and deletion

Your account and saved quiz walks remain while the account exists. Inactive accounts do not expire automatically. You can delete your account from the account page; the account and its quiz walks are then removed from the active database. Data in provider backups or technical logs may remain under their deletion schedules.

We review contact messages at least monthly and manually delete them when the matter is resolved and the data is no longer needed.

Your rights

You can request access, correction or deletion of your personal data and, in some cases, restriction, objection or portability. You can withdraw analytics consent at any time without affecting earlier processing.

Send a request through our contact form. You can also complain to the Swedish Authority for Privacy Protection (IMY).