At Strada Arena, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. This policy applies to all users of our educational quiz platform, including free and paid subscribers.

Effective Date: September 15, 2025
Last Updated: September 15, 2025

Alpha Preview Notice

During the alpha phase we are actively validating new features and instrumentation. Diagnostics, logging, and analytics may be more verbose than they will be at general availability so we can monitor stability. We never sell your data, and any temporary debugging insights are purged once they are no longer needed. You may request deletion of personal data at any time through account settings or support.

1. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, such as:

• Account information: username, email address, password (encrypted)
• Profile information: display name, bio, avatar, country
• Quiz performance: responses, scores, time taken, accuracy rates
• Learning data: bookmarks, notes (up to 500 characters), progress tracking
• Social interactions: friend connections, duel challenges, achievements earned
• Subscription information: plan type, billing history, payment methods (via Stripe)
• Communications: support tickets, feedback, survey responses

Usage Information

We automatically collect certain information about your device and how you interact with our service:

• Device information: IP address, browser type, operating system
• Activity data: pages visited, features used, session duration
• Quiz analytics: question response times, accuracy patterns, weakness areas
• Feature usage: game modes played, categories explored, social features used
• Performance metrics: loading times, error logs, crash reports

Public Information

Certain information is publicly visible to other users:

• Username and profile picture
• Leaderboard rankings and scores
• Achievements and badges earned
• Public duel results
• Friend connections (if privacy settings allow)

2. How We Use Your Information

We use the information we collect to:

• Provide core platform features: quizzes, categories, game modes
• Process subscriptions and payments through Stripe
• Personalize learning: track progress, identify knowledge gaps, recommend content
• Enable social features: friends, duels, leaderboards, achievements
• Generate analytics: performance reports, learning insights, weakness analysis
• Manage bookmarks and notes within subscription limits
• Send notifications: achievement unlocks, friend requests, duel invitations
• Provide customer support and respond to inquiries
• Enforce Terms of Service and prevent abuse
• Improve our algorithms and content recommendations
• Comply with legal obligations and resolve disputes

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share your information in the following situations:

• With your consent or at your direction
• To comply with legal obligations
• To protect the rights, property, and safety of Strada Arena and our users
• With service providers who assist in our operations
• In connection with a merger, sale, or acquisition of all or a portion of our business

4. Data Storage and Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account data: Retained while account is active plus 30 days after deletion
• Quiz performance: Retained indefinitely for learning analytics
• Payment records: 7 years for tax and accounting purposes
• User content (notes, bookmarks): Deleted immediately upon request
• Support communications: 2 years for quality assurance

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing using bcrypt
• Regular security audits and penetration testing
• Access controls and employee training
• PCI compliance for payment processing via Stripe
• Regular backups and disaster recovery procedures

Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security of your information.

6. Your Rights and Choices

You have the right to:

• Access: Download your data via account settings
• Correction: Update profile information anytime
• Deletion: Delete account and associated data
• Portability: Export quiz history and performance data
• Privacy controls: Manage visibility of profile, achievements, and social connections
• Communication preferences: Opt-out of marketing emails
• Cookie preferences: Manage via browser settings

To exercise these rights, contact us at privacy@stradaarena.com or use the tools in your account settings.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our platform. Our use of cookies is governed by your consent preferences, which you can manage at any time.

Cookie Categories

• Essential Cookies (Always Active):
  • cookie_consent: Stores your cookie preferences (1 year, Secure on HTTPS)
  • access_token: Maintains your login session (HttpOnly, Secure, Session)
  • refresh_token: Allows secure session renewal (HttpOnly, Secure, 30 days)
• Functional Cookies (Optional):
  • strada_visitor_id: Provides personalized experience and remembers preferences (HttpOnly, Secure, 1 year)
• Analytics Cookies (Optional):

  Help us understand usage patterns and improve our services

• Marketing Cookies (Optional):

  Used to deliver relevant content and measure effectiveness

Managing Your Cookie Preferences

You have full control over your cookie preferences:

• Access our Cookie Settings page to manage your preferences
• Accept or reject specific cookie categories
• Change your preferences at any time
• Use browser settings for additional control

Note: Disabling certain cookies may limit functionality. Essential cookies cannot be disabled as they are necessary for the website to function properly.

8. Advertising

We display sponsored content and promotional messages from selected partners to help keep Strada Arena free for the community. Advertising is served directly by us or through trusted partners who follow the same consent requirements outlined in this policy.

How Our Ads Work

• Personalized Ads: With your marketing consent, we may tailor ads based on your interests and usage on Strada Arena.
• Standard Ads: Without marketing consent, you will only see generic, non-personalized promotions or no ads at all.
• Ad-free Experience: Premium subscribers enjoy an ad-free product experience.
• Limited Tracking: We avoid third-party trackers when consent is not granted and honor all opt-out choices.

Your Ad Choices

• Manage ad personalization through our cookie consent settings at any time.
• Use browser-level controls or private browsing modes to limit tracking technologies.
• Learn more about industry opt-out programs at Digital Advertising Alliance.

We do not rely on Google AdSense or similar third-party ad networks. Ads are hosted and audited internally to ensure they comply with our content standards and your consent preferences.

9. Third-Party Services

We integrate with trusted third-party services:

• Stripe: Payment processing (PCI compliant)
• Advertising partners: Delivery of sponsored placements and promotions
• Analytics providers: Usage analytics and performance monitoring
• Cloud hosting: Data storage and content delivery
• Email services: Transactional and marketing communications

These services have their own privacy policies. We recommend reviewing them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this policy.

11. Children's Privacy

Strada Arena is not intended for children under 13. We do not knowingly collect personal information from children under 13. Users between 13-18 should have parental consent. If we learn we have collected information from a child under 13, we will delete it promptly. Contact us at privacy@stradaarena.com to report underage users.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete information, the right to opt-out of sales (we do not sell personal information), and the right to non-discrimination. Contact us to exercise these rights.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with supervisory authorities. Our legal basis for processing is consent, contract fulfillment, and legitimate interests.

14. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Data Protection Officer:
Email: privacy@stradaarena.com
Address: Strada Arena, Inc.
Attn: Privacy Department
[Your Address Here]

For general inquiries: support@stradaarena.com
Response time: Within 30 days for privacy requests