Privacy, in plain language

Who Knows Me? is a playful friendship quiz. The short version: we ask for a nickname and nothing else, we keep analytics to privacy-safe counters, the only cookies are your owner credentials and a short-lived referral marker, and you can delete your content completely at any time.

What you give us

The only personal content you ever enter is a nickname of one to 24 characters, when you create a quiz or play one. We never ask for an email address, phone number, contacts, precise location, social account, or any other identifying information — and the reviewed question bank is built so answers never reveal them either.

What is visible to other people

Quiz and result pages are reachable by anyone holding the link, and they show:

Creator and player nicknames, and the quiz questions with their options.
A public leaderboard listing the top ten attempts: nickname, score out of ten and completion time.
A result page shows the player's nickname, score, verdict tier and result line.

Per-question answers are not public. Each player can review only their own attempt after submitting, and only the quiz owner — the browser that created the quiz — can see attempt details. There is no account directory and no way to list quizzes; unlisted links are the only path in.

Analytics: first-party and privacy-safe

We measure how the site is used with a first-party events table. Each event records an event name, a timestamp and, where relevant, the related quiz ID or attempt ID plus small allowlisted fields. Event records contain no nicknames, answers or tokens, are retained long-term to compute trailing-window metrics, and are never rewritten when a quiz or attempt is later deleted. We record 16 event types:

Purpose	Event names
Quiz and result pages	`quiz_view, result_view`
Creating and playing	`quiz_create_start, quiz_create_complete, quiz_play_start, quiz_attempt_complete`
Sharing and referrals	`share_click, share_success, share_cancel, link_copy, image_download, ref_visit, ref_play_start, quiz_create_from_ref`
Safety and owner actions	`report_submit, owner_delete_attempt`

Nicknames, answers, owner tokens, report text and any other personal content are never written to analytics. Share and referral measurements only use fixed allowlisted values for channel, format and variant — arbitrary tracking parameters are discarded, not stored.

Cookies

Exactly two kinds of cookie exist on this site, and no tracking or advertising cookies:

Cookie	Purpose	Lifetime
`wk_owner_<quiz>`	Your owner credential for one quiz. HttpOnly, Secure, SameSite=Lax. Without it the site cannot prove you are the owner, so keep the browser you created the quiz in.	1 year
`wk_ref`	Short-lived referral attribution, set only when you arrive from a valid shared link. HttpOnly, Secure, SameSite=Lax.	30 minutes

The owner token inside the cookie is a random secret; the server stores only its SHA-256 hash. The token never appears in share links, share images, analytics or logs.

Owner credentials and losing them

There are no accounts, so there is no password reset. Owner management lives entirely in your browser's cookie: if you clear cookies, switch browsers or lose the device, owner access to that quiz is gone, by design — there is no recovery in this version. Create from a browser you expect to keep.

Deletion and what survives it

The owner can delete any individual attempt, or a whole quiz with all its attempts, at any time from the owner page. Deletion purges personal content immediately: nicknames, scores, answers, share variants, question snapshots and the owner token hash are removed, and the old pages, API responses and share images return 410 Gone instead of resolving.

What survives deletion is a minimal, non-personal tombstone used only to answer "was this here, and is it now gone?": the resource ID, a deleted status and created/deleted timestamps. Tombstones never appear in leaderboards, results, analytics or public pages.

Reporting a quiz or result

Every quiz and result page carries a report entry. A report records the target (a quiz or a result), a reason from a fixed list and a short optional note for human review. We do not ask for or store reporter identities, reports are not public, and review outcomes are applied without announcement.

Children

The service is intended for players aged 13 and older and is not directed at children under 13. The question bank and flows are designed to never ask anyone — including minors — for sensitive data, contact details or precise locations. If you believe a child under 13 has posted personal content, report the quiz or result and it will be reviewed and removed.

What we never do

No sale, rental or trading of data — there is nothing here worth selling, and we wouldn't sell it anyway.
No third-party advertising or cross-site tracking scripts.
No email collection, no newsletters, no notifications.