Otoke? (“Otoke?”, “we”, “us”) is a tool for live audience Q&A, polls and quizzes. This policy explains what information we collect when you use Otoke?, how we use it, and the choices you have. We've kept it as short and plain as we can.
1. Information we collect
If you host
- Account details. Your email address and password. Passwords are handled by our authentication provider and stored only in hashed form, so we never see them.
- Room content. Room names, questions, poll options, quiz answers and timers, and the password you set for each room. Room passwords are stored only as a salted hash.
If you join a room
- Your answers. The text you submit, your poll and quiz choices, and quiz points.
- A display name, if you give one. It's optional for open questions. Quizzes ask for a nickname so it can appear on the leaderboard.
- A random device ID. Your browser creates a random ID for each room you join. We use it to count one vote per device and keep your quiz score together. It isn't linked to your name, email or identity.
The host can read everything you submit, so please don't include sensitive personal information in your answers.
Collected automatically
When you visit, our hosting provider processes technical information such as your IP address, browser type and request logs, which is needed to deliver the site and keep it secure. We don't use analytics, advertising or cross-site tracking tools.
2. How we use information
- To run Otoke?: create rooms, deliver questions, collect and show answers, and calculate quiz scores and leaderboards.
- To keep accounts and rooms secure, including checking that only the right people can manage a room.
- To maintain, fix and protect the service, and to prevent abuse.
- To understand overall usage, such as the number of rooms and answers, so we can improve Otoke?.
- To contact hosts about their account and about important changes to the service.
We don't sell your information or use it for advertising.
3. Who can see your information
- The host of a room can see every answer submitted to that room, including any display name.
- The audience sees only what the host chooses to reveal on the presentation screen, such as selected answers, poll results or the quiz leaderboard. Participants never see each other's answers on their own phones.
- Service providers that help us run Otoke?, described below.
- Authorities, if we're required to by law or need to protect the rights and safety of our users or others.
- A buyer or successor, if Otoke? is ever involved in a merger or sale. This policy would continue to apply to your information.
4. Service providers
We rely on a small number of providers that process information on our behalf, only to provide their service to us:
- Supabase stores our database and handles account sign in.
- Vercel hosts and delivers the website.
- GitHub stores our nightly database backups in a private repository.
- Google Fonts serves our typefaces. When your browser downloads them, Google receives your IP address and browser details.
These providers may store and process information in countries other than your own.
6. How long we keep information
- Rooms, questions and answers are kept until they're deleted. Hosts can delete a question, along with its answers, at any time from the host console.
- Whole rooms and accounts can be deleted on request. Contact us and we'll delete them within 30 days.
- Server logs are kept by our hosting provider for a limited period.
- Backups: a copy of the database is made every night and each copy is kept for 30 days, so deleted information can remain in a backup for up to 30 days before it's gone for good.
7. Security
All traffic to Otoke? is encrypted with HTTPS. Account passwords and room passwords are stored only as hashes, and access to our database is restricted. No online service can be perfectly secure, but we work to protect your information and will act quickly if something goes wrong.
8. Your choices and rights
Wherever you live, you can ask us to:
- Give you a copy of the information we hold about you.
- Correct information that's wrong.
- Delete your information or your account.
- Limit or object to how we use your information.
Email us at [contact email to be added] and we'll respond within 30 days. We may need to confirm your identity first. Because participants don't give us an email address, it helps to include the room code and the text of your answer so we can find it. You can also ask the host of the room to delete your answer.
9. Children
Host accounts are for people aged 16 and over. Participants of any age can join a room without an account, and we don't ask them for anything beyond an optional display name. If you run Otoke? with children, such as in a classroom, you're responsible for any permissions your school or local law requires. If you think a child has shared personal information with us that they shouldn't have, contact us and we'll delete it.
10. Changes to this policy
If we change this policy, we'll update the date at the top of this page. For significant changes, we'll also let hosts know by email or with a notice on the site.
11. Contact us
Questions or requests about your privacy? Email [contact email to be added].