Privacy Policy

1. Information We Collect

Questy may collect the following categories of information:

Account information

• Name or display name
• Email address and account identifier
• Profile picture or avatar
• Authentication and account-creation information
• Login and session information

Order and transaction information

• Products purchased, order identifiers, and purchase history
• Transaction and payment status
• Digital product delivery status
• Refund or support information associated with an order

Where payment is handled by a third-party payment provider, card information is processed by that provider rather than stored directly by Questy.

Technical and security information

• IP address, browser type, device type, and operating system
• Session identifiers and login timestamps
• Security logs and fraud-prevention information
• Cookies and similar technologies

Questy account activity

• XP, account level, rewards, and loot chests
• Quest progress, wallet balances, and referral activity
• Promotions, preferences, and support requests

2. Social Login and Authentication Providers

Questy allows users to register or sign in using supported external authentication providers: Google, Facebook / Meta, and Discord.

When you sign in through one of these providers, Questy may receive information authorized by you and supplied by that service, including:

• A stable, provider-specific account identifier
• Name or display name
• Email address, when supplied
• Email verification status, when available
• Profile picture, when supplied

Questy uses this information to create or identify a Questy account, authenticate users, link supported login methods, prevent duplicate accounts where appropriate, maintain account security, and display basic profile information.

Questy requests only basic identity and email access for these sign-in services. It does not request access to Gmail, Google Drive, Facebook friends or posts, or Discord messages.

Questy does not sell authentication-provider user data or use it for unrelated data-brokerage purposes.

3. How We Use Information

Questy may use personal information to:

• Create, manage, and authenticate accounts
• Process purchases, deliver digital products, and maintain purchase history
• Provide customer support
• Operate XP, levels, rewards, loot chests, wallets, quests, and referrals
• Prevent fraud, detect unauthorized activity, and protect accounts and infrastructure
• Send transactional communications
• Meet legal and regulatory requirements
• Diagnose technical problems and improve functionality and reliability

Marketing communications may be sent only where permitted by applicable law and consistent with your preferences.

4. Sharing of Information

Questy does not sell users' personal information.

Questy may share limited information with service providers where necessary to operate the service, including providers responsible for payment processing, website hosting, infrastructure, email delivery, authentication, customer support, analytics, security, and fraud prevention.

Information may also be disclosed where required by a competent authority, law, regulation, court order, or similar legal obligation.

5. Data Storage and Security

Questy uses reasonable technical and organizational measures designed to protect personal information. These include HTTPS-encrypted production connections, server-validated authentication, protected session controls, and restricted access to stored information.

No Internet-connected service can guarantee absolute security. Users should protect their email and linked authentication accounts and contact Questy if they suspect unauthorized access.

6. Data Retention

Questy retains personal information only for as long as reasonably necessary to provide services, maintain accounts, process and document transactions, prevent fraud, resolve disputes, meet accounting and tax requirements, and comply with legal or regulatory obligations.

Different categories of information may have different retention periods. When information is no longer necessary, Questy may delete, anonymize, or otherwise securely dispose of it, subject to applicable legal requirements.

7. Account and Data Deletion

You may request deletion of your Questy account and associated personal information. Review the Account & Data Deletion instructions or email support@questy.tn.

Certain information may need to be retained for financial records, tax obligations, fraud prevention, dispute resolution, or other legal and regulatory obligations.

8. Cookies

Questy may use cookies and similar technologies for authentication, maintaining sessions, shopping-cart functionality, preferences, security, fraud prevention, website performance, and analytics.

Where legally required, optional analytics or marketing cookies will be used only after appropriate consent.

9. Third-Party Services

Questy may integrate with third-party authentication providers, payment providers, hosting and infrastructure providers, email providers, and support services. Your use of those services may also be subject to their own privacy policies and terms.

10. User Privacy Rights

Depending on applicable law, you may have rights concerning your personal information, including access, correction, deletion, objection, restriction, withdrawal of consent where applicable, and information about processing.

To make a privacy request, email support@questy.tn. Questy may need to verify your identity before acting on a request.

11. Children's Privacy

Questy is not intended for children below the minimum age at which they may independently use such a service under applicable law. Where parental or guardian consent is legally required, a user must not create or use an account without that authorization.

12. Changes to This Privacy Policy

Questy may update this Privacy Policy when its services, legal obligations, or data-processing practices change. The latest update date will appear at the top of this page. Material changes may be communicated to users where appropriate.

13. Contact

For privacy questions and requests: