Privacy
Dokimasia is a small trivia game. It shows no advertising, sells nothing about you, and sets cookies only if you say yes to its visit counter — refusing changes nothing about play. Accounts are optional and pseudonymous. This page explains the little that does happen, as required by the EU General Data Protection Regulation (GDPR).
Who runs this site
Paris Paraskevas, Larissa, Greece. Contact: [email protected].
Hosting
The site is served by Cloudflare Pages (Cloudflare, Inc.), acting as our processor. Like any web server, Cloudflare briefly processes technical data such as your IP address and browser type in order to deliver pages and protect against abuse (legal basis: legitimate interest, Art. 6(1)(f) GDPR). We do not receive or keep this data ourselves. Cloudflare may process data outside the EU under its data processing addendum, which includes the EU Standard Contractual Clauses.
Measurement (only with your consent)
If — and only if — you choose "Allow the count" on the consent card,
the site uses Google Analytics 4 (Google Ireland Ltd., as our
processor) to measure visits: pages seen, approximate region, device
type. This sets Google cookies (_ga, _ga_…,
lifetime up to 13 months) on this site only (legal basis: consent,
Art. 6(1)(a) GDPR, withdrawable at any time via the "Cookies" link in
the footer — withdrawal also deletes the cookies). We have switched
off advertising features; data may be processed by Google under the
EU–US Data Privacy Framework and standard contractual clauses. Until
you choose — and whenever you refuse — the tag runs in a cookieless
mode: it sets and reads nothing on your device and sends Google only
anonymous consent-state signals (legal basis: legitimate interest,
Art. 6(1)(f) GDPR); cookies and measurement proper begin only with
your consent, and the site works identically either way.
Verification and password-reset letters are delivered by Resend (Resend, Inc.), acting as our processor from EU infrastructure (Ireland). Resend processes the recipient address and the message solely to deliver it (legal basis: performance of the service, Art. 6(1)(b) GDPR). We send mail only when you ask for it — a verification or a reset — never marketing.
Fonts
All fonts are served from this site itself. No request is made to Google Fonts or any other third-party service.
Stored on your device
Your best scores (dokimasia:best), per-question practice statistics
(dokimasia:stats), your daily-examination result and streak
(dokimasia:daily), your progress in The Word (dokimasia:word),
your duel streaks (dokimasia:duel), the sides you took in The
Dilemma (dokimasia:dilemma),
your points ledger and honours (dokimasia:points, dokimasia:honours),
your weekly Labour progress (dokimasia:labours), whether you have seen the welcome tour and the storage notice (dokimasia:induction, dokimasia:notice), your sound-effects preference (dokimasia:sfx) and, if you sign in,
your session (dokimasia:account) and a sync bookmark
(dokimasia:sync-updated) are kept in your browser's
localStorage. If you play as a guest, none of it ever leaves your
device and we cannot see it; if you sign in, scores and practice statistics
sync to your account as described below. You can remove the local copy at any
time by clearing this site's data in your browser.
Challenge links
When you copy a challenge link, your score is encoded in the link itself. It is shared only with the people you choose to send it to.
The Dilemma
When you answer a "would you rather" dilemma, the site increments one anonymous counter for the side you chose — two numbers per question, nothing else. No account, identifier, timestamp or address is stored with the counter, whether you are signed in or not. Which sides you took is remembered on your own device and, if you sign in, inside your account's private sync data so your other devices don't ask you the same dilemma twice — it is never connected to the public tally.
Optional accounts
You can use the whole site without an account. If you create one (to sync devices or compare scores), we store: your username, a salted hash of your password (PBKDF2 — we cannot read it), an email address only if you choose to add one (usable for sign-in and recovery once you confirm it via the verification link we send), your Google account id if you sign in with Google (Google tells us your name and email; no Google password ever touches us), your display name, a generated alias, a friend code, sign-in sessions (expire after 180 days), your daily-examination scores, streaks and completion times, your results in The Word, your duel streaks, the sides you took in The Dilemma, your practice statistics, your group memberships, your friend links and any gauntlets (friend-to-friend challenge rounds: the round's makeup and both scores, visible to the two of you). No other identifiers (legal basis: performance of the service you requested, Art. 6(1)(b) GDPR). Data is stored in Cloudflare's D1 database in the Western Europe region.
Visibility: your display name and daily scores are visible to members of groups you join and to friends you link with (friendships are created by exchanging friend codes, or — only if you switch on "findable by username", which is off by default — by someone typing your exact username and you accepting their request; being findable reveals nothing beyond your name answering to that username). Nothing is public unless you switch on publishing (below).
The public leaderboard (opt-in)
Publishing is off by default. If you turn it on, your daily score, completion time and streak appear on the public global board under either your display name or your alias — your choice (legal basis: consent, Art. 6(1)(a) GDPR, withdrawable at any time). The name shown is a snapshot taken when each result is submitted. Switching publishing off stops future results from appearing; deleting your account removes all of them immediately.
The Account page gives you self-service export (download everything we hold about you as JSON), deletion (removes your account and every attached record immediately and irreversibly) and merging (folds an old account you prove you own into your current one, deleting the old account in the process).
Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. If you play without an account we hold no personal data about you at all. With an account, the export and deletion tools on the Account page answer most requests instantly and without asking us — for anything else, write to the address above.
Last revised 12 June 2026 — measurement is now Google Analytics 4, by consent only.