Back

Privacy Policy

Last updated: 12 July 2026

Zip Blitz is a daily trivia game operated by Modern Labs LTD, a company registered in England and Wales. Each day has five speed-quiz rounds that get progressively harder, with daily and all-time leaderboards, live head-to-head multiplayer, friends, and streaks. This policy explains what data we collect, why, and how you can control it.

What we collect

When you first open Zip Blitz, we create an anonymous account for you automatically. This is a pseudonymous identifier — it is not linked to your name or email, and you don't have to do anything to set it up. It lets the game save your progress, record gameplay analytics, and (on the mobile app) register for notifications even before you choose to sign in. Your game results are also stored locally on your device. When you later sign in, this anonymous account is upgraded in place to your real account, so nothing you've played is lost.

When you create an account we store:

How you sign in

You can sign in with Google, Apple, or a magic link sent to your email. When you use Google or Apple sign-in, we receive only your name and email address from those services. We do not access your contacts, calendar, or any other data from your Google or Apple account.

How we use your data

We use your data to:

We may share data with the service providers and partners described in this policy (such as our hosting, analytics, error-monitoring, subscription, and — where applicable — advertising partners) so they can perform these functions on our behalf. We will always handle your data in line with this policy and applicable law, and we will update this policy before introducing any materially new use of your data.

Friends

The friends feature lets you add other players and see how you rank against them on the daily leaderboard. A friendship is mutual — both players must accept before either can see the other in their friends view. We store each accepted connection as a record linking the two account IDs. You can remove a friend at any time from their profile, which immediately deletes the connection from our servers.

When you share your profile link with someone, it opens your public profile page where they can choose to send a friend request. We do not notify anyone outside the app or share your link with third parties.

Subscriptions and payments

Zip Blitz Plus is an optional paid subscription available in the iOS app. All payments are processed by Apple through your App Store account — we never see or store your card details, billing address, or any other payment information. Apple shares with us only whether your subscription is active.

We use RevenueCat to manage subscription status. RevenueCat acts as our data processor and receives a pseudonymous account identifier plus the subscription state Apple reports, so the app knows whether to unlock Plus features. RevenueCat does not receive your payment details either. You can manage or cancel a subscription at any time in iOS Settings → Apple ID → Subscriptions.

Push notifications

On the iOS app you can choose to receive push notifications — for example, a daily reminder when the new quiz goes live, a nudge when your streak is at risk, or an alert when a friend challenges you. If you enable them, we store a device notification token (provided by Apple Push Notification service), your time zone, and your preferred send time so reminders arrive at a sensible local hour. You can turn notifications off at any time in the app's Notifications settings or in iOS Settings, which stops any further messages.

Where your data is stored

Your data is stored on Supabase, a cloud database platform. Supabase acts as our data processor and stores data in secure, encrypted infrastructure. Profile pictures are stored in Supabase Storage.

Analytics

We use Mixpanel to understand how the game is used in aggregate — for example, how many people start and finish a race, which features are popular, and how the app performs over time. Mixpanel records product events (such as "round started", "round completed", or "subscription started") tied to a pseudonymous identifier, plus basic context like your platform and app version. It does not record your individual quiz answers beyond these aggregate gameplay events, and we configure it not to collect sensitive personal data. Mixpanel acts as our data processor, stores data on EU-based infrastructure, and processes it only on our behalf. We use this for product improvement under our legitimate interest, not for advertising.

Error monitoring

We use Sentry to automatically capture JavaScript errors and crashes. When an error occurs, Sentry records information about what went wrong — including the error message, the page you were on, and a sequence of recent in-app events (such as which screens you visited). To help us diagnose bugs and confusing flows, Sentry also captures a privacy-masked session replay — a reconstruction of on-screen layout and interactions for a sample of sessions and for sessions where an error occurs. This replay is masked by default: it does not capture the text you read or type, your name, email, or images. Sentry does not record your quiz answers or any sensitive personal data. Your user ID may be included to help us reproduce account-specific bugs. Sentry acts as our data processor and processes this data only on our behalf.

Multiplayer and event logging

When you play a multiplayer (Versus) race, we log structured events to our database — such as when a match started, when you finished, and the result. These logs are used solely for debugging match timing and fairness issues. They are automatically deleted after 7 days.

Cookies and local storage

We use your browser's local storage to save your game state, results, session token, and the identifiers used by our analytics and error-monitoring providers. Some of this information — for example your gameplay results and analytics events — is associated with the anonymous or signed-in account described above and sent to our servers and processors. We do not use third-party advertising cookies today; if we introduce advertising in future, we will update this policy and, where required, ask for your consent.

Legal basis

Under UK GDPR, we process your data on the following bases:

Your rights

You have the right to:

Data retention

Your data is kept for as long as your account exists. When you delete your account, all your data (profile, game results, leaderboard entries, friends connections, notification preferences, and device tokens) is permanently removed from our servers. Deleting your account does not cancel an active App Store subscription — manage that in iOS Settings → Apple ID → Subscriptions. Multiplayer event logs are deleted automatically after 7 days regardless of account status.

Children

Zip Blitz is a general-audience game. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent version.

Contact

If you have questions about this policy or your data, contact Modern Labs LTD at hello@modern-labs.co.uk.