Legal
Cookies & Tracking Policy
Last updated: 2026-06-19
Cookies & Tracking Policy
Last updated: June 19, 2026
This Cookies & Tracking Policy explains how Nitta Quiz ("we", "us") uses cookies, similar storage technologies on our website, and equivalent device-based tracking (such as the iOS IDFA, Android AAID, and SDK identifiers) inside the Nitta Quiz mobile App (the "Service").
It complements our Privacy Policy and Terms of Service.
1. What is a cookie?
A cookie is a small text file stored by your browser when you visit a website. Cookies let a site remember information about your visit — for example, your language preference — to make the next visit more convenient.
We also use similar technologies:
- Local storage / session storage — used by the Site to keep small amounts of data in your browser, such as theme or feature flags.
- Pixels and tags — small images or scripts loaded from a third party that record that a request was made.
- Mobile SDK identifiers — inside the App, the IDFA (iOS) or AAID (Android) plus a per-installation identifier may be sent to advertising or analytics SDKs.
When this policy refers to "cookies", we mean all of the above where context allows.
2. Where do we use cookies?
2.1 On our Site (nittaquiz.com)
The marketing Site uses a small number of cookies and similar technologies described in Section 4.
2.2 In the Nitta Quiz mobile App
The App itself does not use HTTP cookies, but it uses functionally equivalent device storage and SDK identifiers:
- Auth session storage — Supabase stores an encrypted session token on your device so you stay signed in.
- Preferences storage — your language, theme, sound, and vibration settings are stored locally.
- Crash reporting (Sentry) — assigns a per-install identifier so we can group errors from the same device.
- Push notifications — if you enable notifications, a device push token is stored and used to deliver them (such as a friend's duel challenge). It is not used for advertising, and you can turn each notification type off in Settings → Notifications.
- Advertising (Google AdMob) — uses the IDFA / AAID and ad SDK identifiers to deliver and measure ads. On iOS, this only happens after you grant permission via App Tracking Transparency.
3. Categories of cookies and trackers
We use four categories. The names and exact list may evolve; the latest list is shown in the cookie banner on the Site.
3.1 Strictly necessary
Required for the Service to work. They cannot be turned off.
- Auth and session — keep you signed in (Site and App).
- Security — CSRF protection, fraud prevention, rate limiting.
- Load balancing — route traffic to the right server.
3.2 Functional
Remember choices you make to give you a better experience. Disabling these may degrade the Service.
- Language (en / es).
- Theme (light / dark).
- Notification, sound, and vibration preferences.
- Onboarding state — so we don't re-prompt you for setup choices.
3.3 Analytics
Help us understand how the Service is used in aggregate so we can improve it.
- Vercel Analytics on the Site (privacy-first; no cookies set by default; only aggregated visit data).
- Sentry for crash and error reporting.
3.4 Advertising
Used to show ads in the App and, where applicable, on the Site.
- Google AdMob — interstitial ads, rewarded video ads, and ad measurement. Personalized advertising only with your explicit consent (ATT on iOS or in-app cookie banner where applicable).
4. Cookies set on the Site
The table below lists the main cookies and similar storage used on the marketing Site. We may update it as the Site evolves.
| Name | Provider | Purpose | Type | Lifetime |
|---|---|---|---|---|
theme | Site | Remembers light / dark mode preference. | Functional | 1 year |
nitta_locale | Site | Remembers selected language. | Functional | 1 year |
cookie_consent | Site | Stores your cookie banner choices. | Strictly necessary | 12 months |
| Vercel Analytics queue (local storage) | Vercel | Aggregated, anonymous visit metrics. | Analytics | Session |
If we add advertising cookies to the Site (for example, conversion measurement for an ad campaign), we will list them here and request consent before setting them in the EEA / UK.
5. Mobile in-app trackers
Inside the App, the following SDKs may set device-level identifiers or local storage:
| SDK | Purpose | Identifier used | Consent |
|---|---|---|---|
| Supabase Auth | Keep you signed in. | Encrypted session token (local). | Necessary; no consent prompt. |
| Sentry | Crash and error reporting. | Per-install identifier. | Necessary for Service stability. |
| Push notifications | Deliver notifications you've enabled (e.g. duel challenges). | Device push token. | Opt-in; toggle per type in Settings → Notifications. Not used for ads. |
| Google AdMob | Ad delivery and measurement. | IDFA (iOS) / AAID (Android). | iOS: ATT prompt. Android: device ad-personalization setting. |
6. Your choices
6.1 In your browser (Site)
Most browsers let you block or delete cookies via Settings. Blocking strictly necessary cookies will break sign-in and other core features.
6.2 In the cookie banner (Site)
The first time you visit the Site from a region that requires it (EEA, UK, and similar), you will see a banner asking which categories of cookies you accept. You can change your choices later by clicking Cookie settings in the footer.
6.3 In the mobile App
- iOS App Tracking Transparency: when prompted on first launch, choose Ask App Not to Track to disable IDFA-based personalization. You can change this at any time in Settings → Privacy & Security → Tracking.
- Android: in Settings → Privacy → Ads you can reset your advertising ID or opt out of personalization.
- Subscribe to Nitta Unlimited to remove most ads.
6.4 Industry opt-out tools
- EU: youronlinechoices.eu
- US: optout.aboutads.info
- Mobile: Google Ad Settings
7. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is no industry consensus on how to honor DNT, so we currently do not respond to DNT signals on the Site. We do honor the Global Privacy Control (GPC) signal where required by law as an opt-out of "sale" or "sharing" for cross-context behavioral advertising.
8. Children
We do not knowingly use advertising or analytics cookies/trackers to profile children under 13 (or the equivalent local minimum age). The App is not directed at children below that age.
9. Changes to this policy
We may update this Cookies & Tracking Policy when we change the technologies we use, when we add new partners, or when the law requires it. The "Last updated" date above shows the most recent revision.
10. Contact
Questions about cookies or trackers:
- Email: privacy@nittaquiz.com
- In-app: Settings → Help center