This page explains how to remove your personal data from ilzion, what we delete, what we anonymize, and what we may need to keep for a short time. It sits alongside our Privacy Policy, which describes the full picture of what we collect and why. If anything here is unclear, you can always reach a real person at privacy@ilzion.com.
1. Your right to deletion
If you hold an ilzion account, you can ask us to delete it and the personal data associated with it at any time. You do not need to give a reason. We will honour the request unless we are legally required to keep certain records for a limited period (for example, to comply with the law, resolve a dispute, or prevent fraud and abuse). Where that happens, we keep only the minimum needed, and we delete or anonymize the rest.
2. What gets deleted, anonymized, or retained
Deletion is not always a single “erase everything” switch. Some data identifies you directly and is removed or scrambled; some data is part of a shared quiz record and is detached from your identity instead of destroyed. Here is how we handle each category.
| Data | What happens |
|---|---|
| Account profile and email address | Removed or anonymized — including your email, display name, avatar, role, plan, and sign-in timestamps. |
| Password | Deleted. We only ever stored a one-way bcrypt hash, never your plaintext password, and that hash is removed with your account. |
| Connected streaming accounts (Twitch, YouTube, Kick) | Disconnected, and the encrypted OAuth access and refresh tokens we held are deleted. |
| Quizzes and questions you created | Removed — including the titles, descriptions, questions, answers, explanations, and any images, audio, or video you uploaded. |
| Your quiz play records | Anonymized — your answers, scores, response times, and streaks are detached from your identity so they can no longer be linked back to you. |
| Security and audit records | Some entries (such as an IP address and user-agent logged for a security event) may be retained for a limited period where we are required to, then removed on the normal schedule. |
| Backups | Personal data may persist for a short time in routine, rotating backups before it is overwritten and cycles out. It is not restored into live systems except for disaster recovery. |
We anonymize quiz play rather than wiping it because a single quiz is a shared record across everyone who played. Detaching your answers from your identity preserves the integrity of that quiz for other participants while ensuring the data is no longer personal to you.
3. How to request deletion
You have two ways to delete your data, and both lead to the same result.
Option A — Self-service (fastest)
When you are signed in, you can start deletion yourself from your account. Go to your account settings, or directly to the delete account page, and follow the prompts. Because you are already authenticated, this is the quickest route and confirms your identity through your active session.
Option B — By email
You can also email privacy@ilzion.com from the email address on your account and ask us to delete it. Sending the request from your account email helps us confirm the request is genuinely yours.
4. Verifying it’s really you
Before we delete an account, we take reasonable steps to confirm the request comes from its owner — this protects you from someone else deleting your data. Self-service deletion is verified by your signed-in session. For email requests, we rely on the request coming from your registered email address, and we may ask a follow-up question if anything looks inconsistent. We will not action a deletion request we cannot reasonably attribute to the account owner.
5. Timeline
- Acknowledgement: we aim to confirm we have received your request promptly.
- Completion: we aim to complete deletion within about 30 days of verifying the request.
- Recovery / grace window: for a short period after you start deletion, there is a grace window during which the action can be reversed — this is a safety net against accidental or unauthorized deletion. After that window, removal becomes permanent.
- Backups: any copies in routine, rotating backups are overwritten and cycle out shortly after, in the normal course of backup rotation.
6. Players who join without an account
If you joined a quiz by PIN with a nickname and never created an account, you are an anonymous player. We do not collect an email, password, or account profile from you. The data tied to your play — your chosen nickname, avatar or emoji, answers, scores, response times, and streaks — is minimal and tied to that specific quiz session rather than to a standing identity. It is retained as part of that quiz’s record. The easiest way to ask for a copy of that data or to have it deleted is our player data request form — no sign-in needed. You can also contact privacy@ilzion.comwith enough detail to identify the quiz (such as the quiz and the nickname used), and we will help where we reasonably can. A parent, guardian, or teacher may submit a request on a child’s behalf.
7. What deletion does not cover
Deleting your account removes the personal data we hold about you on ilzion. It does not remove content that other people may have separately saved or screenshotted off-platform, and it does not affect anonymized or aggregated quiz records that can no longer be connected to you. We may also retain limited information where the law requires it, for the period it requires.
8. Questions and contact
For deletion requests, data exports, or any privacy question, email privacy@ilzion.com. For general help, you can reach support@ilzion.com or visit our Support page. To understand the wider context of how we handle your information, see our Privacy Policy.