Privacy Policy

Gafla Quiz (accessible at https://www.gaflaquiz.xyz/) is an online entertainment platform offering quiz games, truth or dare challenges, love calculators, AI image prompts, secret message generators, battery pranks, best friend quizzes, WhatsApp dare games, and more.

We are based in India and operate primarily for users in India and internationally. By using our website or creating an account, you agree to the terms of this Privacy Policy.

We collect only the data necessary to provide our services. This includes:

Account Information

• Username and display name
• Email address (used for login and account recovery)
• Encrypted password (never stored in plain text)
• Account registration date

Premium Membership Data

• Payment gateway transaction/order IDs (Razorpay or PayPal)
• Date of membership activation
• Membership status (active/inactive)

Usage & Activity Data

• Games played, quizzes taken, prompts viewed
• Sign-in events and timestamps
• IP address at the time of key actions (for fraud prevention)

Technical Data

• Browser type and version
• Device type (collected via Google Analytics/AdSense)
• Pages visited and time spent

The data we collect is used strictly for the following purposes:

• Account management — creating and maintaining your user account
• Premium access — verifying your membership and unlocking AI prompts, ad-free browsing, and exclusive features
• Security — detecting fraudulent login attempts and preventing abuse
• Communication — sending account-related emails such as password resets (we do not send marketing emails without your consent)
• Analytics — understanding how users interact with our games to improve the experience
• Legal compliance — meeting obligations under Indian IT Act and applicable payment regulations

Premium membership payments on Gafla Quiz are processed through two secure payment gateways:

• Razorpay — for Indian users paying in INR (₹). Razorpay is PCI-DSS compliant and regulated by the Reserve Bank of India.
• PayPal — for international users paying in USD or other supported currencies. PayPal is a globally trusted payment processor.

We store only the payment transaction ID and order ID returned by these gateways after a successful payment — purely for record-keeping and support purposes. Your full card number, CVV, bank account details, and UPI credentials are never transmitted to or stored on our servers.

By making a payment, you also agree to the privacy policies of Razorpay and PayPal.

We use cookies to improve your experience on Gafla Quiz. Cookies are small text files stored in your browser.

Cookies we use:

• Session cookies — to keep you logged in during your visit
• Authentication cookies — set by WordPress to remember your login between sessions ("Remember Me")
• Game state cookies — to save progress in certain games like Truth or Dare and Secret Messages
• Google AdSense cookies — to display personalised ads to non-premium users. Google may use DoubleClick cookies to serve ads based on your prior visits. You can opt out via Google Ad Settings.
• Google Analytics cookies — to track page views and user behaviour (anonymised).

Premium members do not see ads. AdSense scripts are suppressed for accounts with an active premium membership.

We integrate with the following third-party services. Each operates under its own privacy policy:

• Google AdSense — displays ads to free users. Google Privacy Policy
• Google Analytics — anonymous usage analytics. Google Privacy Policy
• Razorpay — payment processing for Indian users. Razorpay Privacy Policy
• PayPal — payment processing for international users. PayPal Privacy Policy
• Gravatar — profile avatars are sourced from Gravatar using your email address hash.
• Facebook / Instagram / Twitter — social sharing links. No data is shared unless you actively click a share button.

We do not sell, rent, or trade your personal data with any third party for marketing purposes.

We take reasonable technical and organisational measures to protect your personal data, including:

• Passwords are stored as salted cryptographic hashes — never in plain text
• All pages are served over HTTPS (TLS encryption)
• Payment flows use HMAC-SHA256 signature verification (Razorpay) and server-side capture verification (PayPal)
• AJAX requests are protected with WordPress nonces to prevent CSRF attacks
• Database access is restricted to server-side code only

While we implement strong security practices, no internet transmission is 100% secure. If you suspect your account has been compromised, please contact us immediately.

As a user of Gafla Quiz, you have the following rights regarding your personal data:

• Access — you can view your account details and activity history on your Profile page at any time
• Correction — you can update your display name from your Profile page
• Deletion — you can request deletion of your account and all associated data by emailing us
• Data portability — you can request a copy of your personal data
• Opt-out of personalised ads — use Google Ad Settings to manage ad preferences

To exercise any of these rights, please contact us at support@gaflaquiz.com. We will respond within 30 days.

Gafla Quiz is intended for users aged 13 and above. We do not knowingly collect personal data from children under the age of 13.

If you are a parent or guardian and believe your child has created an account or submitted personal information, please contact us at support@gaflaquiz.com and we will promptly delete the relevant data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of Gafla Quiz after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us: