Last updated: 2026-10-31
MeWho (https://mewho.party) is an individual project operated by Hamdi Tuğ. Privacy, support and legal requests: [email protected]. This notice covers the browser service and related support.
1. Information and visibility
A guest session creates a user ID and a generated display name. Email sign-in processes your address and verification records. Optional profile data includes username, display name, bio, interests and language. We store quiz titles, questions, options, the owner’s correct choices, participant names, answers, scores and timestamps. The quiz owner can see participant results and answer comparisons. Invite-link holders can view an open quiz. After an answer is saved, the participant sees its correct option; after completion, their own answer comparison becomes available. Share invitation links carefully.
2. Purposes and legal grounds
Data is collected electronically through forms, answers, browser storage and requests. We process information needed for sign-in, quizzes, scoring and requested AI features to perform the service contract; security, abuse prevention and legal claims rely on applicable legitimate interests or establishment/exercise/defence of rights; legal duties rely on the relevant legal obligation. Optional Google Analytics relies on your separate consent. Local law may require a different applicable basis. Optional email/profile fields are not necessary for guest use; required answers are needed to complete a quiz.
3. Providers, AI and sharing
Hosting/database infrastructure stores service records. Cloudflare provides delivery/security and processes technical requests, including IP/browser details; Resend receives your email address and login message to deliver verification codes. Google Gemini receives your AI question goal, bio and interests for question generation, and question/option/correct-answer text plus aggregate answer statistics for analysis. Participant names, email addresses and session tokens are not deliberately added to these prompts, but free text may contain personal information you enter. Do not enter confidential, sensitive or other people’s personal data. Google’s Gemini API terms govern provider processing; unpaid services may use input/output for product/model improvement and human review. The project’s paid/unpaid status is unverified, so we make no no-training assurance. User-initiated system/WhatsApp/Instagram sharing sends your selected text, link or locally generated image to the chosen app/recipient; MeWho does not store that PNG. We do not sell personal data or share it for cross-context behavioural advertising. Necessary legal disclosures may be made to competent authorities or for protecting rights.
4. Optional analytics
Only if you opt in, Google Analytics measures public landing-page visits and standard technical/session data, such as browser/device information and cookie identifiers. We send a canonical page address without query parameters, a static title, language and referrer origin only. Account, quiz, answer and result pages are excluded; advertising signals and enhanced measurement are off. Refusal does not restrict the service. Change your choice using “Statistics preferences” on a public landing page. Withdrawal disables future MeWho Analytics collection; browser settings remove existing cookies. We do not implement a separate automatic response to Do Not Track signals; analytics still requires consent. Google Analytics may also derive approximate location, such as country or city, from the network IP address; MeWho does not request precise GPS location.
5. Retention and deletion
Account, profile, quiz and answer records are retained for service operation/history and applicable security, legal duties and claims. There is currently no automatic physical deletion after a fixed inactivity period. Deleting a game is soft deletion, not immediate physical erasure or account deletion. Email a deletion request to the contact above; proportionate identity verification and lawful retention exceptions may apply. OTPs are valid for 10 minutes; expiry does not itself erase their database rows. Owner cookies last 30 days. Drafts are kept for the tab session and removed after publishing. Consent preference storage has no application expiry and lasts until changed or cleared. Log/backup schedules, hosting country and the Analytics event-retention setting have not been verified; no specific unverified period or location is promised.
6. International processing and your rights
Providers may process information outside your country. International transfers are subject to applicable legal requirements; this notice does not assert an unverified adequacy certification or signed transfer safeguard. Contact us for processing locations and available safeguards. Depending on applicable GDPR/UK GDPR, KVKK, LGPD or US/state law, rights may include access/information, correction, erasure, restriction, portability, objection, consent withdrawal, complaints and appeal of a refused request. KVKK Article 11 also includes learning recipients/purposes, notification of corrections/deletions to recipients, objection to an adverse exclusively automated analysis, and compensation for unlawful processing. Use the contact above; Turkish requests may use a previously supplied email or other legally accepted written/electronic channels and are answered within 30 days; other statutory deadlines apply elsewhere. Authorised agents may act where permitted; no discrimination for exercising rights. You may complain to the competent authority, including KVKK, an EEA authority, ICO or ANPD where relevant. AI quiz comments are entertainment, not decisions with legal or similarly significant effects.
7. Adults, security and changes
MeWho is intended for adults aged 18 or older. Tell us if you believe an underage person’s data was collected. Measures include TLS, encrypted HttpOnly owner cookies, CSRF protection and hashed OTP/participant tokens; no system is perfectly secure. Material policy changes are reflected in the updated notice, with additional notice or consent when legally required. Reading this notice is not consent to optional analytics.
Cloudflare · Resend · Google · Gemini API · Google Analytics
Privacy Policy and KVKK Notice · Terms of Service · Cookie Policy