What we store, and what we do not

Every game and calculator works without an account. If you choose to sign in, we ask for an email address and nothing else — no name, no phone number, no payment details. Your answers stay on your device; only a short round summary is recorded, and only when you are signed in.

The site carries advertising, which is served by Google and described below. The sections that follow say exactly what is stored, where it goes, and which parts are not fully in our control.

A few items, in your browser's local storage:

• cookie-consent — what you chose when asked: whether analytics and advertising may run. Until you answer, neither does.
• theme — whether you chose light or dark mode, so the site does not flash the wrong one next time.
• session-token — proof that you are signed in, if you create an account. It is a random string sent to our server to authenticate each request; signing out deletes it, and only its hash is kept on our side, so a copy of our database cannot be used to sign in as you.
• player-id — a random identifier generated on your device, used to attach your finished rounds to each other for the percentile figure and the leaderboard. It contains nothing about you.
• player-name — the display name shown on your own screen, if you set one or signed in with Google.
• play-streak and answered-total — how many days in a row you have played and how many questions you have answered. Both stay here; neither is sent anywhere.
• recent-questions — the handful you last saw, so a new round does not repeat them straight back at you.
• referral-pending — set only if you arrived through someone's invite link, so the invite can be credited once you have played.

Your theme never leaves your device. The session token and player id are sent to our own server so that signing in and score recording work. Clearing your browser data removes all of them. We set no cookies of our own — advertising does, and that is the only thing here that does.

Each item, what it is for and how long it lasts is set out on the cookies and storage page, where you can also change what you allow.

Your guesses and swipes stay in the browser tab while you play and are discarded when the page closes. They are never transmitted — which question you got wrong, and what you guessed, never leaves your browser. Only what the finished round added up to is sent.

The end of a round sends the random player-id, the game name, the final score, accuracy, grade, streak, how many answers were right and how long the round took, so the site can tell you how it compares with everyone else's. That is stored in a Cloudflare D1 database, along with the region your browser reports and, briefly, the IP address the round arrived from — which is used to stop one person manufacturing a leaderboard position, and nothing else.

If you are signed in, the round is attached to your account, which is what lets your scores appear on the leaderboard and follow you between devices. If you are not, it is attached only to the random player-id. Either way it is never linked to an advertising profile, and the adverts on this site never receive it.

If you use a share button, your browser hands the score text to the app you pick (WhatsApp, X, or your device's share sheet). That app's own privacy policy applies from that point.

• Cloudflare Pages hosts the site. Serving any page means your IP address and browser user-agent reach Cloudflare's infrastructure, as with any website.
• Google Fonts supplies the two typefaces. Your browser requests them from Google's servers, which exposes your IP address and user-agent to Google.

When score recording is enabled, a Cloudflare Worker and its D1 database also receive the round summary described above.

We do not control what those providers log or for how long.

CashIQ shows adverts supplied by Google AdSense. Nothing is loaded until you have made a choice in the cookie banner: decline, and no ad or analytics script runs at all, which you can confirm in your browser's network tab. What each service does when it is active:

• Google Analytics 4 records which pages are opened, which games are started and finished, and coarse details such as the region your browser reports. It sets its own cookies and Google acts as an independent controller of that data. It never receives your answers.
• Google AdSense serves the display adverts and sets cookies used for frequency capping and, depending on your consent and location, ad personalisation. Ads appear only after a round ends or below a calculator result, never during play.
• AppLixir supplies rewarded video, which only ever plays when you choose to start one.

Third-party vendors, including Google, use cookies to serve adverts based on your prior visits to CashIQ or to other websites. Google's use of advertising cookies enables it and its partners to serve adverts to you based on your visit to this site and others on the internet. You may turn off personalised advertising at Google Ads Settings, and opt out of other vendors at aboutads.info. What Google itself collects is described in how Google uses data when you use our partners' sites or apps.

These are third-party services with their own privacy policies, and the data they collect is not anonymous simply because we do not ask who you are. Every one of them is named on the cookies page, which also explains how to withdraw consent at any time.

You decide this, not us. The cookie banner appears before anything loads, declining keeps every one of these switched off, and you can change your answer at any time from the cookie link in the footer.

Sign-in is optional and every game is fully playable without it. It exists for one reason: so your recorded rounds follow you from one device to another.

An account made with an email address stores your email, a display name if you set one, and your password — the password only ever as a PBKDF2-SHA256 hash, which cannot be turned back into the original. Signing in with Google instead stores the account identifier Google gives us, your first name for display, and your email address — taken only when Google itself confirms it has verified that address. We never receive your Google password and cannot read your Google data.

Alongside that account we keep the rounds you have played: score, accuracy, grade and how long the round took. Anything you save, and any feedback you send, is stored with it too.

Signing out removes the stored name from this device. Deleting the account removes all of it — see your rights below.

Nothing below is collected unless the thing it describes happened — play anonymously and never sign in, and the only rows that exist about you are finished rounds attached to a random id.

What is not here is as much the point: no phone number, no address, no date of birth, no payment details, no contacts, no location beyond the country your browser reports, and no record of which answer you gave to any question.

• Your account and its rounds — until you delete the account. That is a button on your profile page, it works immediately, and it cannot be undone.
• IP addresses — 30 days, then erased automatically by a scheduled job. They exist to stop one person manufacturing a leaderboard position, and that job is finished within days.
• Sign-in sessions — until they expire or you sign out, whichever comes first. Expired ones are deleted hourly.
• Failed sign-in attempts — 24 hours. They exist only to slow down password guessing.
• Anonymous rounds — indefinitely. They are attached to a random device id rather than to a person, and they are what every percentile is measured against.

Deleting your account detaches your rounds rather than erasing them, so the figures other players are measured against do not shift when somebody leaves. What remains carries no identifier of yours.

CashIQ is written for adults and is not directed at children, and we do not knowingly create accounts for anyone under 13. If you believe a child has made an account here, write to us and we will delete it.

Without an account there is nothing to retrieve or delete: what the site remembers sits on your own device, and clearing your browser storage clears it.

With an account, you can exercise every one of these rights yourself, immediately, from your account page — change your display name, see what has been recorded, or delete the account outright. Deletion removes your email, your password hash, your rounds, your saved items and your leaderboard entry. It is immediate and it cannot be undone.

CashIQ is run by an individual based in India, who is the data controller for that information and is reachable at the address below. If you would rather ask us than use the buttons, or you want a copy of what is held, write to us and we will answer within 30 days. If you are in the UK or EU and our answer does not satisfy you, you may complain to your national data protection authority.

Privacy questions, requests for a copy of what is held, and anything on this page that does not match what you see — email [email protected]. We answer within 30 days, and usually a good deal sooner.

CashIQ is operated from India by an individual, who is the data controller for everything described here. Every way to reach us, including for legal and business matters, is on the contact page.

If what the site does changes, this page changes with it and the date at the top is updated. Continuing to use CashIQ after that means the revised policy applies.

Read the terms