Privacy Policy

Last updated: 23 October 2026. This policy explains what Halloween Potion Quiz, run by MyChallenge, stores and why.

What we store

• When you brew a potion: the name you type, who the potion is for, the questions and your answers, your optional secret scroll message and how many right guesses unlock it.
• When you play a potion: the name you type, your guesses, score, timing, spells and badges.
• Security: a salted, one-way hash of your IP address, used only to stop spam and abuse. We do not keep raw IP addresses in the game database; our host and ad partners may log them under their own policies.
• Link previews: the preview image for a potion shows its creator's name and is cached on our server.

There are no accounts. We never ask for an email address, phone number or real-world identity — please use a nickname and keep personal details out of names and secret scrolls.

Your device

Your browser's local storage remembers your name, the potions you brewed with their private Coven keys, the potions you played, your sound and effects settings, and your analytics choice. Clearing your browser data removes these, and can remove your access to a Coven.

Advertising and cookies

We show ads from Google AdSense. Google and its partners may use cookies or similar technologies to serve and measure ads, and may show personalised ads where the law allows. Learn how Google uses data on partner sites and manage personalised ads at My Ad Center. Visitors in the EEA, UK and Switzerland are asked for consent through a Google-certified consent message.

Analytics

We use Google Analytics 4 to understand how the game is used: which pages and screens are viewed, and game events such as a potion being brewed, a game started or finished, its score, and a link being shared. Analytics only starts after you choose Allow analytics; declining does not stop you playing. Potion and coven codes are replaced with placeholders before anything is sent, and names, answers and secret scrolls are never sent. Google signals and ad personalisation are switched off for analytics. You can change your choice at any time with Privacy choices at the bottom of the page; it is remembered on your device for 180 days. If Google Tag Manager, Microsoft Clarity or a Meta Pixel are set up, they follow the same choice (the Meta Pixel also needs separate marketing permission and only runs on public pages). These providers process information under their own privacy policies.

Who can see what

• Anyone with a potion link sees the creator's name and the leaderboard (player names and scores).
• The secret scroll is only shown to players who get enough answers right, and to the creator.
• The creator's private Coven link shows every player's guesses. Treat potion links as shareable and keep Coven links private.

Children

The 🧒 Little Monsters questions are made for families to play together. Children under 13 should play with a parent or guardian, who should brew and share the potion for them. If you believe a child has shared personal information, contact us and we will delete it.

Keeping and deleting data

Potions and results stay until they are removed. Creators can remove any player from their Coven. To delete a whole potion or a result, send us its link and we will remove it. Hosting backups may keep copies until they expire.

Contact

For privacy questions or deletion requests, email [email protected].