Privacy Policy & T&Cs

Last updated: February 2025

This privacy policy explains how Dadl ("we", "us", "our") collects, uses, and protects your personal data when you use our service. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Who We Are

Dadl is an online quiz and survey platform. If you have any questions about this privacy policy or wish to exercise your data rights, please contact us.

2. Data We Collect

We collect the following types of personal data:

Account Data

• Email address - Used for account identification and communication
• Username - Used to identify you on the platform
• Password - Stored in hashed form only; we never store plain text passwords

Content You Create

• Questions - Questions you create for polls and quizzes
• Answers - Answer options you provide for your questions

Activity Data

• Votes - Your responses to polls
• Guesses - Your predictions and guesses in quizzes
• Scores and balances - Your performance and participation metrics

Technical Data

• Session data - To keep you logged in and maintain your browsing session
• CSRF tokens - Security tokens to protect against cross-site request forgery

3. How We Use Your Data

We process your personal data on the following lawful bases:

Contract Performance

We need to process your account data, content, and activity data to provide you with the quiz and survey service you signed up for. This includes:

• Creating and managing your account
• Enabling you to create and participate in polls and quizzes
• Tracking your scores and activity

Legitimate Interests

We process technical data for our legitimate interests in:

• Maintaining the security of our platform (CSRF protection)
• Managing user sessions for a smooth experience
• Preventing fraud and abuse

4. Data Sharing

We do not sell your personal data to third parties.

We may share your data with:

• Hosting providers - Our service is hosted on third-party infrastructure that processes data on our behalf
• Legal requirements - We may disclose data if required by law or to protect our legal rights

Any third parties who process data on our behalf are bound by data processing agreements and can only use your data for the purposes we specify.

5. Data Retention

• Account data - Retained until you delete your account
• Content and activity data - Retained for the lifetime of your account
• Session data - Automatically expires after 2 weeks of inactivity

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights

Under UK and EU GDPR, you have the following rights:

• Right to access - You can request a copy of the personal data we hold about you
• Right to rectification - You can ask us to correct inaccurate or incomplete data
• Right to erasure - You can ask us to delete your personal data
• Right to restrict processing - You can ask us to limit how we use your data
• Right to data portability - You can request your data in a machine-readable format
• Right to object - You can object to processing based on legitimate interests

To exercise any of these rights, please contact us. We will respond to your request within one month.

If you are not satisfied with how we handle your request, you have the right to complain to a supervisory authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Your local data protection authority

7. Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• Password hashing - Your password is stored using industry-standard hashing algorithms
• HTTPS encryption - All data transmitted between your browser and our servers is encrypted
• CSRF protection - We use tokens to prevent cross-site request forgery attacks

8. International Transfers

Your data may be transferred to and processed in the United States, where our hosting infrastructure is located. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Cookies

We use cookies to provide essential functionality such as keeping you logged in. For full details about the cookies we use, please see our Cookie Policy.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by posting a notice on our website or by email if you have an account with us.

We encourage you to review this policy periodically to stay informed about how we protect your data.

Terms and Conditions

In accordance with the UK Online Safety Act, we operate a zero-tolerance policy for:

1. Prohibited Content

• Illegal Content: Any attempts to use our "Share" or "Comment" features to promote fraud, financial scams, or hate speech will result in an immediate ban and data scrub.
• Protecting Minors: While this is a financial sentiment tool, it is intended for users aged 18 and over. We do not host content "harmful to children," and we encourage parents to supervise any educational use by minors.
• Accuracy & Integrity: Don't use bots to "game" the chart. We want the wisdom of the crowd, not the wisdom of a script.

2. Financial Disclaimer

This is not financial advice. The "Actual Share" vs. "Your Guess" data is for informational and entertainment purposes only. Gold markets are volatile—never make investment decisions based on the collective guesses of this platform.

3. Report a Concern

If you see a "Challenge" link or a user-generated element that looks like a scam or violates UK law, please contact us immediately. We aim to review and remove illegal content within 24 hours.