Privacy

One account for every Q app, and only what that needs. Updated November 2026.

What we keep

• Your email, the name you chose, and how you sign in (a scrambled password, or a link to Apple, GitHub or Google). So you can sign in, and every Q app knows it is you. Kept until you delete your account; basis: contract.
• Which Q apps you use, when you first and last opened each, the one you came in through, and what each lets you do. To sign you in to them and show them on your home page. Kept until you delete your account; basis: contract.
• Sign-in sessions, with the device's IP address and browser name. To keep you signed in, and so a stolen sign-in can be spotted. Kept until you sign out or it runs out (7 days unused); basis: legitimate interest.
• Your friends, requests and notifications, and which app a friend is in right now. So friends can find and join each other. Kept until you delete your account; basis: contract.
• Game saves you chose to keep in the cloud, sealed with a key only your vault holds. So a game carries on where you left it, on any device. Kept the last 5 of each slot, until you delete your account; basis: contract.
• Achievements you unlocked in each game, and when. To show them to you and your friends. Kept until you delete your account; basis: contract.
• Which game you sent a report from, when, and the GitHub issue it became (the issue itself names you only by an id). To hold reports to a few a day, and to answer you. Kept a year; basis: legitimate interest.
• Spaces you made or joined, and the messages you sent in them. So your groups and their channels last. Kept the last 10,000 messages of a channel; a space you own until you delete it or your account; basis: contract.
• The studios you made or were added to, and your role in each. So the people you make apps with can work on them together. Kept until you delete your account; basis: contract.
• The party rooms you sat in. So deleting your account can tell each one to forget you. Kept 24 hours; basis: contract.
• Where your vault is, the consents you gave or took back, and when you downloaded your data. To show what you agreed to and that each request was answered. Kept until you delete your account; basis: legal obligation.

With Sign in with Apple you can hide your email; we only ever see Apple's relay address. Party chat lasts as long as the party.

A copy of it

Signed in, download everything above as one JSON file, any time. An app can fetch the same with your sign-in (GET /api/privacy/export).

What we don't do

• No ads, no tracking across other companies' apps or sites, and nothing sold or shared for marketing.
• No email from us. The sign-in page loads its fonts from Google Fonts; nothing else leaves eqosys.
• Visits to eqosys and the Q sites are counted by a code made from the address and browser that changes every day, so nobody is followed from one day to the next and no address is kept. The counts go after 30 days.

Where it lives

On Cloudflare (Workers, D1 and Durable Objects), which runs eqosys for us. Each person also has a vault: the key their cloud saves are locked with, and a record of what they agreed to and asked for. If you first signed in from the EU, the EEA, the UK or Switzerland, your vault is kept in the EU, so your saves can only be opened there. Sign-in tokens from Apple, GitHub and Google are kept encrypted too.

Deleting it

Delete your account from any Q app's settings or at eqosys.qntbr.com/delete. Everything above goes at once, every Q app that keeps data of its own is told to erase it, and a Sign in with Apple link is revoked at Apple. Your vault goes first, so any copy of your saves left in a backup can never be opened again.

Questions

Open an issue at github.com/QuinnsCode/RustyBuns, or use Report in any Q app.