Brainmoni: free quiz-show trivia, 15 questions to the top

The short version

Last updated 8 October 2026

Kerux8 runs Brainmoni and is responsible for the personal data described here.
You can play practice games without an account. Your practice scores and streaks stay on your device and are not sent to us.
If you sign in, we keep your email address and your username. We use your email to send sign-in codes and run your account, not for marketing.
Your username and tournament scores are public on tournament standings.
We use Google Analytics only if you allow it.
We do not sell your personal data, and sponsor placements on Brainmoni are not targeted at you.
Accounts and tournaments are for people aged 18 and over.
You can ask to see, correct, export or delete your data at any time by emailing contact@kerux8.com.

Who we are

Brainmoni, at brainmoni.com, is a free trivia game operated by Kerux8. Kerux8 is the data controller for the personal data in this notice, which means we decide how and why it is used.

This notice follows the Nigeria Data Protection Act 2023. For any privacy question or request, email contact@kerux8.com.

What we collect

We collect only what each feature needs. Here it is, feature by feature.

Free practice. Nothing that identifies you. Your last 20 practice results, your daily streak and your sound setting are saved in your browser’s local storage on your device. They are not sent to us, and clearing this site’s data in your browser deletes them.
Your account. Your email address, the username you choose, and when the account was created.
Sign-in codes. When you ask for a code, we store your email address, a hashed copy of the code, when it was requested, how many wrong attempts were made and whether it was used. Each code expires after 10 minutes.
Your session. After you sign in, we set one cookie, brainpot_session, which holds a random token. We store only a hashed copy of the token, linked to your account. It expires after 7 days, and signing out deletes it.
Tournaments. The rounds you join, the username you joined with, when you joined, each answer you lock in, when it reached us and whether it was correct, and any skip, 50:50 or leave. Your username and score appear on the round’s standings, which anyone can view.
Friend challenge links. If you are signed in, a challenge link you share includes your username and how far you got, so whoever opens it can see them. If you share through WhatsApp, WhatsApp’s own privacy terms apply to that message.
Team quizzes you create. Your organisation name, the quiz title, and the questions and answers you write, linked to your account.
Team quizzes you take. The name you enter, your score, the number of questions and when you submitted. We do not keep your individual answers. A random identifier is saved in your browser so each browser can submit a quiz once, and it is sent to us with your submission. Names and scores are visible only to the quiz owner, who can export them.
Advertising enquiries. Your business or creator name, contact email, chosen placement, number of days, budget, message, headline and link. If we run a campaign, only the business name, headline and link appear on Brainmoni. Your contact details are never shown publicly.
Abuse protection. To limit repeated sign-in requests, we combine your connection’s IP address with the current hour and store only a one-way hash of the result, with a count. We cannot read your IP address back from it.
Technical logs. Our hosting provider processes your IP address and basic request details to deliver pages and protect the service. When something fails, our error logs record technical details of the failed request.
Google Analytics, only if you allow it. See the analytics section below.
Messages you send us. If you email us, we keep your message and email address so we can reply.

Why we use it, and our lawful bases

The Nigeria Data Protection Act 2023 lets us use personal data only when we have a lawful basis. Ours are:

To provide what you asked for (contract). Creating and signing in to your account, running tournaments and team quizzes, scoring answers, and showing standings and results.
To keep Brainmoni secure and fair (legitimate interests). Limiting sign-in requests, preventing abuse, checking tournament activity such as answer timing for fair play, and fixing errors. We weigh your interests and rights before relying on this basis, and you can object to it.
To reply to advertisers (steps before a contract, and legitimate interests). Reviewing an enquiry and discussing a possible campaign.
To understand how Brainmoni is used (consent). Google Analytics runs only after you choose Allow analytics.
To meet legal duties (legal obligation). Keeping records or answering lawful requests from authorities when the law requires it.

We do not send marketing emails. If we ever want to, we will ask for your consent first.

Analytics

On brainmoni.com, a banner asks whether you allow Google Analytics. If you choose No thanks, the Google script is never loaded. If you choose Allow analytics, Google Analytics sets its own cookies and receives your IP address, basic device and browser details, and the events below.

The page you viewed. Tournament round addresses are replaced with a general one, and we leave out any extra details in the web address and the page you came from.
Which features you use, such as starting or finishing a practice ladder, using a lifeline or sharing a link. For practice, we send how many questions you got right.
We never send your email, username, the questions, your answers or any payment details. Team quiz, wallet, payment and admin pages are not tracked.
Google signals and ad personalisation are switched off. Analytics never runs on our test sites.

Your choice is saved on your device. To change it, clear this site’s data in your browser settings and choose again when the banner returns. This also clears your practice record on that device.

Cookies and storage on your device

Session cookie. brainpot_session keeps you signed in. It is strictly necessary for accounts, cannot be read by page scripts, and lasts up to 7 days.
Local storage. Your practice results, daily streak, sound setting and analytics choice stay in your browser and are not sent to us. The team quiz browser identifier is also kept here and is sent only when you submit a team quiz.
Google Analytics cookies. Cookies whose names start with _ga, set only if you allow analytics.

We use a small number of service providers to run Brainmoni. They process personal data on our instructions.

Cloudflare hosts Brainmoni, runs our database and live tournament connections, and protects the site from attacks.
Resend sends sign-in code emails. It receives your email address and the code.
Google provides Google Analytics, only if you allow it.
Bachs will process payments if and when paid features launch. We share no data with Bachs for the free features available today.

Team quiz owners see the names and scores submitted to their quizzes. We may also disclose personal data if the law requires it, or to protect the rights and safety of players or Kerux8. We do not sell personal data.

International transfers

Cloudflare, Resend and Google may process data outside Nigeria, including in the United States. When personal data leaves Nigeria, we rely on safeguards recognised by the Nigeria Data Protection Act 2023, such as each provider’s data processing terms and the contractual protections for transfers in them. Email us if you would like details for a particular provider.

How long we keep it

We are still finalising automatic cleanup schedules. Until they are in place, some records stay in our database until we remove them by hand. These are the periods we aim to keep to:

Sign-in codes. Unusable after 10 minutes. We aim to delete them within 7 days.
Sessions. End after 7 days or when you sign out. We aim to delete expired session records within 7 days.
Abuse protection counts. Used for one hour. We aim to delete them within 7 days.
Account details. Kept while your account is open. We aim to delete them within 30 days of you asking us to close it.
Tournament entries and answers. We aim to keep them for no more than 24 months after the round, for standings history and fair-play checks.
Team quizzes and staff results. Kept until the quiz owner asks us to delete them or closes their account.
Advertising enquiries. We aim to keep them for no more than 24 months after our last contact, unless a booked campaign means we must keep records for longer.
Google Analytics data. Kept in Google Analytics for no more than 14 months.
Emails you send us. Kept as long as we need them to deal with your request.
Data on your device. Stays until you clear this site’s data in your browser.

Your rights

Under the Nigeria Data Protection Act 2023, you can:

Access. Ask whether we hold personal data about you, and get a copy.
Correction. Ask us to fix data that is wrong or incomplete.
Deletion. Ask us to delete your data. There is no delete button yet, so email us and we will close your account.
Restriction. Ask us to limit how we use your data while a concern is looked into.
Portability. Get the data you gave us in a common, machine-readable format, or ask us to send it to another organisation where that is possible.
Objection. Object to our use of your data where we rely on legitimate interests.
Withdrawing consent. Withdraw your consent to analytics at any time. This does not affect anything that happened before you withdrew.
Automated decisions. Not be subject to decisions made only by automated means that significantly affect you. Tournament scores are worked out automatically from the answers you lock in, but demo awards have no cash value and we do not profile players.
Complaint. Complain to the Nigeria Data Protection Commission at ndpc.gov.ng. We would like the chance to put things right first, but you do not have to contact us before complaining.

How to use your rights

Email us from the address on your account and tell us what you would like us to do.
If you write from a different address, we may ask you to confirm that you control the account email before we act.
If you took a team quiz, tell us the organisation, the quiz title and the name you entered, because we hold no account for you. We may also suggest you contact the organiser.
There is no fee. We aim to reply within 30 days, and will tell you if we need longer.

contact@kerux8.com

Children

Accounts and tournaments are only for people aged 18 and over, and team quizzes can only be created from an account. Free practice needs no account, and practice results stay on the device. If you think someone under 18 has created an account, email us and we will delete it.

How we protect your data

Brainmoni is served over HTTPS, so data between your device and our service is encrypted in transit.
We never store sign-in codes or session tokens in readable form, only one-way hashes. Page scripts cannot read the session cookie.
Sign-in codes expire after 10 minutes and stop working after 5 wrong attempts.
Admin tools are limited to one authorised Kerux8 account, and our server checks this on every request.
Team quiz results are shown only to the account that created the quiz.
Access to our database and service accounts is limited to the people at Kerux8 who need it.

No online service is perfectly secure. If a personal data breach is likely to put your rights at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and tell you directly where the law requires.

Changes to this notice

We will update this notice when Brainmoni changes, for example before any paid feature launches. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you on the site before it takes effect, and by email if you have an account.

Contact

Kerux8, operator of Brainmoni.