CCPA-compliance

Disclaimer: We do not provide legal advice. We recommend that you seek legal advice from a lawyer about how Riddle complies with the CCPA.  

Riddle is fully CCPA-compliant 

California introduced its California Consumer Privacy Act (CCPA), which took effect on January 1, 2020. As California has the fifth-largest economy in the world, this law has a huge impact on many businesses.  
CCPA will affect you if you are a for-profit entity doing business in California and meet any of these criteria:  

• Annual revenue over $25 million  
• Buy/ receive/sell/share personal identifiable information (PII) of over 50,000 consumers, devices, or households for commercial purposes 
• Generate over 50% of annual revenue from selling consumer personal information  

Riddle is fully GDPR-compliant 

GDPR is the European general data protection regulation.

There are two options: 

1. Riddle without a lead form: 
   If you create a Riddle without a lead form, we do not collect any personal information. We only collect overall (anonymous) statistics such as:  
   • 15k people took the quiz 7k answered question one with “Yes” 
   We do not track individual quiz results, and we are not able to break out the data for a specific user. Moreover, we do not drop any cookies or use trackers to track your quiz takers.  
2. Riddle with a lead form:   
   Quizzes are powerful lead generation tools, and adding a lead generation form will provide opt-in rates of close to 40%.   
   If you include a lead form in a Riddle, we will pair each of your leads’ PII with their responses.  
   We designed Riddle so that this PII is passed directly to your email marketing tool unless you choose to store the data on the Riddle servers. We only store the information when you select the “save to Riddle” option. If you select this option, the data will be stored encrypted on our own servers in our German banking-grade datacenter, and only you will have access to it. 
   

Deleting a user’s personal information upon request.

As part of being CCPA-compliant, you’re required to delete a PII when you’re asked to.  
With Riddle, you can do all of that without getting your developers involved.  Simply search for the data to be deleted in our lead management tools and securely erase the data. Alternatively, you can erase all data from all users stored with a particular Riddle.