Privacy Policy

• No host or player accounts are required. Hosting a game and joining a game collect nothing personally identifying by default.
• Quiz content, player names, and answers are stored only as long as needed to run your game.
• Optional Pro subscription requires an email and is processed through Stripe.
• We use a small set of third parties to run the service: Vercel (hosting), Upstash Redis (storage), PostHog (analytics), Stripe (payments).
• No advertising. No data sales. No tracking beyond what runs the product.

Hosting a quiz

When you create a quiz and host a game, we generate an 8-digit game code and a temporary anonymous host identifier stored in your browser. We don't ask for your name or email unless you choose to claim the quiz (see "Claiming a quiz" below). The questions and answers you author are stored on our servers while the game runs.

Joining a quiz as a player

Players enter a display name and answer questions. We do not collect email addresses, accounts, or device identifiers from players. The display name and answers are visible to the host of that game and are deleted after the game ends.

Claiming a quiz (optional)

Anonymous hosts can "claim" a quiz by entering an email address. This sends a one-time verification code to that email. We store the email so we can associate the quiz with your account on future visits.

Quizzy Pro (optional)

Pro subscriptions are processed by Stripe. We store the Stripe customer ID and subscription status; we do not store your full card details. Refer to Stripe's privacy policy for how payment data is handled.

AI quiz integration

If you install our Custom GPT (ChatGPT) or MCP server (Claude) and use them to create a quiz, the AI sends only the generated quiz JSON (questions, options, answers, optional difficulty/language) to our backend. We do not see your conversation with the AI. The resulting quiz is stored in our cache for up to one hour, after which it is automatically deleted unless you claim it.

Analytics

We use PostHog to understand how the product is used in aggregate — which pages people visit, which features they try, where they drop off. Analytics events are tied to an anonymous device identifier, not to your real identity. We do not record session replays, mouse movements, or page contents.

• To run live games (delivering questions, scoring answers).
• To let hosts return to their quizzes across sessions (via the anonymous identifier cookie or the optional email association).
• To process Pro subscriptions.
• To debug issues and improve the product (via aggregated analytics).
• To send transactional emails (claim verification, Pro receipts).
• To send occasional product updates to people who have signed in, which you can unsubscribe from at any time. We decide who to email from your sign-in date and whether you've used Quizzy recently — we never read your quizzes, questions, or their titles to decide what to send you.

We do not use your data to train AI models, target ads, or sell to third parties.

• Vercel — application hosting and serverless compute (your requests pass through Vercel's infrastructure).
• Upstash — Redis storage (game state, quiz data, rate-limit counters), provisioned through the Vercel Marketplace.
• PostHog — product analytics (anonymous event data).
• Stripe — payment processing for Pro subscribers.
• Email delivery provider — to send claim-code verification emails, Pro receipts, and the product updates described above.

Each of these processors has their own privacy and security policies. We share only the minimum data needed for them to perform their function.

Quizzy can publish quiz videos to YouTube. This feature is used only by the Quizzy operator to upload videos to Quizzy's own YouTube channel — it is not available to players or quiz hosts, and it never accesses a viewer's, player's, or host's Google account.

What Google data we access

When the operator connects a channel, Google asks them to grant access using the YouTube "manage your account" permission (the youtube.force-ssl scope). This lets Quizzy upload and manage videos on that channel — setting a video's title, description, thumbnail, and privacy status. We do not read the channel's subscribers, watch history, comments, or analytics beyond confirming that an upload succeeded.

What we store

We store a single OAuth refresh token so Quizzy can upload without signing in each time. It is kept in the operator's own server environment, is never shared, and can be revoked at any time from your Google Account permissions page. We do not store Google passwords or account profiles.

Limited use

Quizzy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use YouTube or Google data for advertising, do not sell it, and do not transfer it to anyone except as needed to provide the upload feature itself.

Quizzy can upload quiz videos to TikTok. Like the YouTube feature, this is used only by the Quizzy operator to send videos to Quizzy's own TikTok account — it is not available to players or quiz hosts, and it never accesses a viewer's, player's, or host's TikTok account. Videos are uploaded to the operator's TikTok inbox as drafts, which the operator reviews and publishes manually in the TikTok app. We store a single OAuth refresh token in the operator's own server environment; it is never shared and can be revoked at any time from the operator's TikTok account settings.

Quizzy uses a small number of essential cookies and local-storage entries:

• An anonymous host identifier so you can return to quizzes you created.
• A session cookie for Pro subscribers after they sign in via OTP.
• Theme and language preferences (stored locally on your device).
• A draft of any quiz you're authoring (stored in IndexedDB on your device until it's published).

We do not use third-party advertising cookies or cross-site tracking.

• Live game data (player names, answers, scoreboard): deleted shortly after the game ends.
• Agent-quiz drafts (created via the GPT/MCP integration): up to one hour, then auto-deleted unless claimed.
• Claimed quizzes: retained until you delete them or close your account.
• Pro subscription data: retained while your subscription is active and for the period required by tax and accounting law.
• Aggregated analytics: retained per PostHog's default retention policy (currently 7 years for events, though we do not query data older than 12 months).

Quizzy is designed to work in classroom settings, including with students under 13. We do not collect persistent personal information from players (no email, no account, no device identifier). Players enter a display name only — teachers should instruct students to use first-name-only or pseudonyms.

If you believe a child has provided personal information through our service in a way that requires removal, contact us using the details below and we will delete it promptly.

Quizzy is operated from Australia. By using the service you consent to your data being processed on servers operated by Vercel and our other processors, which may be located outside your country. Our processors maintain industry-standard safeguards including encryption in transit and at rest.

Depending on your location, you may have rights to access, correct, delete, or export the personal data we hold about you. Email us at hello@quizzy.earth to make a request and we will respond within 30 days.

We may update this policy as the product evolves. Material changes will be announced on the homepage or via email to Pro subscribers. The "Last updated" date at the top reflects the most recent revision.

Questions, concerns, or requests: hello@quizzy.earth.