Privacy

If you make quizzes

We store your email (for login), your quiz definitions, your API keys (hashed — we can't read them back), and the responses your quizzes collect. Payments are handled by Stripe; we never see card numbers. When you connect an AI assistant, we store an OAuth authorization linking that client to your account and issue it short-lived access tokens — disconnect the client and the tokens stop working.

If you answer a quiz

We store the answers you type, when you started and finished, and the page you came from. We do not store your IP address with your response, and we don't set tracking cookies on quiz pages — a random token in your browser's local storage lets you resume where you left off, and that's it. Your answers belong to the person who made the quiz; contact them for changes. If a quiz asks for something you don't want to share, don't — and you can report abusive quizzes from the link at the bottom of any quiz page.

If you use Secret Santa

We store the names, exclusions, exchange details, and assignments you provide or generate, optional gift suggestions and product links, plus when a private assignment is first revealed. No account, email address, or shipping address is needed. Anyone with a participant link can see that assignment; the organizer holds all participant links. The management link allows editing, redrawing, and deletion, so keep it private. We store a hash of the access tokens, and temporarily store a management recovery link in your tab's session storage after a creation attempt.

Access expires 90 days after the exchange date, or 180 days after creation without a date, with a one-year maximum. Expired records are removed by daily cleanup. The organizer can delete the exchange immediately from the management page. We exclude private Secret Santa pages from third-party analytics and search indexing. Public setup-page analytics contain no names or assignments. Hashed IP counters help limit abuse and are removed after expiry.

Where data lives

Hosting on Vercel, with data stored in Postgres. Responses are kept until you delete them. Deleted quizzes and their responses are purged within 30 days; expired sandbox quizzes are purged within days.

Removal & questions

Email abuse@quizgen.dev to report a quiz or request deletion of your data. We don't sell data to anyone.