Privacy Policy
1. Data Controller
Iris Digital, Micro-entreprise, France
Director of publication: Jamal TANTAOUI
Contact: contact@askquiz.co
2. Data We Collect
- Email address — collected when you sign in via magic link. Used to manage your account and send sign-in emails.
- Generation counter — a timestamped record of each AI generation, linked to your account, used solely to enforce a fair-use daily limit and prevent abuse. It records that a generation happened, never what it was about.
- Quiz data — quizzes you create are stored so they can be shared and taken via a link. Text you paste to generate a quiz is used for that generation only and is not stored. The topic you type is saved with the quiz, like its title.
- Respondent data — each response records the answers given, question by question, so the quiz creator can review them. When a quiz creator asks respondents for details (a name, an email address, a class…), those details are recorded with each response too. AskQuiz stores them on the creator's behalf; the creator decides what to collect and can delete one response or all of them at any time. Respondents see a consent notice before submitting.
3. Cookies
We use two cookies, both strictly necessary and never accessible to JavaScript:
- aq_session — an HttpOnly, opaque session identifier set when you sign in. It authenticates your session (server-side, revocable) and expires after 30 days.
- aq_t_… — set only when you start a quiz that has a time limit. It holds the start time of that quiz, so reloading the page doesn't reset the timer, and is sent only to that quiz. It is deleted when your answers are sent, and expires on its own shortly after the time limit.
On a timed quiz, the answers you have given so far are also kept in your browser (local storage) until they are sent, so a reload doesn't lose them. We do not use analytics, advertising, or third-party tracking cookies.
4. Legal Basis for Processing
- Contract performance — processing your email to provide your account.
- Legitimate interest — counting your daily AI generations to enforce fair-use limits and prevent abuse, and checking at sign-up that your address is neither disposable nor non-existent.
- Consent — respondent name/email, collected only where the creator enabled it and the respondent agreed.
5. Third-Party Services
- Anthropic — quiz generation. Your topic or text is sent to Anthropic's Claude API when you use AI generation: anthropic.com/legal/privacy.
- Brevo — transactional email (magic-link sign-in): brevo.com/legal/privacypolicy.
- MailProbe — email verification, from the same publisher as AskQuiz. When you create an account, your address is checked before the sign-in link is sent, so a disposable or non-existent address can be refused. The address is processed in memory and nothing is stored: mailprobe.dev/privacy.
We do not sell your personal data, and we do not share it with third parties for advertising purposes.
6. Operational Metrics
To monitor service quality (latency, error rates, token usage), we retain aggregated technical logs for up to 90 days. These logs never contain your quiz topics, input text, or generated content — only the difficulty level, question count, status code, and token counts.
7. Data Retention
We keep your account data for as long as your account is active. You can delete your account at any time from your dashboard; doing so removes your account and all your quizzes and their responses. Generation counters are automatically purged after 7 days.
8. Your Rights (GDPR)
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — delete your account (and all its data) in one click from your dashboard, or ask us.
- Right to portability — receive your data in a structured, machine-readable format.
- Right to object / restriction — object to or restrict processing based on legitimate interests.
To exercise these rights, contact contact@askquiz.co. You may also lodge a complaint with the CNIL: cnil.fr.
9. Data Security
We use appropriate technical and organizational measures — HTTPS, HttpOnly cookies, server-side sessions. No system is completely secure; we cannot guarantee absolute security.
10. Changes to This Policy
We may update this policy from time to time. Changes are posted on this page with an updated date.
11. Contact
For privacy questions or to exercise your rights: contact@askquiz.co