Privacy Policy
1. Data Controller
Iris Digital, Micro-entreprise, France
Director of publication: Jamal TANTAOUI
Contact: contact@askquiz.co
2. Data We Collect
- Email address — collected when you sign in via magic link. Used to manage your account and send sign-in emails.
- Usage fingerprint — a hashed, anonymized identifier derived from your IP address, used solely to enforce fair-use daily limits and prevent abuse.
- Quiz data — quizzes you create are stored so they can be shared and taken via a link. Input topics and text are not permanently stored after generation.
- Respondent data — when a quiz creator turns on name (or name and email) collection, those details are recorded with each response. AskQuiz stores them on the creator's behalf; the creator decides what to collect and can delete all responses at any time. Respondents see a consent notice before submitting.
3. Cookies
We use one cookie: aq_session — an HttpOnly, opaque session identifier set when you sign in. It authenticates your session (server-side, revocable), expires after 30 days, and is never accessible to JavaScript. We do not use analytics, advertising, or third-party tracking cookies.
4. Legal Basis for Processing
- Contract performance — processing your email to provide your account.
- Legitimate interest — anonymized fingerprints to enforce fair-use limits and prevent abuse.
- Consent — respondent name/email, collected only where the creator enabled it and the respondent agreed.
5. Third-Party Services
- Anthropic — quiz generation. Your topic or text is sent to Anthropic's Claude API when you use AI generation: anthropic.com/legal/privacy.
- Brevo — transactional email (magic-link sign-in): brevo.com/legal/privacypolicy.
We do not sell your personal data, and we do not share it with third parties for advertising purposes.
6. Operational Metrics
To monitor service quality (latency, error rates, token usage), we retain aggregated technical logs for up to 90 days. These logs never contain your quiz topics, input text, or generated content — only the difficulty level, question count, status code, and token counts.
7. Data Retention
We keep your account data for as long as your account is active. You can delete your account at any time from your dashboard; doing so removes your account and all your quizzes and their responses. Anonymized usage fingerprints are automatically purged after 7 days.
8. Your Rights (GDPR)
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — delete your account (and all its data) in one click from your dashboard, or ask us.
- Right to portability — receive your data in a structured, machine-readable format.
- Right to object / restriction — object to or restrict processing based on legitimate interests.
To exercise these rights, contact contact@askquiz.co. You may also lodge a complaint with the CNIL: cnil.fr.
9. Data Security
We use appropriate technical and organizational measures — HTTPS, HttpOnly cookies, hashed fingerprints, server-side sessions. No system is completely secure; we cannot guarantee absolute security.
10. Changes to This Policy
We may update this policy from time to time. Changes are posted on this page with an updated date.
11. Contact
For privacy questions or to exercise your rights: contact@askquiz.co