Privacy Policy

Overview

QUIZFORGE ("we", "us", "our") operates the quizforge.ai website and certification prep platform. This policy explains what data we collect, how we use it, and your rights regarding that data. We aim to be straightforward — no walls of legalese.

Data We Collect

Account Information

When you create an account, we collect your email address, name, and password (stored as a salted hash — we never store plaintext passwords). If you sign up via a social provider, we receive basic profile information from that provider.

Usage Data

We collect data about how you use the platform: quiz attempts, scores, flashcard progress, and topic performance. This data powers your personal analytics dashboard and helps us improve question quality.

For signed-in and guest visits, we also record which quiz screens are visible, how long pages and screens remain visible while the tab is in the foreground, quiz actions, navigation clicks, and technical failures. We use these records to understand where visitors encounter problems. This engagement tracking does not record videos of your screen, keystrokes, passwords, payment details, or the text you type into forms.

Technical Data

We automatically collect standard technical data: IP address (used for regional pricing), browser type, device type, and pages visited. We use this for security, analytics, and to detect abuse.

How We Use Your Data

• Provide and maintain the certification prep service
• Track your learning progress and generate performance analytics
• Process payments and manage subscriptions
• Determine regional pricing based on your location
• Send transactional emails (password resets, subscription confirmations)
• Improve question quality based on aggregate performance data
• Detect and prevent fraud or abuse

We do not sell your personal data. We do not use your data for advertising. We do not share your individual quiz performance with employers or certification bodies.

Cookies and Tracking

We use essential cookies for authentication, session management and guest access, and Google Analytics 4 to understand traffic patterns. We do not use third-party advertising trackers, and no advertising storage is ever enabled.

In the EEA, the United Kingdom and Switzerland, Google Analytics is disabled by default under Google Consent Mode v2 and runs only after you allow it on the banner. Elsewhere it runs with IP anonymisation on. You can change your choice at any time by clearing this site's storage in your browser.

The third cookie, _ga_PPKND2ZSLG, comes from a connected site tag: an additional Google Analytics destination, G-PPKND2ZSLG, configured on the G-GKLBQRJM3M container inside Google's own admin. That is why it appears nowhere in this application's code and why no deployment adds, changes or removes it. It can be removed only in GA4 Admin, under the data stream's connected site tags, which is an account action rather than a code change.

Cookie settings

Clears the analytics choice stored in this browser and switches analytics storage off straight away. In the EEA, the UK and Switzerland the consent banner returns so you can choose again. Elsewhere no banner is shown: analytics runs by default, so it resumes on your next page load.

Third-Party Services

We share limited data with the following service providers:

• Stripe — payment processing. Stripe handles all payment card data directly; we never see or store your full card number.
• AI Providers — question generation. We send exam topic data to AI models for question generation. No personal user data is included in AI requests.
• Email Service — transactional emails (password resets, receipts).
• Cloudflare Turnstile — bot protection on sign-in and sign-up forms. Turnstile analyzes technical signals from your browser (such as IP address and device characteristics) to distinguish humans from bots. See Cloudflare's privacy policy for details.
• Google Analytics 4 — aggregate traffic analytics, property G-GKLBQRJM3M. Google receives your IP address (anonymised), page URL, referrer and device type. It never receives your quiz answers, your email address or your account identifier. In the EEA, the UK and Switzerland it is disabled until you consent.
• Google Search Console and Site Kit — search performance reporting on aggregate traffic data, not your quiz content.

Data Storage and Security

Your data is stored in a PostgreSQL database on servers located in the United States. We use encrypted connections (HTTPS/TLS), secure password hashing, and role-based access controls. We regularly review our security practices, but no system is 100% secure.

Your Rights

You have the right to:

• Access your data — view your profile and quiz history from your dashboard
• Correct your data — update your profile information at any time
• Delete your account — you can delete your account yourself from your profile: open Profile, go to the Danger Zone tab, and confirm with your password. This deletes your account and associated data. If you prefer, you can also email us and we will delete it for you.
• Export your data — contact us for a copy of your data in a standard format

To exercise these rights, email [email protected]. We will respond within 30 days.

California and EU/UK Privacy Rights

California (CCPA/CPRA)

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act (CCPA) as amended by the CPRA, and we do not use personal information for cross-context behavioral advertising. California residents may exercise their rights to know, access, correct, and delete personal information using the in-app tools described above or by emailing [email protected]. We do not discriminate against you for exercising these rights.

European Union and United Kingdom (GDPR)

Where the GDPR or UK GDPR applies, we process your personal data on these legal bases: performance of our contract with you (providing the platform and your account), our legitimate interests (security, fraud prevention, and service improvement), and your consent for optional processing (such as using an uploaded document to improve our AI, which you can decline). EU and UK users may exercise their rights of access, rectification, erasure, restriction, portability, and objection by using the in-app tools described above or by contacting [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

Children

QUIZFORGE is designed for professionals preparing for certification exams. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will remove it.

Document Upload Tool

QUIZFORGE offers a free tool that lets you upload a document (PDF, Word, text, or similar) and receive AI-generated practice questions from its content. When you use this tool, the file you upload and the text extracted from it are stored on our servers.

We store your document for three reasons: to generate your questions, to let you continue building a full exam after you create an account, and — unless you opt out — to analyze patterns and improve our AI question generation. The upload tool includes a checkbox (checked by default) that allows us to use your document for service improvement. If you uncheck it, your document is still stored so you can use it, but it is marked private and excluded from analytics and AI tuning.

Original uploaded files are deleted after 90 days. Anonymized extracted text and usage metadata may be retained longer for analytics purposes.

Changes to This Policy

We may update this policy as our practices evolve. Significant changes will be communicated via email to registered users. The effective date at the top of this page indicates when it was last updated.

Contact

Questions about this policy? Email us at [email protected].