This is a plain-language description of what QuizLlama actually does with your data, written to be accurate to the code — not a substitute for legal advice. If you need a policy that's been reviewed for a specific jurisdiction's compliance requirements (GDPR, CCPA, etc.), have a lawyer review this before relying on it.
What we collect
- Quiz content. Questions, answers, and any image/audio links you add when you build a quiz. This is stored in our database and reachable only via a private link containing a secret key, unless you sign in (see below).
- Google account info, if you sign in. If sign-in is enabled and you use it, we store your Google account ID, name, and email address — this is what lets you find your quizzes under "My quizzes" without needing to bookmark a link.
- Player nicknames. When you join a live game, the nickname you type is held in server memory for that game session. If the host was signed in with Google, the final results (each nickname, its score, and which questions it got right) are saved to that host's account so they can review or download them; they are deleted automatically after 90 days, and the host can delete them sooner. If the host wasn't signed in, nothing about the players is saved. Players are asked for a nickname, not a real name.
- IP addresses, for rate limiting. We use your IP address in memory to rate-limit quiz creation, joining a game, and admin login attempts, so the service stays usable for everyone. The address itself is never written to our database, and it's dropped from memory once the rate-limit window passes.
- Feedback you send us. At the end of a hosted game you can rate it, leave a comment, and optionally give an email address. We store what you send along with which quiz it was about and how many players took part. We use the email only to reply to your feedback — unless you tick “Send me occasional updates”, in which case we may also email you about new QuizLlama features and quiz packs. You can unsubscribe at any time by replying to one of those emails or writing to the support address below.
- Page views, without the address. For each page view we store the path, the time, and a one-way salted hash of your IP address — never the address itself. The hash exists only so we can count how many distinct visitors a page had; it isn't linked to your account, your quizzes, or anything you do in a game. These records are deleted after 90 days.
What we don't do
- We don't run any third-party analytics, advertising, or tracking scripts. There is no Google Analytics, ad pixel, or similar on this site today.
- We don't sell or share your data with third parties for marketing purposes.
Third parties we do use
- OpenRouter processes the topic or Wikipedia content you submit when you use AI quiz generation, in order to draft questions. See OpenRouter's privacy policy.
- Wikipedia's API is queried when you generate a quiz grounded in a Wikipedia article.
- Google is used for optional sign-in (OAuth) and, for Picture Round questions, some images are hotlinked from Wikimedia Commons.
How long we keep things
Quizzes persist until you delete them or (for admin-added content) an administrator removes them. Saved game results are deleted after 90 days. Feedback is kept until we've acted on it; an email address you gave us is deleted on request. Account info tied to Google sign-in persists until you ask us to remove it (this also removes any saved results).
Your choices
You can play without ever signing in — quizzes created via a secret link don't require an account. If you signed in with Google and want your account data removed, or want an email address you left with feedback deleted, email support@thequizllama.com and we'll delete it.
Changes
If this policy changes materially, we'll update the date at the top of this page.