Privacy Policy

What we collect, why, who can see it, and your choices.

Draft — review before going live. This page has not been reviewed by the owner or a lawyer yet.

Version 2026-10-12-draft

1. Who we are

Who runs QUIZ-WORLD?

QUIZ-WORLD is run by Muneeb ur Rahman (dr-muneeb.com). In this policy “we” means the person who runs the site.

How do I contact you about privacy?

Email drmuneebofficial@gmail.com. You can also use the Suggest button on any page.

Is this policy final?

No. It is a draft until the owner has reviewed it. The version number below changes when the text changes in a way you must agree to again.

2. What we collect and why

Account information

Your name, email address and Google account identifier (from Google sign-in), your role (student, teacher or administrator), and details you add such as college, year, job title, WhatsApp number and profile photo. We need these to run your account and to let teachers recognise their students. Legal basis: performing the service you asked for (contract).

Quiz attempts and results

The answers you give, scores, timings, flags and review activity. Needed to mark quizzes, show results and run classes. Legal basis: contract.

Content you create

Quizzes, questions, explanations, collections, folders and drafts. Needed to provide the library and sharing. Legal basis: contract.

Creator links

If you attach a creator mark: the display name and Instagram, YouTube or website link you enter. Shown publicly on that quiz only while you keep it on. Legal basis: your consent, which you can withdraw by hiding or removing the mark.

Push subscription tokens

If you press Allow on notifications: an address issued by your browser's push service, plus two keys, and your browser name. Used only to send you the notifications you chose. Legal basis: your consent.

Device and browser information

Standard request data (browser type, page requested, approximate time) in server logs, and a browser name stored with a push subscription. Used for security, abuse prevention and fixing problems. Legal basis: legitimate interests.

Cookies and local storage

A secure session cookie keeps you signed in. A readable cookie tells the page you are signed in. Your device's local storage keeps preferences (theme, background, unsent drafts, a short cache of your library list). We do not use advertising cookies. Some public pages use Google Tag Manager and Google Analytics behind the cookie notice.

Website visits

A first-party visit counter with no cookies, no IP address stored, a one-way daily visitor hash, and Do Not Track respected. Kept 180 days.

3. Who can see what

Private, link-only and public quizzes

Private: only you (and administrators for support or moderation). Link-only: anyone who has the link can open and take it. Public: listed in the Public Library for everyone, signed in or not.

Results and teachers

A teacher sees the results of attempts on quizzes they created, and of their assigned students. Students see their own results, when released. Other students never see your answers.

Leaderboards and credits

A class leaderboard shows first names only, and only if the teacher switched it on. A creator mark appears only if its creator chose to show it.

Administrators

Administrators can see accounts, content and results as needed to run the service and handle reports. They cannot sign in as you.

Collections

A private collection is visible only to you. A public collection shows its name, your first name and the public quizzes in it.

4. Notifications

What do you send?

Announcements from the administrator, new public quizzes in subjects you follow, and quizzes assigned to you. The push message itself carries no text; your device fetches the words from us when it arrives.

Email

In-app notifications can also be emailed, if email delivery is switched on for the site. You can turn email off in Profile.

How do I turn them off?

Profile > Notifications switches each type off. You can also block notifications in your browser's site settings. If you block them we never ask again.

Limits

At most 3 push notifications per person per day. Announcements are not counted.

5. Where data is stored and for how long

Where is it stored?

On Cloudflare (Workers, D1 database and static hosting). Cloudflare may process data in several countries; they publish their own security and privacy terms.

How long do you keep it?

Account and results: while your account exists. Removed quizzes: 30 days, then purged unless results or assignments still depend on them. Website visits: 180 days. Sign-in sessions: they expire after a period of inactivity. Push subscriptions: deleted when your browser says they expired, after repeated failures, or after about six months without use. Server logs: a short period set by Cloudflare.

What happens when I delete my account?

Your name, email, profile, photo, creator profile, push subscriptions, notification settings, followed subjects and collections are deleted or replaced by “Deleted account”, your sessions end, and your quizzes and links are closed. Result records that teachers need for their classes may remain without your personal details.

6. Your rights

What can I ask for?

Access to your data, correction of mistakes, a copy (export), deletion of your account, and to withdraw consent (for example by turning off push or hiding your creator mark). Email drmuneebofficial@gmail.com and we will reply within a reasonable time. You can also delete your account yourself from Profile.

Can I complain?

Yes, to the data protection authority where you live.

7. Sharing, security and children

Do you sell my data?

No. We never sell personal data and we do not use it for advertising.

Which third parties do you use?

Cloudflare (hosting, database, delivery). Google (sign-in; and Tag Manager and Analytics on some public pages). Resend (sending notification emails, when switched on). Your browser's push service (Google, Mozilla, Apple or Microsoft) when you allow notifications. Instagram, YouTube and similar sites only when you click a creator link.

How is it protected?

Connections use HTTPS. Sessions use secure, HttpOnly cookies. Quiz answers stay on the server until they are released. Access is checked on the server for every action, and sensitive actions are written to an audit log.

What about children?

QUIZ-WORLD is for people aged 13 and over, or the age of digital consent where you live if that is higher. Younger children should use it only with a parent or teacher, who can ask us to delete the account.

Will this policy change?

Yes, sometimes. When a change matters we change the version and ask you to accept again the next time you sign in.