Privacy Policy
Last updated: August 15, 2026
1. Who controls your data
The data controller is CODIGO ARTE Kamil Szulc, Żeromskiego 9/1, 60-544 Poznań, Polska. Contact: i2p30mk@gmail.com.
2. What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account details (name, email, sign-in method) | Create and secure your account; know which quizzes are yours | Performance of a contract |
| If someone sent you a quiz link: the name you enter, plus an email or phone number only if you choose to give one | So the person who sent the quiz can tell whose answers are whose. Nothing else — we don't email you, profile you, or use it for anything but showing them their results | Legitimate interests of the person who sent you the link |
| If someone sent you a quiz link: your answers and how long you took | Produce the result that person sees | Legitimate interests of the person who sent you the link |
| Uploaded document text and the resulting quiz | Produce your quiz — whether we write the questions from the document or transcribe questions the document already contains — and let you revisit it later | Performance of a contract |
| Payment metadata (amount, order id — never full card details) | Process your purchase, handle refunds, prevent fraud | Performance of a contract; legal obligation (accounting) |
| Basic technical logs (IP address, request metadata) | Security, abuse prevention, rate limiting | Legitimate interest |
| Advertising identifiers (production only, with consent) | Show ads on the free library pages | Consent |
We never see or store your card details. Payment is handled entirely by Lemon Squeezy's own checkout; we only receive confirmation that a payment succeeded or was refunded.
2b. If you were sent a quiz link
You do not need an account to take a quiz somebody shares with you, and we do not create one for you. We ask for a name so the person who sent it can tell whose answers are whose. An email or phone number is optional — give one only if they asked you to.
What you enter, your answers, and how long you took are visible to the person who sent you the link; that is the purpose of the feature. They are shown to nobody else and are never used for advertising. We deliberately do not show you your own score or which answers were right — ask whoever set the quiz.
That person decides how long to keep it, and can delete the link and everything collected through it at any time, which erases your record permanently. If you want your data removed and cannot reach them, write to i2p30mk@gmail.com and we will act on it.
3. Retention
Data tied to your account — your uploaded documents' text and your generated quizzes — is kept for as long as your account exists, so your quiz library stays available to you. There is no automatic deletion window. You can request erasure of your account and its data at any time by contacting us; see "Your rights" below. Free library quizzes require no account and involve no personal data retention beyond standard technical logs.
4. Processors
We use the following processors to run the Service:
- Vercel — hosting and infrastructure
- Neon — database (account data, quizzes, orders)
- Clerk — authentication (Google, Apple, email/password sign-in)
- Lemon Squeezy, LLC — payment processing (merchant of record)
- Resend — transactional email (e.g. "your quiz is ready")
- Vercel AI Gateway — the AI model that writes or transcribes quiz questions from the text of documents you upload, once payment is confirmed
- Google AdSense — advertising on the free library pages (production only)
5. International transfers
Some of these processors operate outside the European Economic Area. Where that is the case, transfers are made under the EU Standard Contractual Clauses or an equivalent safeguard recognised under GDPR.
6. Advertising and cookies
Ads are shown only in production, only on the free library pages, and only once you've given consent via the certified consent prompt shown on first visit. You can withdraw consent at any time by clearing your browser's cookies for this site or revisiting the consent prompt. No advertising cookies are set before consent is given.
7. Your rights
Under GDPR you have the right to access, correct, delete, restrict, or export your data, and to object to processing based on legitimate interest. To exercise any of these, contact i2p30mk@gmail.com. We'll respond within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority, or your own country's equivalent if you're elsewhere in the EEA.