Privacy Policy

1. Controller

Patrick Schütte
Email: [patrick.sch@web.de]

Quizly is a non-commercial learning project of the Developer Akademie.

2. Which data is processed

• Account data: username, email address and your password. The password is only stored as a secure hash, never in plain text.
• Quiz data: the YouTube links you enter and the quizzes created from them (title, description, questions, answers, creation date).
• Technical data: when you visit the website, the server automatically processes your IP address, date and time of the request and the requested page. This is necessary to deliver the website.

The answers you choose while playing a quiz are only stored in your browser and are not sent to the server.

3. Purpose and legal basis

Account and quiz data are processed to provide the functions of Quizly: registration, login and creating, playing and managing quizzes (Art. 6 (1) (b) GDPR). Technical data is processed to run the website securely (Art. 6 (1) (f) GDPR).

4. Cookies

After login, two technically necessary cookies are set: access_token (valid for 30 minutes) and refresh_token (valid for 1 day). They keep you logged in and can not be read by JavaScript (HttpOnly). Both cookies are deleted when you log out. No tracking or advertising cookies are used by Quizly itself.

5. Creating a quiz

When you create a quiz, the following steps happen:

• YouTube: the audio track of the video is downloaded from the servers of YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The audio file is deleted again right after the transcription.
• Transcription: the audio is converted into text with Whisper AI. This happens locally on the server; the audio is not sent to OpenAI.
• Google Gemini: the transcript is sent to the Gemini API of Google to generate the quiz questions. Quizly uses the free version of the Gemini API. According to the Gemini API terms, Google may use the submitted content to improve its products, and it may be reviewed by people. No personal data of your account is sent to Google, only the transcript of the video.

Google may process data in countries outside the European Union, for example in the USA. Further information: Google Privacy Policy and Gemini API Terms.

6. Embedded YouTube videos

On the quiz overview page, the YouTube video of the quiz is embedded. When this page is opened, your browser connects to the servers of YouTube. YouTube receives your IP address and can set its own cookies. The legal basis is Art. 6 (1) (f) GDPR; showing the source video is part of the quiz function. Further information can be found in the Google Privacy Policy.

7. Storage duration

Your account data is stored as long as your account exists. Quizzes are stored until you delete them. When a quiz is deleted, all of its questions are deleted as well. Login tokens expire automatically after 30 minutes and 1 day; after logout the refresh token can not be used again.

8. Your rights

Under the GDPR you have the right to:

• access the data stored about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• have your data deleted (Art. 17 GDPR)
• restrict the processing of your data (Art. 18 GDPR)
• receive your data in a common format (Art. 20 GDPR)
• object to the processing of your data (Art. 21 GDPR)

To use these rights, simply send an email to the address above. You also have the right to lodge a complaint with a data protection supervisory authority.

9. Changes

This privacy policy may be updated if Quizly changes. The current version can always be found on this page.

Last updated: October 2026