Security & Data

How your answers are stored

• Encrypted at rest, with keys held separately from the database.
• Served only over HTTPS.
• Never written to application logs, never included in error reports, and never attached to analytics events.
• Never included in a shareable link or image. A share card carries a score and a band — never a question, an answer or a note.

How long we keep it

We keep quiz data for no longer than 90 days after the quiz was created, after which it is deleted or irreversibly anonymised. You do not have to ask for this, and you can ask for it sooner — see below.

This runs as a scheduled job every night rather than on request, and each run is recorded with what it deleted, so the commitment above is something we can show rather than something we assert.

Anonymised data may be retained for aggregate statistics. Anonymised means the link back to a person or a quiz is destroyed, not hidden.

Deleting it sooner

Ask us with your quiz link and we will delete it. We do not require a reason, and we do not tell your partner who asked.

Access

Your quiz is identified by an unguessable link. Anyone with the link can view that quiz, which is why it should be treated as confidential and why quiz pages are excluded from search engines.

Because there are no accounts, we cannot verify identity by any other means — which is also why we cannot recover a lost link beyond the recovery code shown to you.

Payments

Card details are handled entirely by our payment processor. They never pass through our systems and we never store them.

Reporting a vulnerability

Email us. We will not pursue anyone who reports a genuine issue in good faith, does not access or alter other people’s data, and gives us reasonable time to fix it before disclosing.