Privacy Policy

Last updated: 2026-10-28

Cove Code LLC ("we", "our", or "us") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and the choices you have.

1. Information We Collect

Account data — name and email address provided at registration.
Usage data Optional product analytics is currently disabled. No analytics events, scripts, storage, or third-party analytics requests are sent.
Quiz response data — answers submitted by respondents to quizzes you create and share.
Technical data — IP address, browser type, and operating system collected via server logs.

2. How We Use Your Information

To provide, maintain, and improve the QuizMachine service.
To send transactional emails such as account confirmations and quiz invitations.
To enforce our Terms of Service and prevent abuse.
To comply with applicable legal obligations.

We do not sell your personal information to third parties.

3. Consent for Quiz Responses

Before submitting answers to any quiz, respondents must affirmatively check a box confirming they have read and agree to this Privacy Policy. No quiz response — including any personal data a respondent chooses to enter in their answers (e.g. a free-text name or email) — is stored without this consent being given for that specific submission.

For quiz response data specifically, the quiz creator (the "Trainer" or organisation account that built and shared the quiz) is the data controller under GDPR — they decide what questions to ask and what to do with the responses. Cove Code LLC acts as a data processor, storing and delivering that data on the quiz creator's behalf. Requests about a specific quiz's response data (access, correction, deletion) should generally go to that quiz's creator first; Cove Code LLC can assist where the creator is unreachable or where the request concerns your own account data directly.

4. Cookies

We use first-party authentication, security, and consent cookies only for their stated purposes. Optional analytics storage is created only when analytics is enabled and you consent. We do not use advertising or cross-site tracking cookies.

Analytics: Optional product analytics is currently disabled. No analytics events, scripts, storage, or third-party analytics requests are sent.

This versioned inventory lists every storage family used by the application. Braces and asterisks represent per-quiz, per-response, per-question, or framework-generated suffixes; they are not literal cookie names.

Name or pattern	Purpose	Category and storage	Lifetime	Access and security
`.quizmachine.auth`	Keeps a signed-in account authenticated.	Strictly necessary · Cookie · First party	8 hours.	HttpOnly; Secure; SameSite=Lax; supports top-level returns from hosted payment providers.
`.AspNetCore.Antiforgery.*`	Pairs a browser with request-verification tokens to prevent cross-site request forgery.	Strictly necessary · Cookie · First party	Browser session.	HttpOnly; SameSite=Strict; the suffix is generated by ASP.NET Core.
`.AspNetCore.Mvc.CookieTempDataProvider`	Carries a one-time success or error message across a redirect.	Strictly necessary · Cookie · First party	Browser session; removed after the message is read.	Data-protected; HttpOnly; SameSite=Lax.
`.AspNetCore.Culture`	Remembers the language selected for the site.	Strictly necessary · Cookie · First party	180 days.	HttpOnly; Secure; SameSite=Lax.
`qm_tk`	Provides a random browser identifier for anonymous quiz attempts, retake rules, and paid access.	Strictly necessary · Cookie · First party	180 days.	Random value; HttpOnly; Secure; SameSite=Lax.
`qm_access_code_client`	Separates anonymous-browser access-code attempt budgets while an IP-wide limit also applies.	Strictly necessary · Cookie · First party	15 minutes (configured access-code window).	Random value; HttpOnly; Secure on HTTPS; SameSite=Lax.
`qm.live.participant`	Keeps a participant in one live-session lobby until the session expires or access is revoked.	Strictly necessary · Cookie · First party	2 hours.	Random session-scoped token (only its hash is stored server-side); HttpOnly; Secure; SameSite=Strict; limited to the live-session path.
`qm_ac_{quizId}`	Remembers that this browser supplied an accepted access code for one quiz.	Strictly necessary · Cookie · First party	1 day.	Stores the matched code identifier, not the submitted code; HttpOnly; Secure; SameSite=Strict.
`qm_result`	Proves that an anonymous browser may reopen the results it submitted. Older per-result cookies named qm_result_{responseId} are removed once a browser holds more than a few.	Strictly necessary · Cookie · First party	Browser session.	Random proof (only its hash is stored server-side); HttpOnly; Secure on HTTPS; SameSite=Lax.
`qm_start_{quizId}`	Keeps the server-issued start time stable for a timed quiz attempt.	Strictly necessary · Cookie · First party	1 day.	HttpOnly; Secure; SameSite=Strict.
`qm_math_attempt_{quizId}`	Keeps the protected randomized parameters stable for a quiz attempt's randomized math questions; one cookie per quiz.	Strictly necessary · Cookie · First party	1 day.	Data-protected; HttpOnly; Secure; SameSite=Strict; removed after submission.
`qm_dyn_attempt_{quizId}`	Keeps an in-progress dynamic quiz selection and its previous setup available to this browser.	Strictly necessary · Cookie · First party	1 day.	Random proof (only its hash is stored server-side); HttpOnly; Secure; SameSite=Lax.
`qm_inv`	Completes the correct invitation after the invited respondent submits the quiz.	Strictly necessary · Cookie · First party	1 day.	HttpOnly; Secure; SameSite=Lax; removed after completion.
`qm_stripe_connect_state`	Binds the Stripe Connect callback to the signed-in account that started it.	Strictly necessary · Cookie · First party	10 minutes.	Data-protected; HttpOnly; Secure; SameSite=Lax; path limited to /StripeConnect; single use.
`qm_cookie_consent`	Remembers the necessary/analytics choice and its versioned pseudonymous receipt identifiers. It is created only when optional analytics is release-enabled and the visitor chooses.	Preference and optional-analytics control · Cookie · First party	365 days (configured).	JavaScript-readable so the consent gate can apply the choice; Secure on HTTPS; SameSite=Lax.
`quiz-draft-notes:{authorId}:{quizId}`	Saves the author's draft notes on this browser so they can be recovered when the quiz editor is reopened. Notes are not synced to the account.	Functionality · localStorage · First party	Until the notes are cleared or browser storage is cleared.	JavaScript-readable in the same origin; scoped to the author and quiz identifiers.
`quiz-preview-{quizId}`	Temporarily records page labels, item types, and plain item text so Preview can warn about unsaved editor changes. It excludes media, answer keys, and question detail.	Functionality · localStorage · First party	Removed after save or editor reopen; stale snapshots are removed or ignored after 1 hour.	JavaScript-readable in the same origin; scoped to the quiz identifier.
`qm-answer-draft:{quizId}:{attemptStart}`	Recovers non-file answers, the attempt start time, and the submission token so a lost submission is replayed rather than duplicated, if the page reloads or if the quiz is closed and reopened in the same browser. Offered only to the same signed-in account (or to anonymous use) that kept it. Falls back to sessionStorage when localStorage cannot be written; a transient probe key is written and removed to detect that.	Functionality · localStorage · First party	Removed when the submission is confirmed or the attempt completes; expired and removed after 72 hours.	JavaScript-readable in the same origin; scoped to one quiz attempt and account.
`qm-child-picture-choice:{quizId}:{questionId}`	Recovers ordered picture selections, attempt progress, final correctness, and a server-protected attempt receipt for a Child Picture Choice question if the page reloads.	Functionality · sessionStorage · First party	Current browser tab/session; removed when the attempt completes.	JavaScript-readable in the same origin; scoped to one quiz and question.
`qm-completed-attempt:{quizId}`	Prevents browser history from restoring a completed attempt as an active form.	Functionality · sessionStorage · First party	Current browser tab/session; consumed on the next quiz navigation.	JavaScript-readable in the same origin; contains only a one-time completion marker.

5. Data Sharing

We share your data only with:

Infrastructure providers — cloud hosting and database services that process data on our behalf under strict data-processing agreements.
Email delivery — Brevo sends account, payment and quiz emails on our behalf.
Payment providers — Lemon Squeezy (merchant of record for plans) and Stripe (for quizzes and packages sold by trainers) process payment details. We receive order status and amounts, never card numbers.
AI providers — when a quiz owner turns on AI features, questions, answers and uploaded images are sent to the AI provider the quiz owner chose, using the quiz owner's own API key. Depending on the provider, this data may be processed in the United States, China, South Korea or elsewhere outside the EU/EEA. If a respondent uses AI chat, the question, their answer and the conversation are sent to the respondent's own configured AI provider instead.
Error monitoring — Sentry receives technical error reports. Request contents, cookies and headers are removed before sending.
Legal authorities — when required by law or to protect the rights and safety of our users.

We host the service on Microsoft Azure in France and store data in TiDB Cloud on AWS in Frankfurt, Germany. Some of these providers process data outside the EU/EEA. Those transfers rely on the provider's data-processing terms, such as standard contractual clauses or an adequacy decision.

6. Data Retention

We retain account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at hello@quizmachine.io. Quiz response data is retained until the quiz owner deletes it.

Payment and refund records are kept for as long as tax and accounting law requires, even after an account is deleted.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise these rights, contact us at hello@quizmachine.io.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure; we encourage you to use a strong, unique password.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice in the application. Your continued use of QuizMachine after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at hello@quizmachine.io.

Cove Code LLC
30 N Gould St Ste N, Sheridan, WY 82801