Privacy

mquiz is made and run by Michelle Feferman, who is responsible for everything described below. Oleg Feferman funds the project as an investor and has no part in building or running it, and no access to any of the data.

Questions, requests and complaints: michelle.feferman@existek.com.

Where a school uses mquiz with its pupils, the school decides who uses it and why; in that arrangement the school is the controller for its pupils' use and mquiz processes on its behalf.

If you make an account — your email address, or, for pupils who sign up with a username instead, a username and password. Pupil usernames are stored against an internal address that is never emailed and that you never see. mquiz also keeps a display name, the avatar and colour theme you pick, your points balance, and a friend code.

When you play — which quiz, when you started and finished, your score, and your answer to each question, including anything you typed into a typing question. Group games also record the name and avatar shown on the scoreboard.

Playing without an account — a random identifier is stored in your browser so your results come back to you on the screen after a quiz. It is not linked to a name or an email. If you later make an account, past attempts from that browser are attached to it.

Safety and moderation — mquiz blanks out swear words in anything typed. When it does, it keeps a record of the original text, so a single slip can be told apart from a pattern. It also records requests that could not have come from ordinary use of the site — attempts to change a score or an account from outside the game — and will close an account automatically after repeated attempts. Reports of a bad question are kept with whatever note was written.

Teachers and classes — class names, who is in each class, assignments, and the results of pupils in those classes.

mquiz is designed for primary-age children, and that changes what mquiz does rather than just what is written here.

• There is no analytics or measurement of any kind on the screens children play on — the join screen and every quiz page. That is not a setting; the code will not load it there.
• There is no advertising, no ad tracking and no profiling. Nothing is sold or shared with anyone for marketing.
• Playing a quiz needs no account, no email and no name that means anything — a nickname is enough.
• Scores are shown to the child and to the teacher whose quiz it is. They are not public.
• There are no public leaderboards, and mquiz deliberately has no ranking of children against each other outside a single live game.

If you are a parent and you would like everything about your child removed, get in touch and it will be done — see Your rights below.

Two kinds, and only one of them is a choice.

Needed to work at all.A sign-in cookie, set by the hosting provider, which keeps you signed in. Small values in your browser's local storage remember your colour theme, your answer to the cookie question, and the random identifier described above. None of these are used to track you, and the site cannot work without them.

Only if you agree. Google Analytics, which counts visits so it is clear which parts of mquiz get used. It does not run until you say yes, it never runs on the screens children play on, and IP addresses are shortened before they are stored. If you say no, it is never loaded. You can change your mind by clearing your browser storage for this site.

• To provide mquiz— an account, a quiz and its results cannot exist without storing them. This is performance of the agreement with you, or a school's legitimate interest in running its lessons.
• To keep children safe— the profanity record, the reports queue and the tamper record. This is mquiz's legitimate interest, and a school's, in a service children can use safely.
• Analytics — consent, and nothing happens until it is given.

Nothing is sold to anybody. Data is handled on mquiz's behalf by:

• Supabase — the database and sign-in system.
• Vercel — hosting for the website itself.
• An email provider, used only to send sign-in links and to send notice of a reported question.
• Google Analytics — only where consent has been given, and never on children's screens.

Some of these operate outside the UK and EU. Where they do, transfers rely on the standard contractual protections those providers offer.

• Your account and its quizzes: until you delete it.
• Attempts and results: kept while the account exists, so a pupil and their teacher can look back at what was missed.
• Anonymous attempts, with no account attached: kept for 12 months.
• Profanity and tamper records: 12 months, then deleted.
• Reported questions: until resolved, then 12 months.

Deleting your account removes your profile, your quizzes, your results and your moderation records together. It cannot be undone.

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. If you have an account you can do the first and the last yourself, immediately, from your account page — no email and no waiting.

For anything else, or if you played without an account, email michelle.feferman@existek.com. A reply will follow within one month.

If you are not happy with how it has been handled, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.