Privacy Policy

Last updated: 6 March 2026

This Privacy Policy explains what information LetQuiz collects, how it is used, and the choices you have. We are committed to protecting your privacy and will never sell your personal data.

1. Information We Collect

Account information — when you register we collect:

• Username
• Email address (stored as lowercase; used only for login)
• Password (stored as a salted hash — we never store the plain text)

Content you create — study sets, card terms and definitions, folder names, and the public/private visibility you choose for each.

Study activity — when you complete a study session we record your score, the number of cards studied, the mode used (flashcard or quiz), and a timestamp. This data is tied to your account and is used only to show you your own progress.

Technical data — standard web server logs (IP address, browser type, pages visited) are retained for up to 30 days for security and debugging purposes. We do not use these logs for profiling.

2. How We Use Your Information

• To operate the service: authenticate your login, display your sets, and save your progress.
• To show public sets and folders to other users, if you choose to make them public.
• To detect and prevent abuse, spam, and security incidents.
• To improve the service based on aggregate, anonymised usage patterns.

We do not use your data for advertising, sell it to third parties, or share it with any third party except as described below.

3. Cookies and Local Storage

LetQuiz uses a single session cookie to keep you logged in. This cookie is HttpOnly (not accessible to JavaScript) and is deleted when your session expires or you log out.

We also store your theme preference (light or dark) in your browser's localStorage. This stays on your device and is never sent to our servers.

We use no analytics cookies, tracking pixels, or third-party marketing cookies.

4. Third-Party Services

The LetQuiz interface loads the following resources from third-party CDNs:

• Bootstrap (CSS & JS) from cdn.jsdelivr.net
• Bootstrap Icons from cdn.jsdelivr.net
• Bricolage Grotesque & DM Sans fonts from fonts.googleapis.com / fonts.gstatic.com

When your browser loads these resources, the CDN provider may log your IP address as part of normal web serving. LetQuiz has no control over these third-party logs. All CDN resources are loaded with Subresource Integrity (SRI) hashes to protect against CDN compromise.

5. Data Retention

Your account data is retained for as long as your account exists. Study result records are retained for as long as the corresponding study set exists. When you delete your account, all associated data — account details, study sets, cards, folders, and results — is permanently deleted from our database.

6. Your Rights

You have the right to:

• Access — view all your study sets and study history via your account dashboard.
• Rectification — update your username or email at any time from your profile page.
• Erasure — delete individual sets, cards, and folders at any time. To delete your account and all associated data, contact us at the address below.
• Portability — your study set content is visible and can be copied from the dashboard at any time.

7. Security

We apply reasonable technical and organisational measures to protect your data, including password hashing, CSRF protection on all forms, rate limiting on login and registration, and HTTP security headers (including X-Frame-Options, X-Content-Type-Options, and Referrer-Policy). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Children

LetQuiz is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us via the details on the About page.