Privacy Policy
This policy explains how Doc2Quiz handles information when you use the website, optional account service, and shared quiz features.
Controller and contact
The service operator and data controller is doc2quiz. Privacy requests may be sent to contact@docs2quiz.com.
Documents stay in your browser
PDF, DOCX, CSV, TXT, pasted text, OCR, and quiz generation are processed locally in your browser. Document contents are not uploaded to Doc2Quiz. Generated questions are uploaded only if you explicitly choose to create a share link. Closing or refreshing the page clears document content held in browser memory.
Shared quizzes and attempts
When a creator chooses Share, Doc2Quiz stores the edited quiz title, questions, choices, answers, explanations, an unguessable creator key, and expiry time. When a participant submits, Doc2Quiz stores the optional participant name, answers, score, question-level correctness, and submission time so the creator can view aggregate results. Do not include confidential or unnecessary personal information in a shared quiz or participant name. Anyone with the participant link can open the quiz.
Optional account information
If you create an account, Doc2Quiz processes your username, a one-way password-derived verifier, account creation time, hashed session tokens, and expiry times. Your plain password is not stored. Security controls may process short-lived rate-limit information to prevent abuse.
Purposes and legal basis
Account data is used to authenticate users, secure the service, prevent abuse, and provide requested functionality. Shared quiz and attempt data is processed to deliver the sharing, scoring, review, and creator analytics requested by users. Optional website analytics is used only after consent to understand aggregate usage and improve the website.
Service providers
Doc2Quiz uses trusted service providers for website delivery, account functionality, security, and optional analytics. These providers process only the technical or account data needed to provide those services under their applicable safeguards and terms.
Analytics and consent
Analytics are blocked until you accept analytics. Advertising storage, advertising user data, and ad personalization remain disabled. You can reject or withdraw consent at any time through Cookie settings.
Retention
Accounts remain until deletion is requested or inactive-account cleanup is performed. Sessions expire automatically. Security rate-limit records are short-lived. Documents are not retained by Doc2Quiz. Shared quizzes and their attempts expire automatically, normally after 90 days, and may be removed earlier for security, abuse prevention, legal requests, or service maintenance.
Your rights
Subject to applicable law, you may request access, correction, objection, or deletion of personal data by emailing contact@docs2quiz.com.
European privacy rights
Where the GDPR or UK GDPR applies, you may also request restriction or portability, object to processing based on legitimate interests, withdraw consent without affecting earlier processing, and complain to your local supervisory authority.
California privacy
Where the CCPA/CPRA applies, California residents may request access, correction, deletion, and information about disclosures. Doc2Quiz does not sell or share personal information for cross-context behavioural advertising and does not discriminate for exercising privacy rights.
Security and children
Doc2Quiz uses encrypted transport, restricted origins, password stretching, hashed sessions, and rate limiting. No system is completely secure. The educational generator may be used by learners of all ages, but a parent, guardian, or school must supervise younger users and provide any consent required by local law before creating an account or enabling analytics.