What stays in WordPress
Your site stores your quizzes, edits, approvals, and reader activity, including answers, scores, results, and reports. Any contact details readers choose to share through a quiz stay there too.
Data handling
How QuizOut handles your data.
Your quizzes and reader activity stay on your WordPress site. QuizOut uses your posts to create quizzes and keeps the details needed to run your account. Here’s what that means for your data.
Optional analytics on this website.
If you accept analytics, Google Analytics measures visits to QuizOut’s public pages and plugin download clicks using cookies. Google receives cookie identifiers, browser and device information, and filtered page and referral information. Only standard campaign labels are retained from page query parameters.
Analytics does not run on business details, sign-in, account, billing, administrative, unsubscribe, or API pages. We do not send account identifiers, contact form contents, quiz answers, or secret URL parameters. Advertising features and Google Signals are off. A download click does not tell us whether you installed the plugin.
We remember your choice for 180 days. Your analytics choice does not affect access to this website or your eligibility for plugin downloads. Use Cookie settings in the footer to change your choice; withdrawing stops collection and removes Analytics cookies. Google’s user and event data retention is two months, which does not limit aggregated reports. Website analytics is not linked to your QuizOut account and is separate from reader records stored in WordPress.
At a glance
Your data, in three parts.
What we use to create a quiz
The plugin sends us your post so we can create a quiz. We don’t keep an ongoing copy of your post or quiz by default. Temporary results and optional quality samples are explained below.
What QuizOut keeps
We keep your account, website, plan, billing, and quiz usage details, along with important account changes and messages you send us. We only keep quality samples if an account owner chooses to share them.
A closer look
What we keep and why.
Your WordPress site is the home for your posts, quizzes, and reader data. QuizOut doesn’t keep its own library of that content. The exceptions are temporary results kept for up to 24 hours and optional quality samples kept for up to 30 days. The breakdown below includes both. A data export is a copy of the information we hold about your account.
We manually review whether ordinary account records are still needed each quarter. There is no automatic inactivity purge. Routine enquiries are reviewed 12 months after resolution; necessary records for unresolved matters and legal obligations are retained separately.
| Category | What we keep and why | How we protect it | Keeping and deleting it |
|---|---|---|---|
| Customer support | Case status, next actions, contact history and short internal notes help us respond to requests. | Private text is encrypted and restricted to cockpit operators. Account exports include case metadata, not internal notes. | Resolved cases and notes are deleted after 12 months, or with the linked account. Open cases remain while we help you. |
| Accounts and login | Your account and referral codes, email address, team memberships and roles, sign-in details, email and sample-sharing choices, and when your welcome email was scheduled. | Email addresses are encrypted when stored. Passwords and sign-in codes are stored in a scrambled form that cannot be turned back into the originals. | Included in your account export and deleted with your account. A person’s login remains if they still belong to another account. |
| Team invitations | Who invited whom, the account and role offered, the invitation reference, its status, and when it was sent, expired, accepted, or cancelled. | The invited person’s email is encrypted. Invitation links expire after seven days. Their secret codes are stored only in a scrambled form and left out of exports. Codes waiting to be emailed are encrypted and checked again before sending. | Invitation history is included in your account export and deleted with the account. An unused login created for an invitation is removed once it has no memberships or valid invitations, unless it also has access to QuizOut’s internal support tools. |
| Websites and connection keys | Your website address, connection details and status, site reference numbers, partly hidden connection-key history, and records of linking a site to your account. | Connection keys let your site talk to QuizOut. We show a full key only once and store it in a scrambled form. Codes used to link a site to an account are protected the same way, and the email address is encrypted. | Included in your account export without secret keys or codes. Deleted with your account. |
| Billing | Your plan, subscription status, purchased or complimentary post packs, complimentary plan dates, Stripe payment references, and brief payment-update records, including when a failed-payment email was scheduled. QuizOut never receives card numbers. | References tied to your Stripe customer, subscription, payment schedule, checkout, and payments are encrypted. Internal reasons for complimentary access are also encrypted and visible only to QuizOut operators. General price references contain no customer information. We don’t store the full payment-update messages Stripe sends us. | Included in your account export. Before deleting your account, we ask Stripe to delete your customer record. Stripe may keep financial records required by law. |
| Quiz usage records | Site and post reference numbers, a scrambled lookup code, dates, billing period, plan, credits used, and how often a quiz was successfully recreated. We also record when usage-warning emails were scheduled. | These records contain no post titles, article text, quizzes, answers, or reader details. | Included in your account export and deleted with your account. |
| Referral program | Which account referred a new customer, signup and qualifying-purchase dates, any loss of eligibility, and credits earned, remaining, or due to expire. We don’t keep a history of referral-link clicks or visitor IP addresses, or use card details to identify referrals. | Only after explicit consent, an encrypted browser cookie remembers the first referral for up to 30 days to credit an account signup. Page scripts cannot read it. Your dashboard and export never reveal a referred customer’s email, website, or account reference. | Your account export includes referral totals and your own credit history. Deleting a referred account removes the link to that account; rewards already earned remain without identifying that customer. Deleting the referring account removes its code and rewards. |
| Optional quality samples | Only when an account owner chooses to share: a post title, the opening excerpt, and the generated quiz, with identifying details removed where possible. We also keep the AI model, quiz format, and versions of the instructions and identity-removal rules used. Excerpts are limited to 4,000 characters. We keep only the newest 100 samples per account. | Samples are encrypted. We remove or leave out web addresses, emails, phone numbers, IP addresses, social handles, secret codes, and site, post, or quiz-request references before saving. People’s names and facts in the text may still remain. Samples are not necessarily anonymous. | Samples expire after 30 days and are included in the owner’s account export. They are deleted immediately when the owner turns sharing off, deletes the samples, or deletes the account. Tests, development sites, failed requests, and reused results are excluded. |
| Important account changes | A history of changes to connection keys, billing, referral rewards, and teams, plus data exports, deletion requests, and sample-sharing choices. Entries use reference numbers and a limited set of non-sensitive details. | These records cannot be edited. Structured details contain no emails, IP addresses, secret codes, scrambled lookup values, Stripe references, or content. Separate internal notes explaining complimentary access are encrypted, restricted to QuizOut operators, and kept out of logs and customer exports. | Included in your account export and deleted with your account. |
| Messages you send us | The name, work email, organisation, website, and optional message you send directly to QuizOut. This is separate from contact details readers share through your quizzes. | Your contact details and message are encrypted when stored. | Messages that match your details are included in your account export. They are deleted when account deletion also removes your login. A login shared with another account is kept. |
| Temporary service data | Short-lived counters and checks to prevent overuse, spot abuse, manage busy periods, and avoid duplicate work. We may keep a successful quiz or caption result to reuse when a request is repeated. We keep only a scrambled code for matching the original request, not its text. | All of this temporary data is encrypted when stored. | Kept for no more than 24 hours. This is temporary working data and is not included in account exports. |
| Background tasks | The task type, when it should run, record references, and the minimum details needed to send account emails. Requests to create quizzes or captions are never placed in this waiting list. | Task details are kept out of service logs. Account email tasks use record references rather than email addresses or Stripe messages. Invitation codes waiting to be emailed are encrypted and expire. Account exports are created in a background task and saved as compressed files in private object storage. Email contains a single-use download link valid for up to 24 hours; consumed and expired files are removed by cleanup. The export itself is not placed in the task queue. | Completed tasks are cleared after one day. Failed tasks are kept so problems can be fixed. Task records are not included in account exports. |
| Generation failure diagnostics | Site and request references, failure categories, timing, model and token usage, and selected provider error details help us investigate failed quiz and caption requests. Articles, prompts, generated content, and credentials are excluded. | Diagnostic details are encrypted and accessible only to QuizOut operators. Messages that may contain submitted content are omitted. | Available for 30 days, then removed by hourly cleanup. Deleted with the site or account. These internal operational records are not included in account exports. |
| Service operations | Hourly counts, timing and estimated costs for each site, detected service issues, and a history of support recovery actions help us spot problems and assist customers. These contain no articles or quizzes. | Only operators can access these records. Internal reasons are encrypted and excluded from account exports. | Site statistics and recovery history expire after 30 days. Resolved service issues expire after 30 days. Linked records are deleted with the account. These internal operational records are excluded from account exports. |
| Account email delivery | Recipient, email category, queue and attempt dates, provider acceptance, delivery, bounce and complaint evidence help us investigate missing emails. Delivery means acceptance by the recipient’s mail server. We collect no open or click tracking. | Email addresses and provider references are encrypted. Message bodies, sign-in codes and arbitrary provider diagnostics are excluded. Only operators can view delivery evidence in the application. | Metadata is kept for 30 days and included in account exports without internal provider references. Linked records are deleted with the account; shared-login evidence is deleted when the login is removed. |
Who can access your account
Your dashboard has four areas: Overview, Sites, Team, and Settings. Owners control billing, privacy, site disconnection, and the team. Admins manage sites and connection keys. Members can view account information and change their own sign-in settings. If you belong to more than one account, switching accounts only gives you the access allowed by your role in that account.
What happens when we create a quiz
We check your post, send it to OpenAI, and return the quiz to your site. The same applies to summaries sent to create sharing captions. We use OpenAI’s store: false setting and keep content sent and received out of our service logs. This is not a zero-retention guarantee: OpenAI may keep abuse-monitoring logs for up to 30 days by default, or longer where legally required.
We may keep an encrypted result for up to 24 hours so a repeated request can reuse it. We keep a scrambled matching code for the request, not its text. Only quizzes can become optional quality samples; captions are never sampled.
Sharing samples is your choice
Sample sharing is off for every new account. Only an account owner can turn it on in Settings to help improve quiz quality. Owners can see how many samples are saved and delete them while keeping future sharing on. Turning sharing off immediately deletes all saved samples. We never take samples from accounts with sharing turned off.
Services we use
AWS hosts the application in Ireland (eu-west-1). Hatchbox manages deployments and displays logs held on our infrastructure without retaining a separate copy. Honeybadger receives filtered operational reports: error records are retained for 15 days after their last occurrence, while its published base Insights allowance has seven-day event retention. Google provides optional consented analytics. See the Privacy Policy for provider roles, transfers, and log and backup retention.
OpenAI uses the text we send to create quizzes and captions. Stripe handles billing and maintains invoices. Our accountants receive necessary financial records for bookkeeping and tax. Required financial records are kept for at least six years, or longer where legally required, separately from account erasure. This accounting use is separate from optional Google Analytics. Amazon SES receives only the messages and recipient details needed to send account emails, including sign-in help, usage updates, team invitations, site-linking emails, and links to data exports.