Privacy policy

Last updated: 18 October 2026

beatmyquiz (“we”, “us”) is a quiz maker at beatmyquiz.obodo.fun. This page explains what we collect, why, and what you can do about it. Taking a quiz does not require an account.

1. What this covers

This policy covers the beatmyquiz website and API. It applies to:

  • Takers — people who answer a quiz
  • Creators — people who publish quizzes (free or Pro)

If a Pro creator turns on email capture, your email is shared with that creator under the terms below. Their own mailing practices are separate from ours.

2. Data we collect

When you take a quiz

  • Result summary — your score or persona key, quiz id/version, and a short share code. We do not store each individual answer choice; scoring runs in your browser and we keep the result.
  • Anonymous device id — a random id in your browser’s local storage so the same device is not counted twice on the same quiz.
  • Referral & traffic source — who shared the link that brought you (if any), campaign tags, and coarse source labels (for example share card, invite, or direct).
  • Product events — things like opening a short link, saving a card image, sharing to X, or tapping “make a quiz”. Used to measure sharing and product use, not to build a marketing profile of you.
  • Share card image (optional) — if you save or share a result card, we may store the PNG so social previews work.
  • Email (optional, Pro quizzes only) — only if the creator enabled the email bar, you type an address, and you check the consent box. We do not pre-check that box.

When you create a quiz

  • Handle — the X-style handle you claim when you publish
  • Editor token — a secret stored in your browser so you can edit your quizzes later
  • Quiz content — titles, questions, options, results, and settings you publish
  • AI prompts (if you use AI generate) — the topic text you send is processed by our language-model provider to draft the quiz
  • Pro billing — if you upgrade, the email you give at checkout and payment status from our payment provider (Creem). We do not store full card numbers.
  • Subscriber list (Pro) — emails people opted in to share with you on your quizzes; you can export them as CSV

Technical data

  • Standard request logs and security signals through our host (Cloudflare), including IP address used for short-lived rate limiting (in memory, not kept as a long-term profile)
  • We do not use advertising cookies or third-party ad trackers on beatmyquiz

3. How we use data

  • Run quizzes, show results, and print short links on share cards
  • Attribute shares (who brought whom) and aggregate stats for creators and for our own product metrics
  • Prevent abuse (rate limits, spam, duplicate takes)
  • Deliver optional “email me when this creator posts” sign-ups to the creator you consented to
  • Process Pro payments and refunds
  • Generate AI drafts when a creator asks for them
  • Keep the service secure and debug outages

We do not sell personal data. We do not use quiz answers to target ads.

4. Who we share with

  • Quiz creators (with your consent) — if you opt in on a Pro email bar, your email is shared with that creator so they can message you about new quizzes. They can download a CSV of their subscribers.
  • Cloudflare — hosting, database (D1), object storage (R2), and edge caching for the site and API
  • Creem — payment processing for Pro subscriptions
  • AI model provider — only the prompt/topic (and related generation context) when a creator uses AI quiz generation
  • Law or safety — if we are legally required to, or to protect people from serious harm or abuse

Creators are independent controllers of any list they build from opted-in emails. Ask them how they use your address, and unsubscribe with them directly when you can.

5. Cookies and local storage

We rely mainly on browser storage, not advertising cookies:

  • localStorage — anonymous take id; creator editor token
  • sessionStorage — short-lived referral parameters while you finish a quiz

Our infrastructure provider may set strictly necessary cookies for security and delivery. You can clear site data in your browser; that may reset your anonymous id or creator editor access.

6. Retention

  • Take results, referral links, and product events — kept while needed to run share links, creator stats, and abuse prevention; aggregated daily stats may be kept longer
  • Share-card images — removed on a schedule (on the order of a couple of months) unless still needed for an active link
  • Subscriber emails — until the creator deletes them or you ask us (and them) to remove your address
  • Billing records — as long as required for accounting, refunds, and legal obligations

7. Your choices

  • Skip any question; skip the email bar with “No thanks”
  • Do not check the consent box if you do not want your email shared with a creator
  • Clear this site’s data in your browser to drop the anonymous id / editor token
  • Creators: stop collecting emails by turning the feature off; delete or stop using exported CSVs under your own policies
  • Email us (below) to ask what we hold about you, to correct it, or to request deletion where we control the data. If your email was shared with a creator, we will remove our copy and tell you to contact that creator for their copy.

If you are in the EEA, UK, or a similar region, you may also have rights to access, rectification, erasure, restriction, portability, and objection, and to complain to a supervisory authority.

8. Children

beatmyquiz is not directed at children under 13 (or the minimum age required in your country). Do not use the service or submit personal data if you are under that age.

9. Security

We use HTTPS, access controls on our Cloudflare account, hashed creator tokens, and rate limits. No method of transmission or storage is perfectly secure. Keep your creator editor token private — anyone with it can edit your quizzes.

10. International processing

We operate on Cloudflare’s global network. Your data may be processed in the United States and other countries where Cloudflare or our processors run. Payment and AI providers may process data in their own regions under their terms.

11. Changes

We may update this policy as the product changes. We will revise the “Last updated” date above. Continued use after a change means you accept the updated policy. Material changes that affect how we use emails will be called out more clearly where we collect them.

12. Contact

Questions or privacy requests: privacy@obodo.fun.

Pro refunds are handled separately — use the refund contact shown on the Pro page when it is configured.