a background wave image

Privacy Policy

1. Controller

The controller responsible for processing personal data through Quizly is:

Ebubekir Elicora
Kolberger Str. 4
44649 Herne
Germany

Email: ebubekir.elicora@gmx.de

2. Purpose of Quizly

Quizly is a non-commercial educational and portfolio application. Registered users can submit a YouTube URL and automatically generate a quiz based on the spoken content of the selected video.

3. Hosting and server log files

Quizly is hosted on a Google Cloud virtual machine. When the application is accessed, technical information may be processed by the web server. This can include:

This processing is necessary to deliver the application, ensure technical stability, identify errors and protect the server against misuse.

The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, stable and reliable operation of the application.

4. Registration and user accounts

The following information is processed when a user registers:

Passwords are not stored in plain text. They are processed and stored as password hashes through Django's authentication system.

Account data is processed to create and manage the requested user account. The legal basis is Article 6(1)(b) GDPR.

5. Login and authentication cookies

Quizly uses technically necessary HTTP-only cookies for user authentication:

These cookies are required to keep users authenticated, protect private API endpoints and refresh expired access tokens. Because the cookies are marked as HTTP-only, they cannot be read directly through frontend JavaScript.

The cookies are not used for advertising, analytics or cross-site tracking.

The legal basis is Article 6(1)(b) GDPR. Storage in the user's device is necessary to provide the explicitly requested login functionality pursuant to Section 25(2)(2) TDDDG.

6. Quiz data

When a quiz is generated, the following information may be stored:

This information is required to generate, display, edit and delete quizzes belonging to the authenticated user. The legal basis is Article 6(1)(b) GDPR.

7. Processing of YouTube videos

When a user submits a YouTube URL, Quizly accesses the selected video and temporarily downloads its audio track through the server.

The audio file is used only to create a transcript and is removed after the generation process has finished. Quizly does not permanently store the downloaded YouTube audio file.

Users must only submit videos that they are legally permitted to use. Confidential, private or sensitive content must not be submitted.

8. Whisper transcription

The downloaded audio is transcribed using an installed Whisper model on the Quizly server. The audio is not sent to OpenAI for transcription.

The resulting transcript is temporarily processed so that a quiz can be generated from the spoken content.

9. Google Gemini API

The transcript created from the selected video is sent to the Google Gemini API. Gemini uses the transcript to generate a structured quiz containing a title, description, questions, answer options and correct answers.

The provider of the Gemini API is Google. Depending on the applicable contract and service configuration, data may be processed by Google companies or service providers outside the European Union or European Economic Area.

The transmission is necessary to provide the quiz-generation function requested by the user. The legal basis is Article 6(1)(b) GDPR.

Users must not submit videos containing sensitive personal data, confidential information, trade secrets or other protected content.

10. Embedded YouTube content

Quiz pages may display the submitted YouTube video through an embedded player. When the player is loaded or used, a connection to YouTube may be established. YouTube may receive technical information such as the user's IP address, browser information and interaction data.

YouTube is a service provided by Google. The data processing performed independently by YouTube is governed by Google's privacy information.

11. Recipients of personal data

Personal data may be processed by the following recipients where necessary:

Data is not sold to third parties and is not used for advertising purposes by Quizly.

12. Data retention

User accounts are stored until they are deleted or until storage is no longer necessary for operating the project.

Generated quizzes are stored until the user deletes them, the related account is deleted or the project database is reset.

Temporary audio files are removed after the quiz-generation process. Authentication cookies expire according to the configured access- and refresh-token lifetime or are removed during logout.

Server logs are deleted when they are no longer required for security, troubleshooting or technical operation.

13. Security

Quizly uses HTTPS encryption. Passwords are stored as hashes and authentication tokens are placed in HTTP-only cookies. Access to quizzes is restricted to their respective owners through backend permission checks.

Despite these measures, no internet-based application can guarantee absolute security.

14. Rights of data subjects

Subject to the legal requirements, users have the following rights:

Requests concerning these rights can be sent to: ebubekir.elicora@gmx.de

15. Right to lodge a complaint

Users have the right to lodge a complaint with a competent data protection supervisory authority if they believe that the processing of their personal data violates data-protection law.

16. Automated decision-making

Quizly does not perform automated decision-making that produces legal effects or similarly significant effects for users. Artificial intelligence is used exclusively to generate quiz content.

17. Changes to this Privacy Policy

This Privacy Policy may be updated when the application, external services or legal requirements change.

2026