Privacy Policy
Last updated: August 4, 2026
1. Who controls your data
The data controller is CODIGO ARTE Kamil Szulc, Żeromskiego 9/1, 60-544 Poznań, Polska. Contact: i2p30mk@gmail.com.
2. What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account details (name, email, sign-in method) | Create and secure your account; know which quizzes are yours | Performance of a contract |
| Uploaded document text and the generated quiz | Generate your quiz, and let you revisit it later | Performance of a contract |
| Payment metadata (amount, order id — never full card details) | Process your purchase, handle refunds, prevent fraud | Performance of a contract; legal obligation (accounting) |
| Basic technical logs (IP address, request metadata) | Security, abuse prevention, rate limiting | Legitimate interest |
| Advertising identifiers (production only, with consent) | Show ads on the free library pages | Consent |
We never see or store your card details. Payment is handled entirely by Lemon Squeezy's own checkout; we only receive confirmation that a payment succeeded or was refunded.
3. Retention
Data tied to your account — your uploaded documents' text and your generated quizzes — is kept for as long as your account exists, so your quiz library stays available to you. There is no automatic deletion window. You can request erasure of your account and its data at any time by contacting us; see "Your rights" below. Free library quizzes require no account and involve no personal data retention beyond standard technical logs.
4. Processors
We use the following processors to run the Service:
- Vercel — hosting and infrastructure
- Neon — database (account data, quizzes, orders)
- Clerk — authentication (Google, Apple, email/password sign-in)
- Lemon Squeezy, LLC — payment processing (merchant of record)
- Resend — transactional email (e.g. "your quiz is ready")
- Vercel AI Gateway / Anthropic — generates quiz questions from the text of documents you upload, once payment is confirmed
- Google AdSense — advertising on the free library pages (production only)
5. International transfers
Some of these processors operate outside the European Economic Area. Where that is the case, transfers are made under the EU Standard Contractual Clauses or an equivalent safeguard recognised under GDPR.
6. Advertising and cookies
Ads are shown only in production, only on the free library pages, and only once you've given consent via the certified consent prompt shown on first visit. You can withdraw consent at any time by clearing your browser's cookies for this site or revisiting the consent prompt. No advertising cookies are set before consent is given.
7. Your rights
Under GDPR you have the right to access, correct, delete, restrict, or export your data, and to object to processing based on legitimate interest. To exercise any of these, contact i2p30mk@gmail.com. We'll respond within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority, or your own country's equivalent if you're elsewhere in the EEA.