Privacy policy
Last updated 29 September 2026
This policy explains what personal data we collect when you use The Quiz Box, why, and what your rights are. We collect as little as we can: you can play every free quiz without giving us anything.
Who we are
The Quiz Box is the controller of your personal data.
What we collect and why
| When | What | Why, and our lawful basis |
|---|---|---|
| You buy a pack | Your email address, the name and billing country or postcode you give Stripe, what you bought, the price, the time, and when you asked for your download to start. | To take payment, deliver your files and send your order confirmation (contract). To keep accounting records (legal obligation). Card details go straight to Stripe; we never see them. |
| You download files | Which file was downloaded and when, linked to your order. | To deliver what you bought and stop download links being shared (contract and legitimate interests). |
| You sign in to Your quizzes | Your email address, sign-in links and a sign-in cookie. | To let you download your packs again (contract) and keep your account secure (legitimate interests). |
| You join our newsletter | Your email address, the page you signed up on and when. | To send you our monthly email of new quizzes and offers (consent). You can unsubscribe with the link in any email. |
| You visit the site | Technical data such as your IP address and browser, in our hosting provider's logs. | To run the site and protect it from abuse (legitimate interests). |
When you check out, we also note which page you bought from, so we know which quizzes lead to sales. We don't sell your data or use it for advertising.
Cookies and browser storage
We don't use advertising or tracking cookies, so there's no cookie banner. We use:
- A sign-in cookie (
qz_session), only if you sign in to Your quizzes. It keeps you signed in on that device for up to 30 days and is deleted when you sign out. - Quiz progress, stored in your browser (not sent to us) when you play along with a free quiz, so your answers are still there if you reload the page. You can clear it in your browser settings.
Stripe sets its own cookies on its checkout page to process payment and prevent fraud; see Stripe's privacy policy.
Who we share it with
Only the services that run the site for us, under contracts that require them to protect your data:
- Stripe: payments.
- Resend: sending our emails.
- Cloudflare: hosting the website, our database and the download files.
Some of these providers process data in the United States. Those transfers are protected by the UK's data bridge with the US or by the UK's approved international data transfer agreements. We'll also share data if the law requires it.
How long we keep it
- Orders and download records: six years after the purchase, for accounting and tax. Your packs stay available in Your quizzes for that time.
- Sign-in links: deleted within an hour. Sign-in sessions: deleted once they expire, after 30 days at most.
- Newsletter: until you unsubscribe. After that we keep just your email address and the date you unsubscribed, so we never email you by mistake.
- Hosting logs: kept briefly by Cloudflare for security.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on consent (the newsletter), you can withdraw it at any time. Some rights have limits: for example, we must keep order records for tax. Contact us and we'll reply within a month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
Children
Our free quizzes are for everyone, including children. Buying packs, signing in and the newsletter are for adults. Please don't give us personal data if you're under 13.
Changes
We'll update this policy if what we collect changes, and change the date at the top.