Loading page…
Last updated: 23 October 2026
This text is a template. Before publishing it, have a lawyer review it against the KVKK and the GDPR.
The data controller for personal data is the Quizyla operator identified below. This text is provided to meet the information duty under Article 10 of the Turkish KVKK.
Part of the service runs on providers outside Türkiye: AI question generation (Anthropic, USA; only the content you submit to generate a quiz), hosting and database, verification and password-reset emails (Resend, USA) and, if you consent, advertising (Google, USA) and measurement. These providers process your data only to run their own service. Transfers abroad follow the conditions of KVKK Art. 9; advertising and measurement transfers happen only with your explicit consent. Make sure content you submit to the AI contains no personal information.
Your account and quiz data are kept until you delete your account. Rate-limit counters are kept for the length of their window (hour, day or month). Verification and password-reset links are valid for 30–60 minutes. Your ad and measurement choice is stored in your browser for up to 180 days.
Google AdSense ads may be shown on our site. Ads, cookies and the transfer of data to Google (USA) start only if you allow ads; if you decline, no ad request is made. You can change your choice at any time on the Cookie Policy page. If you consent, Google and other third-party vendors use cookies to serve ads based on your previous visits to this and other sites. You can turn off personalised advertising in Google Ads Settings. See Google's advertising policies for details.
We do not sell your data. We share it only with the providers needed to run the service (hosting, AI, advertising).
Your handle, optional bio, cover and avatar are stored with your account. Student profiles start private and teacher profiles start public. A private profile is visible only to its owner; class profiles are visible to current classmates and the class teacher. A public profile shows only your first name, handle, chosen information, public quizzes and learning progress; your account email and surname are not included. Uploaded images are re-encoded and EXIF metadata is removed. Appearing in the home page community avatar stack requires separate consent, which you can withdraw in profile settings. Sharing a downloaded profile card discloses the information printed on it to its recipients. Profile fields and uploaded images are included in your own-data export and removed from the active database when you delete your account. Manual backups and cards already downloaded by other people are not erased by that action.
AI budget counters and rate limits are stored in the database. Rate keys use identifiers derived with a server secret instead of raw IPs or emails; expired windows are pruned on later use. Generation deduplication records retain an input digest and quiz identifier, not source text, passwords or edit capabilities. If configured, guest generation forms use Cloudflare Turnstile.
When delivery is configured, the recipient email address and single-use link are sent to the delivery provider, Resend. Verification links are valid for 60 minutes and password reset links for 30 minutes. The active database stores a hash of the link token, its purpose and expiry time instead of the token itself. Expired records are removed on the next link request while delivery is configured. A successful action deletes the used token and other tokens issued for the same account and purpose. A password reset invalidates previous account sessions. Deleting an account also removes these associated token records from the active database; external provider records and backups remain subject to the deletion limits described below.
Your selected options, confidence, results, session times and review dates in bank practice are stored with your account. Review intervals are calculated on the server from saved answers; this flow makes no AI call. You can export your own data or erase these records with your account. Topic guides and questions appear after admin review; backup and external-service limits are described below.
During guest practice, question identifiers and versions, chosen answers, confidence levels and the review plan are kept in this browser’s local storage. If persistent storage is unavailable, you can keep working in temporary memory while the page stays open; reloading or closing the page may lose this progress. Published learning content is fetched from the server; guest answers are not automatically uploaded to an account. After signing in, you can explicitly submit a session with every planned question answered using “Save to my account”. The server rechecks published question versions and answers, may skip ineligible records, awards no XP and calculates review dates from the save time. Account transfer does not automatically delete the device copy. You can separately clear guest progress from the study hub; clearing browser data can also remove local records. Deleting an account does not automatically erase this browser’s guest copy.
Authorized administrators can suspend or reactivate accounts and change the generation limit for the current UTC month. This does not reset existing usage or change the paid plan by itself. Administration actions are logged with their type, the related record identifier and necessary change details; passwords, raw request bodies and unnecessary personal data are not written to the audit log. When a signed-in user reports a question, the report is linked to that account. When an administrator confirms an actual correction, an in-app correction notification is added for the reporter; closing without a correction creates no such notification. Deleting an account removes the reporter-account link and deletes the account’s notifications. Related account and administrator identifiers in audit records are also de-identified. Existing deletion limits for external systems and backups still apply.
“Download my data” on My Account provides your account profile, quizzes, attempt history, memberships, your own classrooms and assignments, usage, subscription and testimonial consent record as JSON. It excludes other students’ identities and answers, passwords, sessions and access secrets. You can download twice per hour.
Typing SİL in “Delete my account” confirms deletion of your account, sign-in connections, sessions, testimonial, memberships, usage and account-linked referral records from the active database. Your private quizzes and classrooms you teach, including their assignments, are deleted; their counts appear before confirmation. Your attempts lose their account link and free-text answers. Published quizzes remain without their account link and their old editing keys are revoked. Personal information you wrote in quiz content is not automatically removed; edit it before deletion or contact us with the content link.
A completion record contains only the operation type and calendar month, without user ID, email, IP, identity hash or precise timestamp. Quizyla records on the current device are cleared and you are signed out. Local copies on other devices are not cleared automatically; old account sessions and editing keys no longer grant server access.
Delete your account / download your data
This operation covers Quizyla’s active account database. Manually created backups do not yet have an automated erasure schedule; applying requests to backups and preventing erased accounts from reappearing after a restore require separate operator action. Hosting logs, content already sent to an AI provider and data held by external services are not erased by this button. Google connection keys stored in Quizyla are deleted; permission in your Google account can be revoked separately. An active external payment subscription must be resolved with support before account deletion. This text does not claim instant erasure of every copy or certify legal compliance.
Anonymous leaderboard, challenge and live-game nicknames are not linked to an account, so deletion and export do not match these records by name. Contact us with the quiz/game link about these records or third-party copies.