Privacy Policy

VideoQuiz — the YouTube quiz generator for ESL teachers

1. Who I am

VideoQuiz ("the Service") is operated by Tu Anh Tran, an individual based in Hanoi, Viet Nam ("I", "me", or "my"). This Privacy Policy explains how I handle your information when you use the Service.

Contact for any privacy question or request: trananhtu299@gmail.com.

2. What I collect

2.1 Information you give me

• Email address — only if you email support, or join a waitlist. There is no account system, so there is nothing to sign up for.
• Licence key — only if you buy a Pro subscription, once Pro is on sale. The key is stored in your browser and is sent to my licence service to check that your subscription is active (see section 4.3).
• Payment details — handled entirely by the payment provider. I never see or store your card number.

2.2 Information stored on your own device

The extension stores the following in your browser's Chrome Storage, which stays on your computer:

• Your OpenAI API key
• Your licence key and its activation status (Pro only)
• Your settings and preferences
• Your last 10 generated quizzes
• A monthly counter of how many quizzes you have generated
• A random identifier for your copy of the extension, used only to count how many devices a licence is active on

Most of this never leaves your computer. The random identifier for your copy of the extension and your licence key are the exceptions: they are sent to my licence service to check that your subscription is active and to count how many devices it is running on. You can see all of it, export it or erase it at any time, and uninstalling the extension deletes the lot.

2.3 Information I do not collect

• No analytics and no telemetry. The extension contains no analytics library and sends me no usage statistics, at all. Not even anonymous ones.
• No YouTube viewing history. The extension reads the video you have open only at the moment you ask it to generate a quiz.
• No saved copy of your quizzes or captions. Quizzes stay on your device. Captions are sent to OpenAI to write the quiz and are then discarded - never written to a database, a file or a log. If I later switch on the server route described in section 4.2, they would pass through my server in memory on the way; that is the only thing that would change, and section 10 says how I would tell you.
• No browsing history. The extension is not active outside YouTube video pages and does not record where you go.
• No selling or sharing of your data with anyone for their own purposes, ever. The only parties that process anything are the ones listed in section 4, and they do it to deliver the Service to you.
• No advertising and no advertising identifiers.

3. How your information is used

4. Where your data goes

4.1 Your browser

Your OpenAI API key, your licence key, your settings and your saved quizzes are stored locally using the Chrome Storage API. This data does not leave your browser unless you export it yourself.

4.2 OpenAI

Quiz writing is done by OpenAI's API. In the build you have installed, the captions go straight from your browser to OpenAI under your own account. I am not involved, I never see them, and you control the OpenAI account and its billing. That is the only route this version uses. The server route below is built but switched off:

• This build (what actually happens): straight from your browser to OpenAI using the API key you pasted into Settings. The key is sent to OpenAI and nowhere else.
• The server route, when switched on: the captions would go from your browser to my server, which would forward them to OpenAI under my account and return the finished quiz. That is what would let a paid plan work without an OpenAI account of your own. It is off in this version, so no captions reach my server at all today.

Either way, the captions are used only to write that one quiz. OpenAI's handling of them is governed by OpenAI's Privacy Policy and API data usage policies.

4.3 My generation and licence service

I run a small service on Cloudflare Workers. It has two jobs: it can write quizzes on your behalf, and it keeps track of licences.

The quiz-writing job is switched off in this version (hostedApiKey is false in the build), so nothing you do today sends captions to it. What follows is what it would receive if I turn it on, and what the licence job receives regardless.

If quiz writing is switched on, it would receive:

• The captions of the video, passed through in memory to OpenAI.
• A random identifier for your copy of the extension, so the free monthly allowance can be counted.
• Your licence key, if you are on a paid plan.
• The quiz settings you chose - number of questions, difficulty, question types, output language.

None of that would be stored. The captions and the quiz would not be written to a database, a file or a log, and would not be readable by me afterwards. The only thing kept would be a count: how many quizzes an installation has used this month, and how much was spent, so the service can apply its limits. A bare counter, with no captions or quiz attached to it. Since the route is off today, not even that counter exists yet.

What it stores now, for licences:

• Your email address, as sent by the payment provider.
• Your licence key, stored scrambled, so it cannot be read back - not even by me.
• Which copies of the extension the licence is active on, so the device limit can be enforced.
• Subscription status and dates, for accounting and refunds.

Your OpenAI API key is never sent to it, and neither is your YouTube URL or your browsing history. The service runs on Cloudflare, which stores these records in a database operated by Cloudflare.

4.4 Payment provider

Payments are processed by Lemon Squeezy, which acts as the Merchant of Record. That means they are the seller of record, they handle all sales tax and VAT compliance worldwide, and their privacy policy governs the payment data they collect. I receive only your email address and whether the order succeeded.

4.5 YouTube

The extension reads the captions of the video you have open in order to build the quiz. It does not download, store or redistribute video or audio.

5. Your rights

You can, at any time and without asking me:

• See your data — it is all in your browser. Open the extension's Settings to view what is stored, or inspect Chrome Storage directly.
• Delete your data — Settings has a "Delete saved quizzes" and a "Reset extension" button. Uninstalling the extension removes everything.
• Opt out of the licence check — stop using Pro, and the extension stops contacting the licence service.
• Withdraw consent — remove your OpenAI API key from Settings and nothing further is sent to OpenAI.

If you have emailed me, or bought a licence, you can ask me to delete your email address or licence record by writing to trananhtu299@gmail.com. I will action it within 30 days.

If you are in the EEA, the UK, Switzerland or California, you also have the rights granted by the GDPR, UK GDPR or CCPA/CPRA respectively, including the right to complain to your local supervisory authority. I do not sell or share personal information as those terms are defined by the CPRA.

6. Data retention

• On your device: until you delete it. Nothing expires behind your back.
• Captions: not retained at all, by anyone. They are sent to OpenAI to write the quiz and are gone immediately after. If the server route in section 4.2 is switched on later, they would exist in that server's memory for the seconds it takes to write the quiz and nothing more - there is nothing to delete because nothing is kept.
• Usage counters: only if the server route is on: a number per installation per month, deleted automatically once it is no longer needed.
• Licence records: kept while your subscription is active and for 12 months afterwards, for accounting and refunds.
• Support emails: kept until you ask me to delete them.
• Payment records: held by the Merchant of Record as long as tax law requires.

7. Security

Your API key is stored in your browser profile. On a shared or public computer, anyone with access to that profile could read it — so do not install the extension on a machine you do not control, and revoke your key at platform.openai.com if you think it has been exposed.

My licence service uses HTTPS, verifies payment webhooks by cryptographic signature, and stores no personal data beyond your email address and licence state.

8. Children

VideoQuiz is a tool for teachers and is not directed at children. I do not knowingly collect personal information from anyone under 13. If you believe a child has provided me with personal information, contact me and I will delete it.

9. International transfers

I am based in Viet Nam. My licence service runs on Cloudflare's global network and OpenAI processes data in the United States. Where personal data is transferred out of the EEA or the UK, the providers rely on Standard Contractual Clauses or an equivalent safeguard.

10. Changes to this policy

I may update this policy. If a change materially affects what I collect or how I use it, I will say so on this page and update the "Last updated" date above. Continuing to use the Service after a change means you accept the updated policy.

11. Contact

Tu Anh Tran
Hanoi, Viet Nam
trananhtu299@gmail.com

This document describes the extension as built. It is written in plain English on purpose. It is not legal advice, and if you are selling to consumers in the EU, the UK or Australia you should have it reviewed by a qualified lawyer in those jurisdictions.