Privacy policy

What Quizmark does#

Quizmark reads the captions and page metadata of the YouTube video you are watching. It uses them to generate comprehension questions, show quizzes, and link every answer to the passage it came from.

You choose where that work happens: a hosted AI provider, or a compatible model running on your own computer. Quizmark's developer does not operate a quiz-generation server.

Browser storage and synchronization#

These stay in the extension's local browser storage:

• API keys
• Model connections
• Captions and video metadata
• Generated questions, answers and quiz progress
• Question reports
• Token usage records

API keys are sent only to the provider you selected, to authenticate your own requests. They are never sent to Quizmark's reporting service.

Your preferences use the browser's sync storage instead:

• Quiz interval
• Difficulty
• Playback controls
• Connection mode
• The usage-reporting choice

If browser synchronization is on, your browser provider may copy those preferences to your other browsers through its own service. API keys and quiz content never use sync storage. A legacy local-server address may also remain in synchronized preferences from an earlier configuration.

Uninstalling removes the extension's local data from that browser. It does not delete:

• Reports already sent to Quizmark
• Data held by your provider
• Browser-synchronized copies, which may persist

You can manage browser synchronization in your browser's settings.

Data sent to your chosen model#

A generation or verification request can contain:

• Video titles and chapter titles
• Timestamped captions
• Vocabulary drawn from the video description or a linked notes page
• Candidate questions and explanations
• Quizmark's own instructions

That data creates and checks questions, and identifies sections of the video. Question text and supporting passages can be sent again when you report a question and it is rechecked. Corrections you type into the report form stay on your device.

Hosted requests go directly to the provider you configure, over HTTPS, under your own provider account. The supported providers are Anthropic, OpenAI, OpenRouter, xAI, Google Gemini, DeepSeek and Moonshot. Their processing and retention follow their own policies and your account settings. Quizmark cannot promise that every provider keeps your data out of training, or that they all retain it for the same period.

With a model served on localhost or 127.0.0.1, model requests never leave your computer. That alone does not make your YouTube browsing offline, and it does not stop browser sync, optional reporting, or requests for linked notes.

YouTube and linked notes#

On a watch page, Quizmark reads the title, description, chapters, video identifier and captions. It may briefly turn captions on to capture the player's caption response, then restore your setting. Its packaged page script can also request YouTube caption tracks in the page's authenticated context. It does not ask for your Google account credentials.

When a video description links to a recognized notes page, Quizmark may fetch that page to extract vocabulary. The notes host receives an ordinary web request, including your IP address and the metadata your browser sends. Text that comes back is handled as data, never executed as code. A failed request does not stop question generation.

Optional usage reporting#

Reporting is off by default. If you turn on Share usage statistics, Quizmark sends usage and performance events to a service the developer runs on Cloudflare Workers, stored in Cloudflare D1. Its purpose is to maintain and measure quiz generation, setup, playback and question quality.

An event can include:

• A random installation identifier
• Coarse time buckets
• Event names and counts
• Correctness totals
• Provider type and difficulty
• Error codes
• General characteristics, such as duration range and caption language or type

The identifier links events from the same browser installation. These are therefore pseudonymous records, not only anonymous totals.

Reports exclude:

• Video IDs, video URLs and video titles
• Channels
• Captions
• Question and answer text
• API keys
• Local-model addresses
• Written corrections

The service reads the incoming IP address for rate limiting. The application does not write IP addresses or user-agent strings into its event database. Cloudflare processes network metadata to deliver and protect the service.

You can turn reporting off in the extension popup. That stops new reporting and clears queued events, though a request already in flight may finish. Reset identifier changes the identifier used by future events. Neither action deletes events already received.

The reporting service currently has no automatic expiry for stored events. To ask about access or deletion, contact privacy@getquizmark.com. The installation identifier may be needed to find your records, because an email address alone does not identify your installation. Do not send an API key. This policy will be updated when a retention schedule is in place.

Reporting questions and contacting support#

A question report, its labels and any written correction are stored locally, and can trigger a recheck with your chosen model. With optional usage reporting on, limited report events may be sent. The text of your report is not sent to Quizmark's developer.

If you email support@getquizmark.com or privacy@getquizmark.com, we receive your address and whatever you choose to send. Cloudflare Email Routing forwards that mail to the project inbox, which is hosted by Gmail. We use support mail to answer your request, and keep it while it is needed to resolve and follow up on it. Please leave out credentials and unrelated personal information.

Website hosting#

The website carries product information, setup help and this policy. It needs no Quizmark account, and it contains no advertising or application analytics scripts. Hosting providers process ordinary connection information, such as IP addresses and request metadata, to serve pages and protect the service. The site is served by Cloudflare Workers.

The support section of the landing page links to GitHub Sponsors. If you choose that link, GitHub receives your IP address and ordinary request metadata and may set its own cookies under GitHub's privacy policy rather than this one. The landing page does not load third-party sponsor content before you choose the link, and the extension does not include it.

Limited Use and sharing#

Quizmark's use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used to provide, maintain, secure and measure the quiz functionality described here. The transfers described above exist to provide that functionality, or to answer support requests.

We do not:

• Sell user data
• Use it for personalized advertising
• Use it to determine creditworthiness
• Train our own AI models on it

We do not allow human access to personal or sensitive extension data, except with your consent for specific support, where necessary for security or legal compliance, or as aggregated and anonymized information for internal operations, as the Limited Use policy permits.

Your choices and changes#

You can:

• Choose your model
• Disable generation or automatic pauses
• Disable reporting
• Manage browser sync
• Clear stored quizzes
• Uninstall the extension

Data held by your provider is managed through your provider account. Contact privacy@getquizmark.com with privacy requests or concerns.

Quizmark is not directed at children under 13. If you believe a child has given us personal information, contact us so we can investigate and remove it where applicable.

Material changes will be reflected in the effective date and published here. Changes to extension data practices will also be disclosed in the product and the store listing, as required.