Privacy Policy
1. Controller
Sven Haase, Hauptstraße 28, 53804 Much, Germany
Email: info@svenhaase.de,
Phone: +49 152 55991365
2. Which data is processed
- User account: username, email address and password. The password is only stored in encrypted form (as a hash). The purpose is registration and login (Art. 6 (1) (b) GDPR).
- Quizzes: the YouTube addresses you enter, the generated quiz questions as well as title, description and time of creation. The purpose is to provide the quiz feature (Art. 6 (1) (b) GDPR).
- Technical data: When you use the application, technically necessary data such as your IP address, the time and the requested address are processed to deliver and secure the application (Art. 6 (1) (f) GDPR).
3. Cookies
After you log in, two technically necessary cookies are set: "access_token" (valid for 30 minutes) and "refresh_token" (valid for 1 day). They are only used to keep you logged in and cannot be read by scripts. When you log out, they are deleted and made invalid. No cookies are used for advertising or tracking.
4. Quiz creation with AI (Google Gemini)
To create a quiz, the audio track of the YouTube video you entered is converted into text on our own server with the AI Whisper. This text is then sent to the Gemini API of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which creates the quiz questions. Your account data such as your name or email address is not sent to Google. Google may use content sent through the free Gemini API to improve its services. More information: Gemini API terms.
5. Embedded YouTube videos
The quiz overview embeds the related YouTube video. Your browser then connects to the servers of YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data such as your IP address may be transferred to Google and cookies may be set (Art. 6 (1) (f) GDPR). More information: Google privacy policy.
6. Storage period
Your account data and quizzes are stored until you delete the quizzes or ask for your account to be deleted. A short email to info@svenhaase.de is enough.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can also lodge a complaint with a data protection supervisory authority, for example the data protection authority of North Rhine-Westphalia (LDI NRW).
Last updated: September 2026