Privacy Policy

KQH (Kahoot Quiz Helper) Privacy Policy Overview

Protecting your data privacy and account security is our top priority

This Privacy Policy applies to the KQH (Kahoot Quiz Helper) Chrome extension and related online services. We are committed to transparently explaining how we collect, use, and protect your personal information. Please read this policy carefully to understand your rights and our obligations.

Welcome to KQH (Kahoot Quiz Helper)! We understand the importance of your privacy, and this Privacy Policy explains how we collect, use, store, and protect your personal information.

KQH (Kahoot Quiz Helper) is a Chrome browser extension designed to provide AI-powered answering assistance for Kahoot games. To provide these services, we need to collect and process certain information.

By using our services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not use our services.

Information We Collect

Account Information

•Username, email address, and encrypted password

•Registration time and last login time

•Subscription plan type (Free, Premium, Pro)

•If you sign in with "Continue with Google": the unique account ID (user ID), email address and name that Google provides (we do not store your profile picture)

Usage Data

•Number and frequency of AI answer requests

•Question text, answer options and, for image questions, the question image (only used to provide answer suggestions)

•Extension usage statistics

•Error logs and performance data

Technical Information

•Browser type and version information

•Device operating system information

•IP address (used for security, anti-abuse and rate limiting, and to count visits by country/region)

•Extension version number

Payment Information

•Payment transaction information processed through third-party payment processors

•When you pay by gift card, the card code, face value and receipt image you submit, used for manual verification and to prevent duplicate submissions; once the card is reviewed we keep only a masked fragment and a one-way hash of the code

•We do not directly store your credit card or bank account information

How We Use Information

We use the information we collect for the following purposes:

Core Service Provision

•Authenticate users and manage accounts

•Provide AI answer suggestions for Kahoot questions

•Monitor and limit usage quotas

•Process subscriptions and paid services

Service Improvement

•Analyze usage patterns to improve AI algorithm accuracy

•Optimize extension performance and user experience

•Develop new features and services

Security and Compliance

•Detect and prevent abuse or fraudulent behavior

•Decide invite rewards automatically: the visitor identifier and the extension's anonymous install identifier tell us whether the inviter's account and the invited account have been used in the same browser or the same copy of the extension (the IP address is not used for this), and whether the invited account has connected the extension (the inviter is rewarded after that); invite rewards are granted or taken back accordingly

•Ensure service security and stability

•Comply with legal and regulatory requirements

User Support

•Respond to user inquiries and technical support requests

•Send important service notifications

Data Storage & Security

Data Storage

•Your data is stored on cloud servers in the United States

•Traffic between the website, the extension and our servers is encrypted with HTTPS

•Passwords are stored only as one-way hashes; we cannot see your password

Security Measures

•The admin console and the database are restricted to administrators, and admin actions are recorded in an audit log

•If a security incident affects your data, we will notify affected users by email

Data Retention

•Account information: Retained for as long as the account exists

•Answer history (question, options, answer): Kept until you delete your account, and erased then

•Human-verification and anti-abuse logs (including IP addresses): 90 days; page-view logs: 180 days; account security and risk events: up to 365 days, then cleaned up automatically

•You can delete your account yourself in account settings, or contact us to do so: the account is deleted and anonymized (see "Your Rights")

Your Rights

Under applicable data protection laws, you have the following rights:

Right of Access

•Request to view personal information we have collected about you

•Obtain information about data processing purposes and legal basis

Right of Rectification

•Correct inaccurate or incomplete personal information

•Update your information through account settings page

Right of Erasure

•You can delete your account in account settings. The account is then deleted and anonymized: your name, email address and password are erased, you can no longer sign in, your answer history and remaining quota are cleared, and your subscription is cancelled

•Payment records, gift card records (including any receipt image you uploaded) and audit records are retained as legally and financially required, no longer linked to your name and email; IP addresses in them are removed on the schedule above

•We keep only a one-way hash of your email address, to prevent referral rewards from being abused through re-registration and to make sure the address receives no more marketing email; if the address had bounced or reported our email as spam, it stays on the bounce list as written so that no email is sent to it again

Right to Restrict Processing

•Restrict our processing of your information under specific circumstances

Right to Data Portability

•Obtain your data in a structured, commonly used, and machine-readable format

Right to Object

•Object to data processing based on legitimate interests

•Withdraw from marketing communications at any time

To exercise these rights, please contact us through:

•Email: support@kahootcheat.com

•Online contact form: Through our website

Cookies and Tracking Technologies

We use the following technologies to enhance your experience:

Essential Cookies

•Maintain user login status

•Remember user preference settings (such as interface language)

•Ensure website security

First-Party Statistics Identifier

•A visitor identifier (kqh_vid cookie, valid for up to 1 year, also kept in browser local storage); when you are signed in, visits are linked to your account

•Used for our own usage statistics (see "First-party usage analytics") and to tell whether an invited sign-up shares a browser with the inviter, which decides whether the invite earns a reward (see "Invite Rewards" in the Terms of Service); we do not use Google Analytics or other third-party analytics or advertising cookies

Local Storage

•Browser local storage keeps your interface language, your sign-in state and, if you opened the site from an invite link, the invite code (kqh_referral_code, cleared after you sign up)

•The extension keeps your sign-in token, a cache of your account details and an anonymous install identifier (a random string made the first time the extension runs, which says nothing about who you are) in Chrome extension storage

You can manage cookie preferences through your browser settings, but please note that disabling certain cookies may affect service functionality.

Third-Party Services

Our service integrates the following third-party services, each with their own privacy policies:

AI Model Providers

•The question text, answer options and, for image questions, the question image you submit are sent to AI model providers (for example DeepSeek, OpenRouter and the model vendors it routes to) to generate answer suggestions

•Privacy Policy: Please refer to the respective AI service provider's policies

Cloudflare Turnstile

•Used for bot protection and human verification at sign-up, login, redemption and checkout

•Your IP address and browser user-agent are processed during verification

•Privacy Policy: https://www.cloudflare.com/privacypolicy/

Resend

•Used to deliver verification codes, service notices and announcement emails

•Your email address and the email content are processed

•Privacy Policy: https://resend.com/legal/privacy-policy

Payment Gateway (Hupijiao)

•Used to process online payments through Alipay and similar channels; order number, amount and payment status are processed

•Apple Gift Cards are verified manually by us and do not go through a third-party payment gateway

•Please refer to the respective payment service privacy policies

Google ("Continue with Google" sign-in)

•The login and sign-up pages load the sign-in button from Google (accounts.google.com), so Google receives your IP address and browser information; when you use this sign-in, Google gives us your account details (see "Google Sign-In and Google User Data")

•Privacy Policy: https://policies.google.com/privacy

ipapi.co

•When you have not chosen an interface language and your browser language is not Chinese, your browser asks ipapi.co for your country/region to pick a default interface language (not repeated after a successful lookup; retried on a later visit if it failed)

•ipapi.co receives your IP address; the result is stored only in your browser

Cloud Service Providers

•Vercel and other hosting services

•Used for website hosting and data storage

We encourage you to review the privacy policies of these third-party services to understand how they handle your information.

Google Sign-In and Google User Data

What we receive from Google

•Only when you choose "Continue with Google", Google gives us: the unique ID of your Google account (user ID), your email address (verified by Google) and your name

•We ask only for basic sign-in information. We do not request or read your Gmail, contacts, calendar, Drive or any other Google data

How we use it

•To create or sign in to your KQH account with your email and name, and to recognise that it is the same Google account next time

•If a KQH account already exists for the same email and the address is a Gmail address or matches its Google Workspace domain, it is linked to your Google account and keeps its membership and quota; linking signs that account out on other devices, and the old password of a never-used free account stops working (set a new one with "Forgot password"). For other addresses, sign in with your password

•Not used for advertising, not sold, and not shared with third parties (other than the service providers listed under "Information Sharing" that are needed to run the service)

•KQH's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

Storage and deletion

•This information is kept in our database until you delete your account; on deletion your name and email are erased and the link between your Google account and the KQH account is removed

•You can revoke KQH's access at any time on your Google Account's "Third-party apps & services" page: https://myaccount.google.com/permissions

**Note**: an account created with Google has no password set. To also sign in with email and password, use "Forgot password" to set one.

International Data Transfers

As we use global cloud services, your data may be transferred to countries/regions outside your jurisdiction for processing and storage.

Transfer Safeguards

•Account and answer data are stored on servers in the United States

•Question text and images are sent to AI model providers to generate answer suggestions, which may include DeepSeek (China) and OpenRouter (United States) (see "Third-Party Services")

•We do not sell or share your data with advertisers

Primary Data Storage Locations

•The website and API are hosted on Vercel (US West region); the database runs on a cloud server in the United States

•AI model providers and the email provider process data where they operate, under their own policies (see "Third-Party Services")

If you have questions about data transfers, please contact us for more details.

Minors' Privacy

Our service is primarily intended for users aged 13 and above.

Age Restrictions

•Children under 13 are not permitted to use our services

•We do not knowingly collect personal information from children under 13

Parental Supervision

•Users aged 13-18 should use the service with parental or guardian consent

•Parents may contact us to view, correct, or delete their minor child's information

Violation Discovery

•If we discover we have collected information from children under 13, we will delete it immediately

•If you are a parent and discover such a situation, please contact us immediately

We recommend that parents supervise their minor children's online activities to ensure safe use of internet services.

We may update this Privacy Policy from time to time to reflect changes in our practices or changes in legal requirements.

Notification Methods

•Material changes: 30-day advance notice via email or website notification

•General updates: Publishing updated version on website

•Continued use of the service indicates acceptance of the updated policy

Effective Date

•Updated Privacy Policy will be effective on the publication date

•We recommend that you regularly review this page for the latest policy

Historical Versions

•We retain previous versions of the Privacy Policy for reference

•To view historical versions, please contact us

If you have any questions, comments, or complaints about this Privacy Policy, please contact us through:

Contact Information

•Email: support@kahootcheat.com

•Website: https://kahootcheat.com

•Online Support: Through our website contact form

Response Time

•General inquiries: Reply within 3-5 business days

•Privacy rights requests: Processed within 30 days

•Emergency security issues: Response within 24 hours

Data Protection Officer

•If applicable, you may also contact our Data Protection Officer

•DPO Email: support@kahootcheat.com

We are committed to handling your privacy-related issues in a timely and professional manner.

First-party usage analytics

To continuously improve performance, diagnose technical errors, and protect our systems against abuse, we record first-party usage data (linked to your account when you are signed in):

What We Collect

•Visited page paths, referral sources, and campaign parameters (UTM / ref)

•Key interaction events (e.g. plan selections, checkout navigation, copying referral links)

•Device category (desktop, mobile, tablet), browser user-agent, and country code

•IP addresses and a random visitor identifier (visitorId); sign-in events record a short hash of the email address to detect credential stuffing

•Usage counts from the extension: whether kahoot.it was opened, whether a question was recognised, whether the answer was shown or came too late, which button was clicked, plus the question type and how long the answer took. These records never contain the question or the answer, and no IP address is stored with them

•The extension's anonymous install identifier: it links the install, sign-in, use and removal of one copy of the extension, and is used to tell whether two accounts are used on the same device (see "Invite Rewards" in the Terms of Service)

•The page your browser opens when the extension is removed: the extension version, days since install, number of answers shown, whether it was signed in, and the reason for removing it if you choose to give one

What We Do NOT Collect

•Gift card codes are never part of usage analytics (a code is kept in the gift card review record only until the review ends, see "Information We Collect")

•Raw redemption codes or secret keys

•Passwords, plain credentials, or raw payment instrument details

Storage & Third-Party Sharing

•All behavioral analytics data is stored strictly on our own dedicated servers

•We never sell, rent, or share any analytics data with third-party advertisers or external data brokers

Retention Period

•Page view, extension usage counts and other general usage records: retained for 180 days

•Security, abuse prevention, and failure attempt events: retained for up to 365 days

Purpose

•Exclusively for service reliability, user experience optimization, and fraud prevention.

KQH (Kahoot Quiz Helper)

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact our support team.