Privacy Policy

1. Introduction

QuizMaster ("we," "our," or "the system") is a web-based Quiz Management System developed by students of the Department of Computer Science & Engineering, Methodist College of Engineering & Technology (MCET), Hyderabad, affiliated with Osmania University.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform for academic assessments. By accessing or using QuizMaster, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, institutional email address, role (Admin/Faculty/Student), and password (stored as bcrypt hash).
• Academic Profile: Course, Branch, Section, Year, Semester, and Roll Number (for students); Department and Designation (for faculty).
• Profile Photo: Optional upload for faculty profiles, stored securely on our server.
• Quiz Responses: Answers submitted during timed assessments, scores, and attempt timestamps.
• 2FA Verification: One-time security codes for quiz access (not stored after validation).

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent, quiz attempts, and feature interactions (for system improvement).
• Device Information: Browser type, operating system, IP address, and device identifiers (for security and analytics).
• Session Data: PHP session identifiers to maintain authenticated state (expires on logout or inactivity).

2.3 Google OAuth2 Data

If you sign in using Google OAuth2, we receive the following from Google's userinfo API:

• Your Google account email address (used for authentication matching)
• Your name and profile picture (optional, for display purposes)

We do not: access your Gmail, Google Drive, calendar, or any other Google services. We never post to your Google account or share your data with Google beyond authentication.

3. How We Use Your Information

We use collected information solely for educational assessment purposes:

• Authentication & Access Control: Verify your identity and role to grant appropriate dashboard access.
• Quiz Management: Enable faculty to create, schedule, and deliver quizzes to targeted student groups.
• Assessment Delivery: Provide timed quiz interfaces, auto-scoring, and instant result display.
• Academic Reporting: Generate performance reports for faculty and institutional records.
• System Security: Detect and prevent unauthorized access, malpractice, or abuse through 2FA and session monitoring.
• Platform Improvement: Analyze anonymized usage patterns to enhance user experience and fix bugs.

We do not use your data for: marketing, advertising, profiling outside academic context, or any commercial purpose.

4. Data Security Measures

We implement industry-standard technical and organizational measures to protect your information:

5. Information Sharing & Disclosure

We do not sell or rent your personal information. Your data may be shared only in the following limited circumstances:

• Within Your Institution: Faculty and administrators at your affiliated college may access your quiz performance data for academic evaluation and reporting purposes.
• Service Providers: Trusted third parties who assist in platform operation (e.g., InfinityFree for hosting, Google for OAuth2 authentication) under strict confidentiality agreements.
• Legal Requirements: If required by law, court order, or governmental regulation, or to protect the rights, property, or safety of QuizMaster, our users, or the public.
• Academic Research: Anonymized, aggregated data may be used for educational research by MCET faculty, with no personally identifiable information disclosed.

All data sharing complies with Osmania University guidelines and applicable educational data protection standards.

6. Your Rights & Choices

As a user of QuizMaster, you have the following rights regarding your personal information:

• Access: View your profile information and quiz attempt history through your dashboard.
• Correction: Request updates to inaccurate academic profile data by contacting your institution's admin.
• Deletion: Request account deletion by contacting support@kushalreddy.me. Note: Academic records may be retained per institutional policy.
• Opt-Out of Google OAuth: Use email/password login instead of Google sign-in at any time.
• Data Portability: Request a copy of your quiz performance data in CSV format via faculty or admin portal.

To exercise these rights, please contact your institution's QuizMaster administrator or email support@kushalreddy.me.

7. Cookies & Tracking Technologies

QuizMaster uses minimal, essential cookies strictly necessary for platform functionality:

• Session Cookie: Maintains your authenticated state during your visit (deleted on logout).
• Security Cookie: Helps prevent CSRF attacks and validates form submissions.

We do not use: advertising cookies, analytics trackers, or third-party marketing pixels. All cookies are first-party, session-based, and essential for core functionality.

You can manage cookie preferences through your browser settings, but disabling essential cookies may prevent QuizMaster from functioning properly.

8. Children's Privacy

QuizMaster is designed for use by students enrolled in higher education institutions (typically age 17+). We do not knowingly collect personal information from children under 13. If you believe a minor has provided us with personal information, please contact us immediately at support@kushalreddy.me so we can take appropriate action.

9. International Data Transfers

QuizMaster is hosted on InfinityFree cloud infrastructure. Data may be processed and stored on servers located outside your country. By using our service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this policy and applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we do, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on our platform
• For material changes, provide notice via email or dashboard announcement (where feasible)

Your continued use of QuizMaster after changes become effective constitutes acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:

For institutional data requests, please contact your college's QuizMaster administrator or the MCET CSE Department office.