Applies to: the Pop Quiz for Google Slides Chrome extension, the Pop Quiz join page that players open on their phones, and the Pop Quiz website. Last updated: 23 October 2026
1. Who I am #
Pop Quiz is made by Jozef Wright, an individual in New Zealand. I’m responsible for the personal information Pop Quiz handles.
- Email: hello@popquiz.fun
In this policy, “I” means me, and “Pop Quiz” means the product.
2. The short version #
- Your quizzes, settings and looks are saved on your own computer.
- Pop Quiz reads the open Google Slides deck to build and show the quiz. It works only on Google Slides pages.
- During a game, the question, options, timer and results travel from the presenter’s browser through a relay to players’ phones. Players send back a nickname and their answers. The relay passes messages on and stores nothing.
- There are no accounts, no ads and no tracking in the extension. Nothing is sold.
- Players need no account and no app. They type a nickname.
- Pop Quiz is not directed at children.
3. What Pop Quiz handles, and where it stays #
3.1 The presenter, in the extension #
| What | Where it lives | How long |
|---|---|---|
| Quizzes (questions, answer options, timers, settings), earlier versions of them, the look you choose, and game sessions (players and scores) | In Chrome, on the presenter’s own computer (chrome.storage.local). Never sent to me. | Until the presenter deletes it, or removes the extension. |
| Slide information: the open deck’s slide ids, the position of shapes and the text in them | Read in the presenter’s browser, on docs.google.com/presentation pages only. It is used to fill a question from a slide’s title and to place the quiz on a shape. | Not stored by me. The quiz that results is stored as above. |
| A PDF of the deck, if the presenter uses the backup player | In Chrome, on the presenter’s own computer. | Until the presenter deletes it. |
| A “safety copy” of each deck’s quiz | A file in the presenter’s Downloads folder: Downloads/Pop Quiz/<deck>.popquiz.json. It is written about a minute after each change, or when the presenter saves one now. It can be imported back. | Until the presenter deletes the file. Removing the extension does not delete it. |
The extension reads slide content in your browser. It does not send it to me. It leaves your browser only as far as you make it part of a question: the question text and answer options are sent to players during a game (see 3.2).
What the extension reads, and what it does not:
- It reads the open deck’s slide ids, shape positions and text.
- During the slideshow it lays the quiz over the slide. It never changes your deck, except that it hides the placeholder shape the quiz sits on during the slideshow.
- It does not read your other Google Docs, Sheets, Gmail or browsing history. It does not run on any other site.
3.2 During a game: the relay #
A game needs the presenter’s browser and the players’ phones to talk. They talk through a relay that runs on Cloudflare (Workers and Durable Objects, using WebSockets).
| Direction | What |
|---|---|
| Presenter to players | The question text, answer options, timer, results and leaderboard. |
| Players to presenter | The player’s nickname, a random player id, and their answers. Answers can include text that a player types: a typed answer, a word for a word cloud, or an open answer. |
The relay passes these messages on and stores nothing. The state of the game lives in the presenter’s browser.
I do not keep logs of game messages. Cloudflare, which runs the relay, keeps short-lived technical logs (such as IP addresses and connection times) to keep its network secure and working.
Before the first quiz slide can be made, the extension shows a notice that says what goes through the relay, and asks the presenter to press “Agree and start”.
3.3 Players, on their phones #
Players use a web page (the join page) in their phone’s browser. There is no account and no app.
- A player types a nickname. The nickname is sent through the relay to the presenter’s screen.
- The phone keeps the nickname and a random player id in its own
localStorage, so that reloading the page puts the player back in the same game. It stays on the phone until the player or the browser clears it. - Nothing else is stored on the phone.
3.4 Updates and the Slides selector map #
The extension fetches two small files from Pop Quiz’s own website:
- A JSON file of CSS selectors, every six hours. It is data only, and the extension checks every value before it uses it. It lets Pop Quiz keep up when Google changes how Slides is built. It carries no code and no instructions.
version.json, to say when a newer version of the extension exists.
Neither request sends any quiz, deck or user data. As with any request to any website, my website host (Cloudflare) sees the computer’s IP address and the usual request details, and keeps them only in its short-lived technical logs.
3.5 The website #
The Pop Quiz website uses Cloudflare Web Analytics to count visits. Cloudflare says it uses no cookies or local storage and does not fingerprint visitors, and that it counts visits rather than identifying people. It is on the website’s own pages only. There are no analytics inside the extension or on the join page players use.
3.6 Tips #
Pop Quiz is free. The website links to Ko-fi, where you can leave a tip. The link opens Ko-fi’s own site, where Ko-fi’s privacy policy applies, not this one. Nothing in Pop Quiz takes payment, and I never see card details.
3.7 Sharing between devices (switched off) #
Pop Quiz has a feature, built but switched off at launch, that would keep a copy of a deck’s quiz online so it is the same on every laptop. It is off. No quiz is sent anywhere for this purpose. If it is ever switched on, this policy will change first, and the extension will tell you (see section 13).
4. Why I use it #
Only to run the quiz: to build it, show it, play it, score it, and keep it safe for you to come back to. I do not use it for anything else.
For people in the EU and UK: I handle this information because it’s needed to provide the service you asked for (running the game), and, for the website’s visit counts, because I have a legitimate interest in knowing how many people visit, which the analytics meets without identifying anyone.
5. Who it goes to #
| Who | Why | Notes |
|---|---|---|
| Cloudflare | Runs the relay, hosts the join page and website, serves the update files, and provides Web Analytics. Acts as my processor. | Cloudflare runs servers worldwide, so data can be processed outside New Zealand. |
| Players | They see the question, options, timer, results and leaderboard, and other players’ nicknames on the leaderboard. | |
| The presenter | Sees players’ nicknames and answers. | |
| Pop Quiz runs inside Google Slides, under Google’s own terms and privacy policy. I send nothing to Google. | Pop Quiz is independent and not affiliated with Google. | |
| Ko-fi | Only if you click the tip link. | Their policy applies. |
I do not sell personal information. I do not share it with advertisers or data brokers. People at Pop Quiz do not read game messages, except where needed for support, security, or to follow the law.
6. What I do not do #
- No accounts and no sign-in.
- No ads.
- No tracking cookies. No analytics or tracking inside the extension.
- No reading of your browsing history, other Google Docs, Sheets or Gmail.
- No selling of data.
- No use of data for advertising, profiling, or credit or lending decisions.
- No remote code. The extension runs only the code in its package.
7. How long it is kept #
- The relay keeps nothing once a message has been passed on.
- I keep no logs of game messages. Cloudflare’s technical logs are short-lived and kept by Cloudflare.
- Presenter data stays on the presenter’s computer until they delete it or remove the extension. The safety copy file stays until they delete it.
- A phone keeps its nickname and player id until the player or browser clears them.
- Because I hold almost no personal information about you, there is usually nothing for me to delete. See section 9.
8. Children #
Pop Quiz is not directed at children. I do not market it to classrooms.
- Players type only a nickname. Hosts should ask players to use first names or aliases, not full names.
- A host who runs Pop Quiz with children is responsible for having the authority to do so, for example from the school or the children’s parents or guardians.
- If you think a child’s information has reached me in a way it should not have, email me and I will help.
9. Your rights and how to contact me #
In New Zealand, the Privacy Act 2020 lets you ask me for the personal information I hold about you, and to correct it (information privacy principles 6 and 7). Email hello@popquiz.fun. I’ll reply within 20 working days, as the Act requires.
In the EU and UK, you have rights under the GDPR and UK GDPR, including access, correction, deletion, restriction, objection and portability, and the right to complain to your local data protection authority. Email me to use them.
I hold almost no personal information about you. Games are kept on the presenter’s computer and the relay stores nothing, so the answer to a request may be that there is nothing to give.
Complaints. If you are not happy with how I handled a privacy matter, please tell me first. In New Zealand you can then complain to the Office of the Privacy Commissioner (privacy.org.nz).
10. Where data goes outside New Zealand #
Cloudflare runs servers worldwide, so game messages and website requests can pass through or be processed in other countries. Cloudflare handles it only to provide its service to me, under its own data protection terms, and does not use it for anything else.
11. Chrome Web Store Limited Use #
The use of information received through Pop Quiz will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. In practice:
- Pop Quiz uses data only to provide or improve its single purpose: running live quizzes and polls inside Google Slides.
- Data is passed to others only where that’s needed for that purpose, to comply with the law, to protect against fraud or abuse, or as part of a merger, acquisition or sale of Pop Quiz after asking users’ explicit consent first.
- No one reads user data unless a user explicitly agrees, it’s needed for security, it’s needed to comply with the law, or it’s aggregated and anonymised for internal operations.
- Data is never used for personalised advertising, never sold or passed to advertisers, data brokers or resellers, and never used to decide creditworthiness or for lending.
12. Security #
Pop Quiz uses HTTPS and secure WebSockets (WSS) only. The extension contains no remote code. Its update files are data only and checked before use. If you find a security problem, email hello@popquiz.fun.
13. Changes to this policy #
If I change how Pop Quiz handles data, I will update this policy and the “Last updated” date, and tell users in the extension before the change takes effect. If the sharing feature in 3.7 is ever switched on, or the relay moves to a different host, this page changes first.