The short version
- No account, no sign-up. questionkit runs in an anonymous guest session.
- The only content sent to our servers is the text you explicitly select and choose to turn into questions, along with your chosen question types.
- No tracking. No analytics SDKs, no advertising, no browsing-history collection, and we never sell data.
- Everything else stays in your browser — your preferences and your last generated quiz are stored locally by Chrome.
1. Who we are and what this covers
questionkit is a free Chrome extension that turns text you select on a webpage into quiz questions ("the Extension"), together with its backend API at api.questionkit.app and this website, questionkit.app (together, "the Service"). This policy explains what data the Service processes and why.
2. Data we do not collect
- No names, email addresses, passwords, or user accounts — there is nothing to sign up for.
- No browsing history. The Extension does not read or monitor the pages you visit.
- No keystrokes, form inputs, or page content other than the text you explicitly select and submit.
- No analytics or advertising trackers in the Extension or on this website.
- No payment information — questionkit is free.
We do not sell, rent, or trade any data, and we do not use your content for advertising.
3. Data we process
When you right-click selected text and choose "Generate Question", the Extension sends the following to our API:
| Data | Purpose | Where it goes |
|---|---|---|
| The text you selected | To generate quiz questions from it using an AI model | Our backend, which forwards it to an AI model provider for processing |
| Your question-type choices (e.g. multiple choice, true/false) | To generate the kinds of questions you asked for | Our backend |
| An anonymous guest token | To authorize the request and enforce the free daily limit (25 requests/day) | Our backend; the token identifies a session, not a person |
| Technical request metadata (IP address, request headers) | Processed transiently for rate limiting, abuse prevention, and service operation, as with any web service | Our backend and hosting infrastructure |
Nothing is sent anywhere until you explicitly trigger a generation. Selecting text alone sends nothing.
4. Data stored on your device
The Extension stores a small amount of data in your browser using Chrome's extension storage:
- Locally on your device (
chrome.storage.local): your anonymous guest token, the question currently being generated, your most recent generated question, and any recent error message. This data never leaves your browser except as described in section 3. - Synced via your Chrome account (
chrome.storage.sync): your question-type preferences. This sync is performed by Google through your own Chrome account; questionkit has no access to it.
All of this is removed by Chrome when you uninstall the Extension.
5. AI processing
Quiz questions are generated by a large language model. The text you submit is forwarded from our backend to an AI model provider solely to generate your questions, and the response is streamed back to you. Please avoid submitting sensitive personal information — the Extension works on whatever text you select, so what you send is under your control.
6. Data retention
Submitted text is processed to generate your questions and is not kept as a stored copy tied to you — there are no user accounts to attach it to. Standard technical logs (such as request timestamps and IP addresses used for rate limiting) are retained only for the short period needed for service operation and abuse prevention, then deleted.
7. Chrome permissions we request, and why
| Permission | Why the Extension needs it |
|---|---|
contextMenus |
To add the "Generate Question" item to your right-click menu. |
activeTab + scripting |
To read the text you selected on the current tab — only when you invoke the Extension, and only on that tab. |
storage |
To keep your preferences and your latest quiz in your browser. |
The Extension requests no broad host permissions, loads no remote code, and contains no third-party analytics SDKs.
8. Sharing with service providers
We share data only with the infrastructure providers needed to run the Service: our hosting provider and the AI model provider that generates the questions, in each case only to the extent needed to process your request. We may also disclose information if required by law.
9. Security
All communication between the Extension and our API uses HTTPS (TLS) encryption. Guest tokens are short-lived and refreshed automatically.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect personal information from them — the Service is designed not to collect personal information from anyone.
11. Your choices
- Don't send it: nothing is transmitted unless you explicitly generate a question.
- Clear local data: remove the Extension's stored data via
chrome://extensions, or simply uninstall it. - Ask us: contact us at the address below with any privacy question or request.
12. Changes to this policy
If we change this policy, we will update this page and the effective date above. Material changes will be noted in the Extension's Chrome Web Store listing.
13. Contact
Questions or requests about privacy: support@questionkit.app