Student Data & Privacy
Effective date: March 29, 2026
This page is written for school administrators, technology directors, and district privacy officers evaluating QuizTheClass for classroom use. It supplements our full Privacy Policy and is intended to support Student Data Privacy Agreement (SDPA) reviews.
1. What the Service does
QuizTheClass is a browser-based classroom response system. A teacher creates a session, students join with a short code on any device, and the teacher sends questions (multiple choice, select-all, text, polls, drag-and-drop). Responses appear in real time on the teacher's dashboard and optional class display.
- No app installation required — works in a standard web browser.
- No student accounts, logins, or passwords.
- No student email or personal identifier collected.
2. Student data collected
| Data element | Example | Purpose |
|---|---|---|
| Display name | "Emma S." or "Student 14" | Identify responses within the session for the teacher. |
| Answer text / selections | "Paris"; choice "C"; drag-and-drop mapping | Grading, score calculation, real-time feedback. |
| Correctness flag | Correct / Incorrect / Pending | Score reporting to teacher and (optionally) to student. |
| Submission timestamp | 2026-03-29 14:02:31 | Time-limit enforcement, audit. |
| Join timestamp | 2026-03-29 13:55:00 | Session roster. |
Not collected from students: email address, phone number, date of birth, home address, school name, device identifiers, cookies for tracking, or biometric data.
3. Prohibited uses
- We do not sell student data.
- We do not use student data for advertising, marketing, or behavioral profiling.
- We do not share student data with third-party advertisers or data brokers.
- We do not build a persistent profile of any student across sessions or schools.
4. Third-party sub-processors
| Sub-processor | Data shared | Purpose | Student data? |
|---|---|---|---|
| Stripe, Inc. | Teacher name, email, Stripe IDs | Payment processing for teacher subscriptions | No |
| Server email (sendmail / SMTP) | Teacher name, email | Transactional messages (verification, password reset, session summaries) | No |
| ip-api.com | Teacher IP address | Approximate geolocation at teacher login for security | No |
No student data is transmitted to any third party.
5. Data storage & security
- Data is stored in a MySQL database on our hosting infrastructure.
- All traffic is encrypted via HTTPS / TLS.
- Teacher passwords are hashed with bcrypt; students have no passwords.
- Database access is restricted to the application server; no public database endpoint.
- Stripe handles payment card data under PCI DSS standards; we never see card numbers.
6. Data retention & deletion
- Session data (student names, responses, scores) is retained as long as the teacher keeps the session on their dashboard.
- Teachers can delete any session at any time; deletion cascades to all student records and responses in that session.
- When a teacher ends a session, the session becomes inactive but data remains available for review until the teacher deletes it.
- A district or teacher may request full data deletion by emailing support@quiztheclass.com. We will process requests within 30 calendar days.
7. Breach notification
In the event of a data breach that affects student information, we will notify the affected teacher(s) and, where applicable, the school district's designated contact within 72 hours of confirmation. Notification will include the nature of the breach, the data affected, and remediation steps taken.
8. FERPA & school context
QuizTheClass is used at the direction of a teacher or school. Under FERPA, the school determines whether this Service is used as a "school official" with a legitimate educational interest, or under another applicable exception. The minimal student data collected (display name and session answers) is used solely to provide the educational service the teacher requested.
We will cooperate with any school or district that needs to complete a Student Data Privacy Agreement (SDPA), Data Processing Agreement (DPA), or similar instrument to satisfy state or local requirements.
9. District SDPA / DPA
For Ohio districts (Senate Bill 29 and related guidance): We are prepared to review and execute your district's standard Student Data Privacy Agreement. Please send your template or contact us to begin the process.
For districts in other states: We welcome your standard DPA or SDPA template and will work with your privacy officer to complete it.
Contact: support@quiztheclass.com
10. Contact
- QuizTheClass (Gargasz Interactive LLC)
- Email: support@quiztheclass.com
- Website: https://www.quiztheclass.com
This page describes our current data practices accurately and in good faith. It is not legal advice. Schools and districts should consult their own counsel to determine compliance with applicable federal, state, and local privacy laws.