Privacy Policy · Effective August 16, 2026 · Version 2.7.3

Classroom insight, with less student data.

PhosQ is designed to run without student accounts or real names. It collects only the information needed to create, grade, and display a classroom quiz, then expires the quiz data after 30 days.

Plain-language summary

What PhosQ does—and does not—collect

The Chrome extension extracts readable lesson text, then sends that text securely to PhosQ for server-side question generation and safety checks. PhosQ does not require teacher or student accounts, and students should never enter a real name or other personal information.

Lesson-file content

The original PowerPoint, Word, PDF, or text file stays on the teacher’s device. The extension sends extracted readable lesson text over HTTPS so PhosQ’s server can generate and check the quiz. Google Slides and Google Docs are processed only after the teacher downloads them to one of these supported formats. PhosQ does not write the extracted lesson text to the quiz database; it is used during generation and then discarded. Only the finished quiz title, approved questions, answer choices, difficulty levels, and quiz settings are retained.

Teacher access

PhosQ creates a random private teacher token. The token is stored locally by the extension, while only a one-way hash is stored with the private quiz record. PhosQ does not ask for a teacher name or email address.

Student participation

PhosQ processes an assigned classroom username, selected answers, confidence choice, and submission time. Answers are used to calculate the student’s score, but the individual answer selections are not retained after grading.

Use of information

Why the data is processed

PhosQ uses quiz information only to provide its classroom quiz features: creating the student quiz, selecting randomized questions, grading a submission, showing the student’s own score, and displaying class results and confidence information to the teacher.

Information retained

The saved student response contains the assigned username, score, percentage, confidence choice, and submission time. It does not contain a real name, email address, student account, or the student’s individual answer selections.

Information not used

PhosQ does not sell classroom data, build advertising profiles, serve personalized ads, or use quiz information for unrelated marketing. PhosQ does not collect browsing history.

Service records

PhosQ’s hosting and database providers may process ordinary network and security metadata, such as IP addresses, request headers, and service logs, to deliver and protect the service.

Security and access

Teacher-only class results

PhosQ uses HTTPS for information sent between the extension, student page, and server. The correct answer key is stored in a private server-only record and is never placed in the student QR code or returned with the student question set.

Students receive only their own score after submitting. Class responses are returned only when the PhosQ server verifies the private teacher token. Firebase Realtime Database rules deny every direct browser read and write; trusted server code uses restricted administrative credentials kept outside the extension and download package.

No internet service can promise absolute security. PhosQ limits stored information and access so that a security issue would expose less classroom data.

Retention and deletion

Quiz records expire after 30 days

A quiz becomes unavailable 30 days after creation. An automatic daily cleanup removes the public quiz, private answer key, teacher-token hash, and associated student responses, normally within 24 hours after expiry.

Delete sooner

The teacher can select Delete quiz data in PhosQ at any time. After the private teacher token is verified, PhosQ deletes the quiz, answer key, and all associated responses together. This action cannot be undone.

Local teacher token

Removing the extension or clearing Chrome’s local extension storage removes the teacher token from that device, but it does not immediately delete the online quiz. The quiz will still be removed through the 30-day expiry process.

Provider operations

Infrastructure providers may keep limited security logs or backups according to their own operational retention schedules. PhosQ does not use those records for advertising or student profiling.

Service providers

Where PhosQ runs

PhosQ uses Vercel to host its website and server functions, and Google Firebase Realtime Database to store quiz records. Information is shared with these providers only as needed to operate, secure, and maintain PhosQ.

Vercel

Hosts PhosQ’s web pages and trusted grading, results, deletion, and cleanup functions.

Google Firebase

Stores the separated public quiz, private answer key, token hash, scores, confidence choices, and timestamps.

No data sales

PhosQ does not sell or transfer classroom information to data brokers or advertising platforms.

Chrome Web Store Limited Use

Data is limited to PhosQ’s classroom purpose.

PhosQ’s use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. PhosQ uses Chrome storage only to keep the current quiz’s teacher access token and settings on the teacher’s device, and clipboard access only when the teacher selects Copy link.

Contact PhosQ

Privacy questions, requests, and security reports

Use the address that matches your concern. Do not include student answers, lesson files, private teacher links, passwords, recovery codes, or other sensitive information in an email.

Privacy requests

For privacy questions or requests to access, correct, or delete information, email privacy@phosq.ca.

Security reports

To report a suspected vulnerability, exposed token, or other security concern, email security@phosq.ca.

Deletion details

Include the quiz ID only if it is needed to identify the affected quiz. Never send the private teacher token or a student’s answers by email.

Classroom use

Use PhosQ without personal information

PhosQ is intended for teacher-supervised classroom activities. Teachers and schools are responsible for using PhosQ consistently with their policies and applicable requirements. Students should use only the assigned username and should not submit a real name or other personal, sensitive, or identifying information.

This policy may be updated when PhosQ’s features or data practices change. The effective date at the top of this page will be revised, and material changes will be disclosed in PhosQ before new data practices take effect.