QG Playground security: trust centre

Quick answerUpdated 2026-09-24

Is QG Playground secure and built for the DPDP Act?

QG Playground is built around India's Digital Personal Data Protection Act 2023 and the GDPR. Your quizzes, questions and results belong to you: you can export them to Excel or PDF at any time and delete your account and data yourself, and we don't sell personal data. Players join with a nickname by default and share an email, mobile number or ID only when the host switches that on, with a consent line. AI requests go through a gateway to established model providers; prompts are kept 30 days for debugging and never used to train models. Proctored exams use no facial recognition or biometric templates, flags never end an exam on their own, and evidence deletes itself after 7 days. Payments are processed by Razorpay under PCI DSS, so card details never touch our servers. Enterprise customers get a security review, and a data processing agreement on request.

Five areas, in detail.

Pick a topic to see the detail.

Quizzes, questions and results belong to you
Export to Excel or PDF at any time
Delete your account and data yourself from your account page
We don't sell personal data

Nickname only by default
Email, mobile or ID only when the host turns it on, with a consent line
Players must be 13 or older
No account or app for players

AI requests go through a gateway to established model providers
Prompts kept 30 days for debugging, then deleted
Your content is never used to train models
You review every AI-written question before it's saved

No face matching, identification or biometric templates
Photos at random points, nothing recorded continuously
Flags never end an exam; a person reviews them
Evidence deletes itself after 7 days unless you keep it

Sign in with Google or email; up to 2 devices at a time
Idle editors are signed out after 20 minutes
Payments processed by Razorpay under PCI DSS
GST invoices, and cancel any time from your account

The legal detail.

Plain-words summaries on this page; the policies below govern.

Need a review for procurement? Enterprise customers get one, and a data processing agreement on request.

Security at a glance

Laws we build around	India's DPDP Act 2023 and the GDPR
Your content	Yours; export any time, delete yourself
Player data	Nickname by default; more only with consent
AI training on your data	Never; prompts kept 30 days for debugging
Proctoring	No facial recognition; evidence kept 7 days
Payments	Razorpay, under PCI DSS
Report an issue	quizgranny@gmail.com, subject “SECURITY”

Security questions.

Can't find it? The help centre has step-by-step answers.

Do you sell personal data?

No. We don't sell personal data, and your quizzes, questions and results belong to you.

Is our content used to train AI?

No. AI prompts are kept for 30 days for debugging, then deleted, and are never used to train models. You review every AI-written question before it's saved.

Where is data stored?

With our cloud database and hosting providers, under written data processing agreements. The privacy policy explains how data is shared and transferred, and Enterprise customers can ask for more detail during their security review.

Does AI proctoring use facial recognition?

No. There's no face matching, identification or biometric template. Photos are taken at random points, flags are reviewed by a person, and evidence deletes itself after 7 days unless you keep it.

How do I report a security issue?

Email quizgranny@gmail.com with “SECURITY” in the subject line. We'll acknowledge it and keep you updated.