Privacy Policy

Unwrapped Quiz turns WhatsApp chats into a quiz that you review and then play live with your friends. Unlike Recap, the Quiz keeps your uploads and drafts for a short time so you can come back and finish your quiz. Everything is temporary: Quiz data expires no later than 7 days after your last activity, and live games no later than 24 hours after they are created. This section applies only to the Quiz.

You don't need to sign up or give us your name or email. When you start creating a quiz, we set an anonymous, HttpOnly cookie in your browser that links you to your uploads and drafts. We store only a one-way hash of that cookie. Your session stays active while you use it: it ends no later than 7 days after your last activity, and never more than 30 days after it started. If you clear your cookies or switch browser or device, you lose access to your drafts, and we can't restore it because we don't know who you are.

Players don't need an account either. When someone joins a game, we set a separate cookie that keeps their seat in that game. It expires after 24 hours. We also remember your interface language in a cookie. These cookies are only used to make the Quiz work, not for advertising.

• Your chat exports: The WhatsApp .txt or .zip files you upload are stored privately in Vercel Blob storage (they are not publicly accessible) and read on our servers to find stories for your questions. They are deleted within minutes of your questions being created. A chat you upload but never turn into a quiz is deleted after 24 hours.
• Chat summaries: For each chat, its name, the participant names as they appear in the chat, message counts, date range and detected languages. These are stored with your drafts in our Postgres database (hosted by Neon) so you can choose the chats and people to focus on.
• Your quiz setup: The title, your focus brief, the people you chose, the audience, the language and the number of questions.
• Messages selected for generation: Our servers pick the messages most likely to contain good stories (with sender names, dates and times). This selection and the AI's working notes are kept only while your questions are being created, so the work can resume if it is interrupted, and are deleted as soon as it finishes or fails.
• Questions and their evidence: Generated questions, answer choices and short explanations, together with the original messages that support each question and a few surrounding messages for context. The supporting messages are shown to you, the creator, so you can check each question. They are never sent to players' phones; during a live game you can choose to show a question's supporting messages on your own host screen after its answer is revealed.
• Approved quizzes and game designs: The version of the quiz you approve (its questions, answer choices and explanations only, without the supporting messages), plus your design choices (theme, photos, photo placement and captions).
• Optional photos: Photos you add (JPEG, PNG or WebP) are stored privately. We create a re-encoded WebP copy, resized and without the original file's metadata (such as EXIF location data), and delete the original file as soon as that copy is ready. Only the copy is ever shown. Photo files are not sent to OpenAI.
• Usage limits: To prevent abuse and control costs, we count uploads, generations and games per session, per day and per network. For the per-network count we store a salted, one-way hash of your IP address, never the address itself.

Questions are only generated after you tick the consent box confirming that you have permission to use the chats. We then send the following to OpenAI's API, in several steps (finding stories, writing questions and checking them):

• The selected messages, with sender names, dates and times, and the chat name
• Your quiz title, focus brief, chosen people, audience and language
• Draft questions and their supporting messages, so they can be checked against the original chat

We send these requests with OpenAI's response storage turned off, so they aren't saved in our OpenAI account for later use. Under OpenAI's API policy, API data is not used to train its models by default, but OpenAI may keep API inputs and outputs for up to 30 days to monitor for abuse (or longer if the law requires it). See OpenAI's API data policy and OpenAI's policies. AI can make mistakes, and nothing is shown to players until you approve the quiz.

• You: In the browser that created the quiz, you can see your chat summaries, drafts, questions and their supporting messages.
• Players: Only what you approve: the questions, answer choices and explanations, and the photos you add to the game (captions only if you choose to show them). Players also see the nicknames and scores of others in the same game. They never see your uploaded files or chat summaries. They see supporting messages only if you, as host, choose to show them on your screen after an answer is revealed (up to 8 short messages per question, kept with the game for at most 24 hours).
• Nothing is published: Uploading or generating doesn't make anything public. A game can only be joined by people who have its link, so share it only with people you're happy to show the questions to.
• Us: We don't read your chats or quizzes, except where needed to keep the service running, investigate abuse or respond to a request from you.

When you host a game, a copy of the approved questions, answer choices, explanations and your photo settings is placed in a game room that runs on Cloudflare (Durable Objects). Players join with a nickname, and the room keeps nicknames, answers and scores while the game runs. Each room expires no later than 24 hours after it is created (or earlier, if your creator session ends first), and its data is then deleted.

• Creator session: Ends no later than 7 days after your last activity, and never more than 30 days after it started.
• Uploaded chat exports: Deleted within minutes of your questions being created; after 24 hours if you never create a quiz from them; never kept more than 7 days.
• Messages selected for generation: Only while your questions are being created.
• Photos, drafts, chat summaries, questions with their supporting messages, approved versions and designs: Until your session ends or you delete your data, then deleted.
• Live game rooms, including player nicknames, answers and scores: No more than 24 hours. Player cookies also expire after 24 hours.
• Hashed network counters used for usage limits: About 2 days.
• At OpenAI: Up to 30 days under OpenAI's API policy, as described above.
• Records without content: We keep minimal records that contain no chat content, names or files (such as anonymous usage counters and a note that a file was deleted) to enforce usage limits and complete deletions.

Deletion is automatic but not instant. As soon as data expires it can no longer be opened, and it is removed by a scheduled cleanup job that runs after that. Our providers may keep short-term backups for recovery for a limited period.

You can delete everything at any time: open "My quizzes" in the browser you used and choose "Delete all my data". Your quizzes, chat summaries, questions and games are deleted immediately, and uploaded files within minutes. If you no longer have that browser, email us (see Contact) with the quiz title, roughly when you created it and, if you have one, the game link, and we will delete what we can find.

• Vercel: Hosts the Quiz website and servers, and stores uploads privately (Vercel Blob). Privacy Policy
• Neon: Postgres database for chat summaries, drafts and questions. Privacy Policy
• OpenAI: Writes and checks questions, only after your consent. API data policy
• Cloudflare: Runs live game rooms. Privacy Policy

Like any website, these providers process IP addresses and request details in their standard logs. They may process data in the United States and other countries.