Privacy notice

Data controller

The data controller is Maurizio Fazio. For any privacy question and to exercise your rights you can write to qgeo@iamasoftware.com.

Pupils: no personal data

Pupils use QGeo without an account and without providing personal data. The optional name that can be entered before a quiz stays only in the device browser and is never sent to our servers. Quiz results are not saved.

Teachers: what data we process

Account data: first name, last name, email address, password (stored only in encrypted, irreversible form), preferred email language, sign-up date and date of acceptance of this notice.

Optional data: school and city. The administrator sees them to approve the registration; colleagues see them next to the quizzes you share only if you choose so in your profile.

Interface preferences (for example the colour theme) and the quizzes you prepare: templates and published challenges. Quizzes you share with colleagues show your name; the public "Available challenges" catalogue never shows your name.

Technical data: IP address, date and time of requests in the server logs, used for security.

Why we process it (purposes and legal bases)

To create and manage your account and offer you the features of the teachers' area: performance of the service you requested (Art. 6(1)(b) GDPR).

For the security of the service and to prevent misuse and abuse, including through the activation of accounts by the administrator: legitimate interest of the controller (Art. 6(1)(f) GDPR).

We do not use the data for advertising or profiling, and we do not sell it or pass it on to third parties.

How long we keep it

Account data is kept while the account is active. If you delete your account, it is deactivated immediately, together with your published challenges, and permanently deleted after 30 days along with your private quizzes: this period allows mistaken deletions to be undone. Quizzes you shared or made public remain available without your name, and your name is also removed from copies made by colleagues.

Server technical logs are kept for a limited period, at most 30 days.

Who processes data on our behalf

We use technical providers for the database and authentication (Supabase), website hosting and email delivery. They act as data processors, only following our instructions. The final list will be given here before the service goes live.

Data is stored on servers in the European Union and is not transferred outside the EU.

Cookies and browser storage

QGeo only uses technical cookies needed for it to work: the teachers' sign-in session cookie. Some preferences stay in the browser storage (theme, last quiz configuration, optional pupil name). We do not use profiling cookies or third-party analytics, so no consent banner is needed.

Your rights

You can ask for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest (Arts. 15–21 GDPR). From your profile you can already edit your data, download it in a file and delete the account.

For any request write to qgeo@iamasoftware.com. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).