Quizscout privacy policy

Last updated: 16 October 2026

Quizscout is provided by Philipp Schickling ("we"). It is a Shopify app that helps merchants create product quizzes and recommendations. For questions about privacy, contact hallo@ideabridge.de.

For shoppers, the merchant whose shop shows the quiz decides why and how the quiz is used. We process shopper data on the merchant's behalf.

Information we process

• Merchant and shop data: the shop's address at Shopify and the Shopify login data the app needs to work. Shopify supplies product titles, descriptions, product types, tags, prices, image addresses and collection information for the products a quiz covers. When Quizscout emails the shop owner (for example about the plan's monthly matches, or about a customer's data request), it reads the owner's email address and the shop name from Shopify at that moment; they are not stored.
• Quiz setup: quiz titles, questions, answers, the chosen products and display settings. These are stored in the shop's own Shopify metafields. Earlier versions of each quiz, so a merchant can go back to one, are stored on our server. Pictures a merchant adds to answers are stored on our server and are public, because shoppers see them.
• Quiz answers: the answers a shopper taps, and anything a shopper types into the quiz's text box, are processed to produce a recommendation. They are not stored with a shopper's identity, unless the shopper gives an email address or saves the quiz to a customer account (both below).
• Email address (only if the merchant turns this on, Pro plan): a quiz can ask for the shopper's email address, so the shopper can get their matches by email. A separate, unticked box asks whether the shopper also wants marketing email; it is optional. We then process the email address, a first name if the quiz asks for one, whether that box was ticked (and if so its wording and the time), the shopper's quiz answers, the recommended products, and where the shopper came from (for example an email campaign name). It is stored in our database for the merchant to download. The merchant chooses how long: it is deleted automatically after 30, 90 or 365 days (counted from the last time the shopper gave it), or kept until the merchant deletes it.
• Email tools the merchant connects: if the merchant has connected Klaviyo, Mailchimp, Omnisend or a webhook, the email address, the answers and the name, link, picture and price of the recommended products are also sent there. This happens for every shopper who gave their email, also those who did not tick the marketing box, so the merchant's tool can send them the matches they asked for. Those shoppers are not subscribed to marketing: in Klaviyo the profile is created without a marketing subscription, in Mailchimp the contact may only receive non-marketing email, in Omnisend the contact gets no email subscription, and the webhook says marketing is false. Only shoppers who ticked the box are subscribed to the merchant's marketing list.
• Shoppers Klaviyo already knows (off unless the merchant switches it on): with Klaviyo connected, a merchant can choose that a shopper whom the shop's own Klaviyo script already recognises (for example after clicking one of the shop's emails) has their answers and matches added to their Klaviyo profile without typing their email again. This only happens when the shopper allowed marketing in the shop's cookie banner. It is sent by Klaviyo's script in the shopper's browser, not through our server, and the shopper is not subscribed to anything by it.
• Shopify customer tags and Shopify Flow: for a shopper who is already a customer of the shop (signed in, or whose email given in the quiz belongs to a customer), Quizscout can add the answers as tags to that customer in the merchant's Shopify, for example "quiz:skin-type:oily". The merchant can switch this off. For the same customers, the Shopify Flow trigger "Quiz completed" gives the merchant's own workflows the quiz, the answers, the recommended products and the customer's email address. Both stay inside the merchant's Shopify shop. Quizscout never creates customers.
• Saved quiz for logged-in customers: a shopper who is logged in to the shop's customer account can choose to save their quiz result. It is stored with that customer in the merchant's Shopify shop, not on our server.
• Statistics: counts per shop, day and quiz: how often a quiz was started and finished, which answers were picked, which products were shown and clicked. These are totals. They hold no IP address, no customer number and no record per shopper.
• Abuse prevention: to limit how often one visitor can use a quiz, the shopper's IP address (or, for a logged-in customer, the Shopify customer number) is held in the server's working memory for up to 24 hours. It is not written to a database or a file, and it is gone when the server restarts.
• Cart attributes: when a shopper adds a recommended product to the cart, the quiz writes two attributes to the cart: the quiz id and a random tag for that visit. They are stored by Shopify with the cart and the order. Quizscout does not currently receive or store the merchant's orders.
• Plan and usage: the shop's plan and its number of recommendations per month are stored in our database. Server logs can include the shop's address, request timings and error details. Quiz answers, email addresses and IP addresses are not written to logs on purpose.

Services that process data for us

• JEV (api.typesafe.ai): scores how well products fit. It receives the shopper's quiz answers, what the shopper typed, and product text (title, product type, tags and a shortened description). See JEV's service information.
• OpenRouter (openrouter.ai) and the AI model providers it forwards to: reads what a shopper typed and writes the short reasons shown with a result. It receives the typed words, the tapped answers and product text. It is also used when a merchant has text or pictures made: questions, answer pictures, translations, notes on product photos and the quiz report. That involves product text, product photos and the merchant's instructions, and no shopper data.
• Klaviyo, Mailchimp, Omnisend: only when the merchant has connected their own account there, and only for shoppers who gave their email address in a quiz (see "Email tools the merchant connects" above). In those accounts the merchant decides what happens with the data.
• The merchant's webhook: only when the merchant has entered a webhook address. Each email given in a quiz, with the answers and the recommended products, is sent to that address, which the merchant chose (for example Zapier, Make or their own server).
• Shopify: hosts the shop, the quiz settings, the saved quiz of a logged-in customer, customer tags and Shopify Flow.
• IONOS (hosting): our server is a virtual server rented from IONOS in Germany. The database (email addresses, statistics, plans), the answer pictures and the server logs are stored there.
• Cloudflare: requests to the app's address pass through Cloudflare's network on their way to our server. Cloudflare sees the request, including the IP address it comes from, while passing it on; it does not store quiz data for us.

We do not send a shopper's IP address or Shopify customer number to JEV, OpenRouter, Klaviyo, Mailchimp, Omnisend or a webhook. We do not sell personal data.

City lookup for context questions

Merchants can turn on a context question for a quiz, for example "Going to a local festival?". Only then, Quizscout looks up the city of the shopper's IP address to choose that question. The IP address is sent to our own context service, which returns only a city, country and region. The IP address is held in memory for that lookup. It is not stored, not written to logs, and not sent to JEV. The city is used for the question and is not kept with the shopper's answers. Shoppers in a quiz with this setting off are not looked up. The city lookup uses the DB-IP Lite database (IP Geolocation by DB-IP, CC BY 4.0).

Only for a quiz where the merchant has turned on a context question, the widget reads and sends these short-lived signals with the quiz requests. Quizscout does not save them with answers or associate them with a customer profile. Quizscout does not ask for or infer age or gender.

• Local time of day reported by the browser.
• Weekday reported by the browser.
• Season derived from the browser's local month.
• Device class (mobile or desktop) inferred from the browser user agent.
• Browser language preference.
• Referring website hostname.
• UTM campaign name from the current URL.
• Current page path.
• Product types in the current cart, read from Shopify's cart endpoint.
• A random first-party visitor identifier, stored in a cookie named qz_visitor. It holds no IP address and no shopper data, lasts one year, and is used only to tell a returning browser apart. It is set only if the shopper consents through Shopify's Customer Privacy API. Without consent no cookie is set or read, and no identifier is sent.
• City-level current weather and three-day forecast from the configured weather provider; this build includes only a deterministic fixture provider.

Storage and retention

• Quiz settings stay in the shop's Shopify metafields while Quizscout is installed.
• Email addresses stored by us are deleted automatically after the period the merchant picked (30, 90 or 365 days after the shopper last gave it; checked once a day). If the merchant picked "until I delete them", they are kept until the merchant removes the app, Shopify sends us a deletion request for the customer or the shop, or the merchant asks us to delete them. Copies already sent to Klaviyo, Mailchimp, Omnisend or a webhook are kept there under the merchant's own settings.
• Statistics, the plan, the usage count, product matching data, earlier quiz versions and answer pictures are kept while Quizscout is installed.
• Quiz answers without an email address are held only while a request is processed. The entry used to limit requests expires within 24 hours.
• When the app is uninstalled, we delete what we hold on our server for that shop: statistics, stored email addresses, the Klaviyo, Mailchimp, Omnisend and webhook settings, product matching data, earlier quiz versions, answer pictures, the plan, the usage count and the Shopify login data. Quiz settings, customer tags and saved quizzes of customers are in the merchant's own Shopify shop; we can no longer reach them after an uninstall, and the merchant can remove them in Shopify.

Shopify privacy requests

Quizscout answers Shopify's customers/data_request, customers/redact and shop/redact requests. For a customer's data request we email the shop owner a summary of what we store for that customer: each email given in a quiz with its dates, answers, recommended products and marketing choice, and the customer's saved quiz. The merchant then answers the customer. For a customer's deletion request we delete both. For a shop's deletion request we delete everything we hold on our server for that shop. Data a merchant sent to their own Klaviyo, Mailchimp or Omnisend account or to their webhook is handled there by the merchant.

Your rights and contact

Depending on your location, you may have rights to access, correct, delete, or restrict personal data. Shoppers can contact the shop where they took the quiz, or us. Contact hallo@ideabridge.de and include the shop's address so we can route your request.

Company details