Subprocessors
Kadasolutions Hungary Kft. ("Team Quiz") uses the following third-party subprocessors to deliver the Service. Each subprocessor is bound by a data processing agreement and applicable data protection law. We notify users of material changes to this list at least 30 days in advance.
Team Quiz is the data controller for your personal data. The subprocessors listed below act as data processors on our behalf and may only use your data to provide the specific service described.
Google Cloud Platform
Purpose: Hosting & Infrastructure
Location: EU (europe-west region)
Data processed: All application data including user accounts, quiz content, game state, and uploaded files. Google Cloud acts as our primary infrastructure provider.
Google Gemini API
Purpose: AI / Large Language Model (LLM) Provider
Location: United States / EU
Data processed: Quiz topics, prompts, and contextual instructions submitted by users when using AI question generation features. Input text is sent to Gemini for processing; the resulting generated content is returned to the user. No quiz participant answers or personally identifiable information are sent to the Gemini API.
Stripe, Inc.
Purpose: Payment Processing
Location: United States / EU
Data processed: Billing information (name, email, payment card details) for credit purchases. Stripe processes payment data directly — Team Quiz does not store card details.
Resend
Purpose: Sending emails (account verification, password reset, sign-in links and, if you opted in, marketing emails)
Location: United States
Data processed: Email address, the content of the email and delivery status.
Cloudflare
Purpose: Content delivery network, caching and DDoS protection
Location: Global network (United States / EU)
Data processed: IP address, request metadata (URL, headers, timestamps) and cached copies of public pages. Cloudflare does not receive the contents of your account.
PostHog
Purpose: Product analytics, session replay and error tracking
Location: EU (Frankfurt)
Data processed: Usage events, device and browser information and session recordings (with form inputs masked) for visitors who accept analytics cookies; cookieless visit counts for those who decline; error reports and product events linked to the account ID. IP addresses are not stored.
Google Analytics
Purpose: Web analytics (only with consent)
Location: United States / EU
Data processed: Pages viewed, interactions, device and browser information, approximate location and cookie identifiers, for visitors who accept analytics cookies.
Joint Controller: Meta Platforms Ireland Ltd.
Meta is not a subprocessor. For the Meta Pixel, Team Quiz and Meta are joint controllers under Art. 26 GDPR; Meta is solely responsible for its further processing of the data.
Purpose: Measuring and optimising advertising (only with consent)
Location: EU / United States
Data processed: Page views, sign-up events, browser and device information and cookie identifiers, for visitors who accept marketing cookies.
LLM Data Handling
When you use AI-powered features (quiz generation, question suggestions), your prompt text is transmitted to the Google Gemini API to generate a response. We apply the following safeguards:
- Only the topic or prompt you explicitly provide is sent — we do not include participant names, email addresses, or game results in LLM requests.
- Prompts are not used by Google to train its models under the Gemini API terms for enterprise/API customers (see Google Gemini API Terms).
- Generated content is stored on our servers (Google Cloud) and associated with your account solely so you can review and edit before publishing.
Contact
For questions about our subprocessors or data processing practices, contact us at [email protected].