Privacy policy
Effective: 28 September 2026
Crushcheck is a playful quiz builder: you put together a quiz, send the link, and see who answered what. Here's what data we handle, what we use it for, and how you can have it deleted.
01Who handles your data?
The controller and operator of the service is Varga György Márk, a private individual. For any question or request, write to gyurmatag@gmail.com. The service is for people aged 18 and over only.
02What data do we handle?
Account: your email address and name, plus your Instagram username and profile photo if you add them, and when you accepted the terms. If you sign in with Google, we only receive your name, email address and account ID from Google; we can't access anything else in your Google account.
Quizzes: everything you put into your quizzes (questions, texts, settings).
Responses: the respondent's name, their Instagram username if they give it, their answers, uploaded photos and signature, when they gave consent, plus the quiz owner's decision (approved or declined). Please don't share sensitive data (for example about your health) that you'd rather keep to yourself.
Notifications: if you turn them on, your browser's push subscription, your language and your device type.
Reports: if you report content, the report itself and, if you add it, your email address.
Technical data: session details needed for signing in (such as IP address and browser type), and IP addresses used for rate limiting against abuse.
Voice notes: if a question asks for a voice note, the recording and a text transcript made from it automatically. Recording only starts when you press the button, with your browser's permission.
Dream answers and date planner: the quiz creator's dream answers to their own quiz (only they see these), and the date ideas and times sent after approval, together with the respondent's choice.
Friends' votes: if the respondent separately agreed, the creator may show the application to up to 3 friends via a private link; from them we store the nickname they give, their vote and their comment.
03What do we use it for, and on what legal basis?
Handling your account, quizzes and received applications is necessary to provide the service (GDPR Art. 6(1)(b): performance of a contract).
Respondents' data is handled based on their consent, given at the start of the quiz, which they can withdraw at any time by deleting their application (GDPR Art. 6(1)(a)).
Notifications are based on your consent, and you can turn them off at any time (GDPR Art. 6(1)(a)).
Security logs, rate limiting against abuse and handling content reports are based on our legitimate interest and legal obligations (GDPR Art. 6(1)(f) and (c), and Regulation (EU) 2022/2065, the DSA).
Responses are visible to the quiz owner, and to their friends only if the respondent separately agreed. We don't sell your data or use it for advertising.
Sharing with friends is based on the respondent's separate, voluntary consent (GDPR Art. 6(1)(a)), which they can withdraw at any time on their status screen: the link then stops working and the friends' votes are deleted.
04AI features
Quiz generation, question ideas, rewrites and the “AI bestie” review are generated with Anthropic's Claude model through Cloudflare AI Gateway. When you use them, the relevant part of the quiz, and for reviews the response's answers, are sent to the model. Under its commercial terms, Anthropic doesn't use data sent through its API to train its models. We log these requests and responses for debugging; the oldest logs are deleted automatically.
The AI never decides for you: the quiz owner always makes the approval decision, and AI texts can be wrong.
Voice notes are transcribed into text by Cloudflare Workers AI's speech recognition model (OpenAI Whisper) on Cloudflare's network; the transcript is shown to the creator and used for the AI review. Date ideas and conversation starters are also suggested by the Claude model based on the answers.
05Who has access?
Data is stored and processed on Cloudflare's infrastructure (hosting, database, email delivery, AI Gateway). Cloudflare forwards requests for the AI features to Anthropic. If you sign in with Google, Google handles the sign-in. Notifications are delivered, encrypted and without names, by your browser vendor's push service (such as Apple or Google).
Cloudflare, Google and Anthropic also process data in the United States; transfers there are covered by appropriate safeguards (the EU–US Data Privacy Framework or the European Commission's standard contractual clauses). We only share data with anyone else if the law requires it.
06What's public?
Anyone who has the link to a quiz or an approval card can open it. The quiz page shows the owner's name and profile photo; the card shows the approved respondent's name, the owner's message and, if uploaded, the respondent's photo. Answers are never public.
The private link for friends is only meant for the people the creator shares it with: it expires after 7 days and can be revoked at any time.
07Cookies and local storage
We only use cookies the service strictly needs: session cookies for signing in and one for your language choice. To let you continue a quiz later, we keep a random ID in your browser's local storage, and for notifications the browser installs a service worker. We don't use tracking or advertising cookies, so there's no cookie banner either.
08How long do we keep it, and how can you delete it?
You can delete your account and all its data (quizzes, received applications, photos, voice notes) yourself at any time in Settings, where you can also download your data.
As a respondent, you can delete your application at any time on the quiz link's status screen; this also removes your photos, your voice notes and, if you were approved, your card.
Otherwise we keep data for as long as the account exists. Reports are kept until they're resolved, for at most one year. If you need help, write to gyurmatag@gmail.com and we'll respond within one month at the latest.
Voice notes, transcripts, date plans and friends' votes are deleted together with the application.
09Your rights
You can ask us what data we hold about you, request a copy, and have it corrected, deleted or its use restricted, and you can object to its processing; you can withdraw your consent at any time. If you feel we've violated your rights, you can lodge a complaint with the Hungarian data protection authority, NAIH (1055 Budapest, Falk Miksa utca 9–11., naih.hu), or go to court.
10Changes
If this policy changes materially, we'll publish the new version on this page and ask you to accept it again the next time you sign in.