Privacy

Your quiz content stays under your control.

Quiz drafts and spreadsheet imports stay in your browser. Only the normalized quiz is sent to BeanNest when you explicitly publish or save online.

Last updated September 17, 2026. BeanNest is published by BeanNest Studio. Contact: Contact page.

Quiz Creator

Draft quiz editing and CSV/XLSX import or export happen in your browser. BeanNest does not upload the source spreadsheet. Publishing or saving online sends the normalized quiz title, description, questions, choices, correct answers, and optional explanations to a dedicated Cloudflare D1 database so the share link can work across devices.

Published creator quizzes use a random public ID and a separate private editing capability. The application database stores a cryptographic hash of the editing capability rather than the raw secret, plus the quiz document, revision, status, visibility, and timestamps. Creator quizzes start unlisted and noindex. Player answers and scores remain in the browser and are not stored as Quiz attempt history in this version.

If you explicitly request a recovery email, the email address is sent to the configured transactional email provider only to deliver that message; it is not stored in the Quiz D1 schema. The email contains a separate one-time recovery token rather than the permanent editing secret. Using the token rotates the private editing capability. Quiz reports may store a fixed report reason and an optional short note in D1 for moderation; the report form does not ask for reporter identity.

Analytics

BeanNest may use aggregate Cloudflare traffic reporting to understand visits, requests, popular paths, countries, device categories, and data transfer. BeanNest has no visitor accounts and does not use its local management dashboard to build visitor profiles.

Google Analytics is currently enabled automatically on public production pages. When enabled, it helps BeanNest understand page use and internal navigation.

Analytics may receive a page title, a path without its query or fragment, a broad site area, sanitized internal-link paths, and coarse tool events. They do not send filenames, file contents, document text, images, thumbnails, metadata, hashes, object URLs, precise dimensions, exact byte counts, quiz question/answer text, private quiz or recovery secrets, recovery email addresses, player answers or scores, user-entered values, source URLs, target hostnames, rendered Markdown, or raw error messages. Advertising storage, personalization, Google signals, User-ID, and cross-domain tracking are not enabled through this analytics setup.

Analytics providers may process standard technical data needed to offer their service, such as timestamps, first-party identifiers, browser and device information, language, screen size, and IP-derived location.

Advertising

Advertising is currently disabled. When enabled, only configured ad slots load the approved provider script.

Contact messages

Messages sent through the Contact page are handled through Gmail. The sender address and message are used to reply, investigate a report, or handle a privacy or security request. They are not added to a newsletter or marketing list.

Google processes and stores those messages as the email provider. Do not send private files, passwords, identity documents, financial records, medical information, or other sensitive content. Messages are kept only as long as reasonably needed for the inquiry, security, recordkeeping, or legal requirements. You may use the same address to request access, correction, or deletion, subject to applicable retention requirements.