Privacy Policy

1. Scope and definitions

This Policy applies to personal information we collect from and about applicants, members, and visitors of the Services. It does not apply to information collected by third parties whose products, websites, or services we may link to.

For the purposes of this Policy:

• Personal information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
• Sensitive personal information means categories of personal information that receive heightened protection under applicable law, such as Social Security numbers, precise geolocation, account credentials, racial or ethnic origin, religious beliefs, and health information.
• Process means any operation performed on personal information, including collection, use, storage, disclosure, and deletion.

2. Information we collect

We collect personal information in the following ways:

2.1 Information you provide directly

• Application information: full name, email address, state of residence, and age range when you apply to join the community.
• Profile information: if accepted, you may be invited to complete a member profile with demographic and household information (e.g., gender, household size, employment status, education, income range, languages spoken).
• Survey responses: the answers you provide to specific surveys we send you. Responses are tied to your account internally but delivered to research clients in anonymized or aggregated form.
• Communications: the content of any emails, support tickets, or other messages you send us.

2.2 Information collected automatically

• Device and browser information: IP address, device type, browser type and version, operating system, screen size, and language preference.
• Usage information: pages visited, time spent on pages, links clicked, referring URL, date/time of visit, and approximate geographic location (city/state level) derived from your IP address.
• Cookies and similar technologies: see Section 9.

2.3 Information from third parties

• Advertising partners: when you arrive at our site through an ad (for example, on Facebook or Google), the platform may share limited information about the ad you clicked.
• Analytics providers: aggregated insights about how visitors find and use our site.
• Verification and fraud-prevention vendors: data used to confirm you are a real, unique applicant and not a bot or duplicate account.

2.4 Categories of personal information collected (CCPA/CPRA reference)

3. How we use your information

We use personal information for the following business purposes:

• To operate the Services: review applications, set up and maintain member accounts, send survey invitations, and process survey responses.
• To communicate with you: send transactional emails (application status, survey invitations, account notices) and respond to your inquiries.
• To match you with relevant surveys: use your profile information (e.g., state, age range, household composition) to determine which surveys you may qualify for.
• To improve the Services: analyze how the site and surveys are used so we can fix bugs, improve usability, and develop new features.
• To prevent fraud and abuse: detect duplicate accounts, bots, fraudulent responses, and other prohibited activity.
• To comply with legal obligations: respond to lawful requests from authorities, enforce our Terms of Service, and protect our rights and the rights of others.
• For marketing and advertising: measure the performance of our advertising campaigns (e.g., on Facebook/Meta and Google) and reach similar audiences. We do not sell your personal information.

4. Legal bases for processing (EEA/UK)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal information under the following legal bases:

• Performance of a contract: to provide the Services you signed up for.
• Consent: for email communications, optional profile data, cookies that are not strictly necessary, and any processing of sensitive data. You can withdraw consent at any time.
• Legitimate interests: to operate, secure, and improve the Services, detect fraud, and conduct anonymized analytics — provided your rights and interests do not override these.
• Legal obligation: to comply with applicable laws and respond to lawful requests.

5. How we share information

We share personal information only as described below. We do not sell your personal information to third parties for monetary consideration.

5.1 Service providers and contractors

We engage third-party service providers (under written contracts that restrict their use of your data) for functions including:

• Web hosting and infrastructure (e.g., cloud hosting providers)
• Email delivery and customer support platforms
• Analytics and product-improvement vendors
• Fraud-detection and verification services
• Survey hosting and processing platforms
• Payment processors (if and when applicable)

5.2 Research clients

We share anonymized or aggregated survey results with the brands, agencies, and research firms that commission our studies. These reports do not identify you personally. We do not give clients access to your name, email address, or other contact details unless we obtain your explicit, separate consent for a specific study.

5.3 Advertising partners

We use advertising platforms such as Meta (Facebook/Instagram) and Google to promote the Services and measure ad performance. These platforms may receive hashed or pseudonymized identifiers (such as a one-way hash of your email address) to help measure conversions and build similar audiences. You can manage these preferences in your account settings on those platforms.

5.4 Legal disclosures

We may disclose personal information if required to do so by law, subpoena, court order, or to protect the rights, property, or safety of 1000Quiz, our members, or others.

5.5 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of the transaction. We will notify you of any such change and your choices regarding your information.

6. "Sale" and "sharing" of personal information

Under California law, certain disclosures of personal information for advertising purposes may be considered a "sale" or "sharing" even if no money changes hands.

We do not sell your personal information. However, our use of advertising cookies and conversion-tracking pixels (e.g., Meta Pixel, Google tags) on the Services may be considered "sharing" for cross-context behavioral advertising under California law.

You have the right to opt out of this sharing. See Section 12 ("California residents") for instructions on how to exercise this right, or click the "Do Not Sell or Share My Personal Information" link in our footer.

7. Data retention

We retain personal information only as long as is reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

When we no longer need your personal information, we securely delete or anonymize it.

8. Data security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest where applicable
• Access controls limiting personal information to authorized personnel
• Regular security review of our systems and service providers
• Employee training on data protection and confidentiality

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you and applicable authorities of any breach of personal information as required by law.

9. Cookies and tracking technologies

We and our service providers use cookies, pixels, web beacons, and similar technologies ("cookies") to operate, secure, and improve the Services and to measure advertising performance.

9.1 Types of cookies we use

9.2 Managing cookies

You can manage non-essential cookies through our cookie consent banner (where available), through your browser settings, or by using opt-out tools such as the Network Advertising Initiative opt-out and DAA opt-out. Disabling cookies may affect functionality.

10. Email communications

By submitting an application, you consent to receive emails from 1000Quiz related to your application status, survey invitations, account notices, and member updates. We comply with the CAN-SPAM Act and similar laws.

You may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by emailing support@1000quiz.com. Even if you unsubscribe from marketing emails, we may still send you transactional or service messages (e.g., account or security notices).

11. Your privacy rights

Depending on where you live, you may have the following rights regarding your personal information:

• Right to know / access: request a copy of the personal information we hold about you.
• Right to correct: request correction of inaccurate or incomplete personal information.
• Right to delete: request deletion of personal information we collected from you, subject to certain exceptions.
• Right to opt out of sale/sharing: direct us not to sell or share your personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: we do not collect sensitive personal information, but you may still confirm this with us.
• Right to data portability: receive your personal information in a portable, machine-readable format.
• Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

11.1 How to exercise your rights

To submit a request, please email privacy@1000quiz.com with the subject line "Privacy Rights Request" and include your full name, email address used with the Services, and the specific right you wish to exercise.

We will verify your identity by matching the information you provide against our records before fulfilling your request. We will respond within 45 days, with the possibility of a 45-day extension when reasonably necessary, in which case we will inform you of the extension and the reason.

You may designate an authorized agent to make a request on your behalf. We will require written proof of the agent's authorization and verification of your identity.

12. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you specific rights regarding your personal information.

12.1 Notice at collection

The categories of personal information we collect, the purposes for which we use it, and the categories of recipients are described in Sections 2, 3, and 5 above. We do not sell personal information for monetary consideration. We may "share" personal information for cross-context behavioral advertising as described in Section 6.

12.2 Your CCPA rights

• Right to know what personal information we have collected about you, the sources, the purposes, and the categories of recipients
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of your personal information
• Right to limit the use and disclosure of sensitive personal information (note: we do not collect sensitive personal information as defined by CCPA)
• Right to non-discrimination for exercising your rights

12.3 Submitting CCPA requests

Submit a verifiable consumer request by:

• Emailing privacy@1000quiz.com with the subject "California Privacy Rights"
• Using our "Do Not Sell or Share My Personal Information" link in the site footer

We honor Global Privacy Control (GPC) signals as a valid opt-out of "sharing" for cross-context behavioral advertising.

12.4 Sources, purposes, and recipients (12-month look-back)

In the past 12 months, we have collected the categories of personal information described in Section 2.4 from the sources described in Section 2.1–2.3, for the purposes described in Section 3, and disclosed it to the recipients described in Section 5.

12.5 Shine the Light

California residents may also request information about the categories of personal information we disclosed to third parties for those parties' direct marketing purposes during the preceding calendar year. We do not currently disclose personal information to third parties for their own direct marketing purposes.

13. Other U.S. state rights

Residents of certain other U.S. states — including but not limited to Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Maryland, Minnesota, Rhode Island, Indiana, Kentucky, and Nebraska — may have similar rights under their respective state privacy laws (e.g., VCDPA, CPA, CTDPA, UCPA, OCPA, TDPSA, etc.).

These rights generally include the rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale of personal data, and certain profiling. To exercise these rights, follow the procedure in Section 11.1.

If we deny your request, you may appeal our decision by replying to our response with the subject line "Appeal." We will respond to the appeal within 45–60 days depending on your state of residence.

14. International users (EEA/UK)

The Services are directed primarily to users in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.

If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR/UK GDPR, including the rights to access, rectification, erasure, restriction of processing, data portability, objection to processing, and the right to lodge a complaint with your local supervisory authority. To exercise these rights, contact privacy@1000quiz.com.

When we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

15. Children's privacy

The Services are intended for adults 18 years of age and older. We do not knowingly collect personal information from individuals under 18, and we do not target the Services to children.

If you are a parent or guardian and believe your child has provided personal information to us, please contact privacy@1000quiz.com and we will promptly delete the information in accordance with the Children's Online Privacy Protection Act (COPPA) and applicable law.

16. Third-party links and services

The Services may contain links to third-party websites, apps, or services that are not owned or controlled by 1000Quiz. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with personal information.

This Privacy Policy does not apply to any third-party site or service. References to Meta, Facebook, Instagram, Google, or other brands in this Policy do not imply any endorsement, partnership, or sponsorship by those companies.

17. Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry-standard interpretation of DNT signals, the Services do not currently respond to DNT signals.

We do, however, honor Global Privacy Control (GPC) signals as a valid opt-out of "sharing" personal information for cross-context behavioral advertising for California residents and residents of other states that recognize GPC.

18. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you by email or by posting a prominent notice on the Services prior to the changes taking effect, where required by law.

Your continued use of the Services after the effective date of the revised Policy constitutes your acceptance of the changes.

19. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you may also have the right to lodge a complaint with your local data-protection authority (for example, the California Privacy Protection Agency at cppa.ca.gov for California residents).