Quesly operates under the law of the Russian Federation. This English text is provided for convenience; in case of any discrepancy the Russian version prevails.

1. Who processes the data

The data controller is [OPERATOR NAME], taxpayer number [INN], registration number [OGRN], address: [ADDRESS] ("we").

The service is the Telegram bot @QueslyBot, the bots users connect to the platform, and the site quesly.online together with its admin panel ("Quesly").

To reach us about this policy use the /feedback command in the bot — it files a ticket and the reply comes back to the same chat — or write to [E-MAIL].

2. What we collect

We collect what the service cannot work without. There is no separate sign-up: you arrive from Telegram and we receive your profile from it.

2.1. From Telegram, on your first message to the bot

  • the numeric id of your Telegram account;
  • the first and last name you set in Telegram;
  • your @username, if you have one;
  • your Telegram interface language.

We do not receive your phone number, your contacts or your conversations with other people.

2.2. What you create yourself

  • quizzes: titles, descriptions, questions, answer options, explanations;
  • files attached to questions — they live in Telegram, we keep only their identifier;
  • your answers to quiz questions, including free-text answers;
  • support tickets and the correspondence in them;
  • the token of a bot you connect — stored encrypted, and the message carrying it is deleted from the chat immediately.

2.3. Technical data

  • an action journal: which screens and pages were opened, which buttons were pressed, which operations were performed, and by whom;
  • panel session data: lifetime, last-seen time and a hash of the browser string (the string itself is not stored);
  • the ad-link tag you arrived with.

We do not store visitors' IP addresses in the database. They appear only in web-server logs, which exist to fend off attacks and are kept for a limited time.

2.4. Payment data

Paid plans are not offered yet and no payments are accepted. When they are, card details will be handled by the payment provider rather than by us; we will see only the fact and the amount of a payment, plus an email address for the receipt if you give one.

3. Why

  • To run the service: show you your quizzes, score answers, work out the standings, send results.
  • Rating and leagues: your name and score are visible to other people in the shared rating. You can leave it — see section 7.
  • The quiz catalog: if you suggested your quiz for the public catalog and we accepted it, your name and a link to your Telegram account are published next to it. This only happens on your own initiative.
  • Support: to answer you.
  • Safety and fair play: spotting automated runs, defending against enumeration and abuse, investigating incidents.
  • Improving the product: aggregate statistics — which pages are opened, where people drop out.

4. Legal grounds

  • Your consent. By starting to use the bot or the site you consent to processing on the terms of this policy. Consent can be withdrawn — see section 7.
  • Performance of a contract — the Terms of Use you become a party to.
  • Our legitimate interest — protecting the service from abuse.

5. Who the data goes to

We do not sell data and do not pass it on for anyone else's advertising. It is shared only with those the service cannot work without:

  • Telegram (Telegram FZ-LLC) — the platform the bot lives in. Everything you write to the bot passes through Telegram under their privacy policy.
  • Yandex.Metrica (Yandex LLC) — site and panel visit statistics. Details and how to opt out in section 6.
  • DeepSeek — the model that reviews or generates questions when you ask for it yourself. What goes there is the content of a quiz — questions and answer options. No names, identifiers or data about people are included in the request.
  • A payment provider — once paid plans exist. Nothing is sent there today.

6. Cookies and statistics

  • Strictly necessary. The panel session cookie and its anti-forgery companion: sign-in does not work without them. Your chosen theme and language are also kept in the browser.
  • Statistics. Yandex.Metrica. Its Webvisor feature is on: it records mouse movement, scrolling and clicks so we can see where the interface is confusing. You can opt out with Metrica's opt-out or by blocking cookies — the service keeps working either way.

The action journal (section 2.3) is ours, is not shared with third parties, and is subject to the retention in section 8.

7. Your rights

You may:

  • ask what data about you we hold and get a copy;
  • have inaccurate data corrected;
  • have your data deleted and withdraw consent;
  • hide yourself from the public rating — you do this yourself, with "Hide me from the rating" under "🏆 Player rating";
  • complain to the supervisory authority or go to court.

Send a request with /feedback in the bot or by email to [E-MAIL]. We answer within 30 days. Withdrawing consent means deleting your account and the data tied to it; after that the service cannot be used, and the quizzes you created — together with other people's results in them — are deleted.

Some records must be kept after an account is deleted where the law requires it, but no longer than the periods it sets.

8. How long we keep it

  • The action journal — 90 days, then deleted automatically.
  • Panel sessions — until they expire or you sign out, then deleted.
  • Account, quizzes, play results, support tickets — while you use the service and until you ask for deletion.
  • Backups — daily copies for no more than 14 days.

9. Where the data lives, and how it is protected

Databases and backups sit on servers located in the Russian Federation. Data does not leave the country except for the transfers to Telegram and the services listed in section 5, without which the product cannot work.

Access is limited to the people who need it for their work. Connections to the site and the bot are protected with TLS; internal interfaces (monitoring, the operations console) are reachable only over a private network. Connected bot tokens and session secrets are stored encrypted or hashed and cannot be read back from the database in the clear.

10. Children

The service is not intended for children under 14. If you are younger, use Quesly only with a parent's or guardian's consent. We do not knowingly collect children's data; if you find any, tell us and we will delete it.

11. Changes

We may change this policy. A new version is published on this page with a new date and takes effect on publication. Significant changes are additionally announced in the bot.