Privacy Policy

Privacy Policy

This Privacy Policy explains how CreateWebquest.com ("we", "us", "the Site") collects, uses, and protects your personal information. CreateWebquest.com is operated from Greece and is subject to the European Union's General Data Protection Regulation (GDPR) and applicable Greek law.

By using the Site you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

1. Who is responsible for your data

The data controller responsible for your personal information is the owner and operator of CreateWebquest.com, based in Greece. If you have any questions about this policy or your personal data, contact us at info@createwebquest.com.

2. What information we collect

We collect only the information needed to operate the Site:

  • Account information. When you register, we collect your username, email address, and password. Your password is stored in a hashed, encrypted form and is never visible to us.
  • Content you create. The WebQuests you create and any other content you submit, together with the account they are associated with.
  • Billing information (Premium purchases). If you purchase the Premium plan, you provide billing details (name, address, country) used to calculate VAT and complete the sale. Your card details are entered directly with our payment processor, Stripe, and are never received or stored on our servers.
  • Technical and usage data. Like most websites, our servers and service providers automatically record technical information such as your IP address, browser type, device and operating system, referring pages, the pages you visit, and the date and time of your visit. This is used to operate, secure, and improve the Site.
  • Cookies and similar technologies. We and our service providers use cookies for essential site functions, analytics, and advertising, as described in section 6.

3. How we use your information, and our lawful basis

Under the GDPR we must have a lawful basis for processing your personal data. We use your information for the following purposes:

  • To provide the Site and your account — creating and managing your account, storing and displaying your WebQuests, and providing customer support. Lawful basis: performance of a contract with you.
  • To process Premium purchases — taking payment through Stripe, calculating and collecting VAT, granting your Premium benefits, and keeping records required by tax law. Lawful basis: performance of a contract, and compliance with a legal obligation.
  • To keep the Site secure and prevent abuse — detecting spam, fraud, and misuse, and enforcing our Terms of Use. Lawful basis: our legitimate interests in operating a safe service.
  • To analyse and improve the Site — understanding how the Site is used through analytics. Lawful basis: your consent, where required, or our legitimate interests.
  • To display advertising — showing ads to users on the free plan. Lawful basis: your consent for personalised advertising, where required.

4. Advertising and Premium

The free plan is supported by advertising served through Google AdSense. Premium accounts do not see advertising, and ads are not displayed on WebQuests created by Premium users. Where required by law, advertising and analytics cookies are only set after you have given consent through our cookie/consent controls, which you can change at any time.

5. Who we share your information with

We do not sell your personal information. We share it only with the service providers necessary to operate the Site, and only to the extent needed. Our current providers are:

  • Stripe — payment processing for Premium purchases. Stripe receives the billing and payment information you enter at checkout. See Stripe's Privacy Policy.
  • Google AdSense — advertising shown to free-plan users. Google may use cookies to serve ads based on your visits. See how Google uses advertising data and Google's Privacy Policy.
  • Google Analytics — anonymised statistics about how the Site is used, to help us improve it. You can opt out using the Google Analytics Opt-out Browser Add-on.
  • Cloudflare — content delivery, performance, and security. Cloudflare processes traffic between your browser and the Site to protect against attacks and speed up delivery. See Cloudflare's Privacy Policy.
  • Cloudflare Turnstile — a privacy-friendly service used to protect our forms from spam and automated abuse, in place of a traditional CAPTCHA. See Cloudflare's Privacy Policy.
  • HawkHost — our web hosting provider, whose servers store the Site and its data. See HawkHost's Privacy Policy.

We may also disclose information where required by law, court order, or a valid request from a public authority, or where necessary to establish, exercise, or defend legal claims, or to protect the safety of our users. If the Site is ever sold or transferred, user information may be transferred as part of that transaction.

6. Cookies

Cookies are small text files stored on your device. We use:

  • Essential cookies — required for the Site to function, such as keeping you logged in and remembering your preferences. These do not require consent.
  • Analytics cookies — set by Google Analytics to understand Site usage.
  • Advertising cookies — set by Google AdSense to serve ads to free-plan users.

Where required, analytics and advertising cookies are only set after you consent through our consent controls, and you can withdraw or change your choice at any time. Most browsers also let you block or delete cookies through their settings; note that blocking essential cookies may stop parts of the Site from working.

7. International data transfers

Some of our service providers — including Google, Stripe, Cloudflare, and our host HawkHost — are based in, or process data in, the United States and other countries outside the European Economic Area (EEA). Where your personal data is transferred outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an approved adequacy framework, to protect your information.

8. How long we keep your information

We keep your account information and content for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we are required to retain certain records — for example, transaction and invoice records for Premium purchases, which tax law requires us to keep for a defined period. Technical logs are kept only for as long as needed for security and operational purposes.

9. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data ("right to be forgotten");
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent; and
  • lodge a complaint with a supervisory authority.

You can exercise most of these rights directly: while logged in, you can view, edit, or delete your profile information and your content at any time. For anything else, contact us at info@createwebquest.com. If you are in the EU and believe we have not handled your data properly, you have the right to complain to your local data protection authority; in Greece this is the Hellenic Data Protection Authority (HDPA).

10. Children

The Site is intended for educators. No one under the age of 13 may create an account or provide personal information to the Site. Younger students may view WebQuests as anonymous visitors without registering. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us personal information, please contact us.

11. Security

We take reasonable technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access, including encrypted connections (HTTPS), hashed passwords, and handling payment card data exclusively through Stripe so that it never reaches our servers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If you become aware of any security issue, please notify us immediately.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always posted on the Site, with the "last updated" date shown below. Significant changes will take effect when posted, and your continued use of the Site constitutes acceptance of the updated policy.

13. Contact

For any questions about this Privacy Policy or your personal data, contact us at info@createwebquest.com.

Last updated: 1 July 2026