Effective date: July 28, 2026
Protecting your privacy — and your students' privacy — is central to how AiRT ("AiRT", "we", "our" and/or "us") is built. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information that the AiRT Quiz Maker Chrome extension and this website touch. It does not apply to any third-party websites, services, or applications, even if they are reachable through our Services. Your use of the Services is also governed by our Terms of Service.
AiRT Quiz Maker is a teacher-facing tool that runs in your browser's side panel. It builds randomized quizzes from your own Google Forms question banks and analyzes the results, working with Google Forms, Google Sheets, Google Drive, and (optionally) Google Classroom, using your own Google Account. Students never install it and never interact with it.
AiRT is operated by David Nelson as a sole proprietorship, based in California, USA. For any privacy question, or to exercise a right described below, email us at the address in the Contacting AiRT section.
AiRT Quiz Maker's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AiRT Quiz Maker's use and transfer of information received from Google APIs will also adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Specifically, data obtained through Google APIs is used only to provide the user-facing features that are prominently visible in the extension's interface. It is never transferred to others except as needed to provide those features, never used for advertising of any kind, never sold, and never read by humans — except with your explicit consent for a support request you initiate, to comply with applicable law, or as part of a limited security investigation.
This is the most important thing to understand about how AiRT is built, so it gets its own section.
AiRT holds the drive.file permission — the narrowest Google Drive permission that exists. It deliberately does not request the broad drive permission that many tools ask for. In practice:
Below is every browser permission and Google API scope AiRT Quiz Maker requests, and exactly what each one is used for. If a permission isn't listed here, AiRT doesn't ask for it.
| Permission | Why it is needed | Scope of use |
|---|---|---|
sidePanel |
The entire interface is a side panel. | Opening the extension's own panel. Nothing else. |
storage |
Remember your settings and your saved question bank list, and carry them between your own computers. | Save folder, class periods, grading thresholds, and the titles and file IDs of the banks and quizzes you chose, plus any folders you create to organize them. See How your settings sync between computers. No student data is ever stored. |
identity |
Sign in to Google so the extension can work with your own Forms, Drive, and Sheets. | Token retrieval only. Silent on load; interactive only after you click "Sign in with Google." |
Content script on docs.google.com, drive.google.com, classroom.google.com |
Draws the small AiRT launcher button so the side panel can be opened from where teachers already work. | Renders a button and nothing else. Reads, stores, and transmits no page content. The only value it saves is the button's on-screen position. Not injected on Gmail, Google Search, Photos, Maps, or any non-Google site. |
Host permissions (www.googleapis.com, forms.googleapis.com, sheets.googleapis.com, classroom.googleapis.com) |
Reaching the Google APIs listed below. | These are the only hosts the extension contacts to do its work. |
Host permission (oauth2.googleapis.com) |
Revoking your Google authorization when you click "Sign out." | Exactly one request, only when you sign out, so that signing out genuinely releases access rather than merely forgetting the token locally. |
externally_connectable → www.airt.biz |
Lets AiRT's own file picker page return your file selection to the extension. See The AiRT file picker page. | One AiRT-owned page, nothing else. Each exchange carries a single-use code the extension generates moments before. No extension IDs are listed, so no other browser extension can communicate with AiRT Quiz Maker. |
drive, drive.readonly, drive.metadata.readonly, drive.activity, and drive.scripts — Google classifies all of these as restricted because they grant sweeping access to everything in your Drive. AiRT uses drive.file instead, which cannot see a file you have not chosen.classroom.rosters, classroom.profile.emails, and classroom.profile.photos — AiRT never reads your class rosters or your students' profiles. It only lists your own course names and creates one draft assignment.activeTab and scripting — the extension never reads or injects into page content, so neither is needed.tabs — never requested. The side panel can be opened without it.externally_connectable extension IDs — no other extension can message AiRT Quiz Maker. The only entry is AiRT's own file picker page.| Scope | Google's classification | Why it is needed | When it is requested |
|---|---|---|---|
auth/drive.file |
Non-sensitive | Read the question banks you selected in Google's file picker, and create the quizzes and reports AiRT makes for you. Cannot see any other file in your Drive. | At sign-in |
auth/forms.body |
Sensitive | Read the selected question banks and build the new quiz. | At sign-in |
auth/forms.responses.readonly |
Sensitive | Read quiz responses to produce the analysis report. Read-only. | At sign-in |
auth/spreadsheets |
Sensitive | Create the analysis report. Only ever creates a new Sheet. | At sign-in |
auth/userinfo.email |
Non-sensitive | Show which Google account is connected in the side panel, so teachers with more than one account can confirm they are in the right one. | At sign-in |
auth/classroom.courses.readonly |
Sensitive | List your own courses for the assignment picker. | Only when "Post to Google Classroom" is first switched on |
auth/classroom.coursework.students |
Sensitive | Create one draft assignment linking to the quiz. Never publishes to students, and never reads student data. | Only when "Post to Google Classroom" is first switched on |
Google Classroom access is requested separately, and only at the moment you first switch that feature on. If you never post to Classroom, AiRT never asks for it.
You can review or revoke AiRT's access to your Google Account at any time at myaccount.google.com/permissions.
When you choose a question bank, AiRT opens Google's own file picker in a small window. That picker has to run on a normal web page rather than inside the extension, because Chrome's Manifest V3 rules forbid extensions from loading Google's picker library directly. AiRT therefore hosts a small page at www.airt.biz for this single purpose.
In connection with the Student Online Personal Information Protection Act (CA Bus. & Prof. Code Sections 22584–22585), AiRT affirms the following:
When a quiz is built from more than one question bank, question images are copied into a temporary folder in your Google Drive and made readable by anyone with the link for a few seconds. This step is unavoidable: Google's own Forms servers fetch image URLs anonymously in order to import them, and the image cannot be brought into the new quiz otherwise.
The link sharing is revoked and the temporary file deleted as soon as the quiz has been built. Each temporary file is recorded on your device before it is shared, so that if a build is interrupted — by a crash, a closed panel, or a network failure — the leftover file is found and removed automatically the next time you open AiRT. These images are never sent to AiRT, and are never left shared between sessions.
Teachers move between a classroom computer and a personal one, so AiRT stores your settings and your saved question bank list using Chrome's sync storage. This rides your own Chrome profile: if you are signed in to Chrome with extension syncing enabled, Google carries this small amount of data between your signed-in browsers, encrypted in transit and at rest under your own Google account.
Uninstalling the extension removes this data from that device. To remove the synced copy from your Google account as well, clear it at chrome.google.com/sync.
This website is a set of static pages. It does not use cookies, analytics, tracking pixels, advertising networks, or any other automated data-collection tool, and it has no accounts or logins. "Cookies" are small text files that a web server places on your device when you access a site; we do not use session Cookies or persistent Cookies of any kind. The only third-party resource loaded on this page is an icon font stylesheet from a public CDN, used purely for the icons on the buttons below.
The file picker page described above loads Google's official picker library from Google, which is what makes the picker work. That page sets no cookies and stores nothing.
As with any website, our web host may keep standard server access logs (such as IP address, timestamp, and the page requested) for security and troubleshooting. These are not tied to any AiRT account, are never used for tracking, profiling, or advertising, are never sold or shared, and contain no student data.
Where the EU or UK General Data Protection Regulation applies, AiRT acts as a processor and you (or your school or district) act as the controller. All processing happens locally in your browser, on your documented instruction, at the moment you invoke a feature. The legal bases available to you as controller are:
AiRT itself has no independent purpose for your data, retains none of it, and never processes it for its own ends. AiRT does not carry out profiling or automated decision-making that produces legal or similarly significant effects on any individual within the meaning of Art. 22 GDPR. If AiRT ever begins processing personal data on its own infrastructure, a data processing addendum incorporating the Art. 28 GDPR terms will be made available on request.
AiRT does not transfer your data anywhere, because AiRT never receives it. Data moves only between your browser and Google's APIs, over an encrypted connection. Where Google stores and processes that data — including any transfer outside the EEA, UK, or Switzerland — is determined by your own Google Workspace configuration and by your agreement with Google, and is covered by Google's own transfer safeguards (such as the EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework). The same applies to the settings AiRT stores in Chrome sync storage, which Google carries under your own account.
Google LLC — Google Drive, Forms, Sheets, and Classroom, plus Google's file picker and Chrome sync storage. All of your data stays in your own Google Account. AiRT Quiz Maker uses no other third-party services.
Not applicable during the trial period. AiRT operates no backend servers and stores no teacher or student data outside your Google Account, so there is nothing on AiRT's side that could be breached. Once the paid version launches and AiRT begins storing teacher account and billing data on its own servers, this section will be updated with full breach-notification commitments.
Any changes to this Privacy Policy will be reflected on this page, and the "Last Updated" date below will be revised. If a change materially affects how your data is handled, a notice will also be shown inside the extension before the change takes effect. Continued use of AiRT after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, the practices of the extension, or this website, please email . Please do not include any student personally identifiable information in your message.
AiRT is operated by David Nelson (sole proprietorship), California, USA. Your use of the Services is also governed by our Terms of Service.