Privacy Policy

Last updated: October 11, 2026

Question Nova (“we”, “us”) is an interactive learning site for physics and mathematics. This policy explains what information the site handles, why, and the choices you have. We keep it simple because we collect very little.

1. Information we handle

Account information

When you create an account or sign in, we use Google Firebase Authentication. It processes:

• Email and password sign-up: your name, email address and password. Your password is handled by Firebase and is never visible to us.
• Google sign-in: the name, email address and profile photo on your Google account. We never receive your Google password.
• Account emails: verification and password-reset emails are sent to your address through Firebase.

Learning progress saved to your account

When you are signed in, your progress is saved in Google Cloud Firestore, in a record that only your account can read or change. It contains your name and email address, completed chapters and lessons, your position in each lesson, practice-question results, quiz answers, notes, time spent studying, learning streak and recently opened chapters. We use it to restore your progress on any device and to show your dashboard.

Your progress is saved only in this database, not in your browser. Each page you open loads it from your account, and it is saved back shortly after you make progress. If you are not signed in there is nowhere to save it: your progress lasts only until you close or leave the page, and nothing is sent anywhere. If you sign in during that visit, the progress from that page is added to your account.

Messages you send us

When you send a message through the contact form, your name, email address, topic and message are sent to a hosted form service, which forwards them to our inbox so we can reply. We use them only to answer you. If the form can’t use that service, it instead prepares a message in your email app or in WhatsApp, and we only receive it if you choose to send it; in that case we see what you put in the message, plus your email address or phone number.

Technical information

Like any website, our hosting provider and Firebase receive technical details needed to deliver the service and keep it secure, such as your IP address, browser type, device information and the pages requested. We don’t use this to build profiles of individual visitors.

Usage analytics

We use Google Analytics for Firebase and Microsoft Clarity to understand how Question Nova is used and to improve it. How they start depends on where you are:

• In the European Union, the European Economic Area, the United Kingdom and Switzerland: the first time you visit, a banner asks whether you accept. Analytics only loads if you choose Accept analytics. If you choose Decline, or don’t answer, nothing is sent.
• Everywhere else: no banner is shown, and analytics loads on every page for every visitor, whether or not you have an account.

We work out which applies from the time zone your device is set to, without looking up your location. If your device doesn’t share a time zone, we ask. When analytics is running, it collects information about your visit, such as:

• the pages and chapters you open, and how long you stay;
• where you click, tap and scroll, and how you move the mouse, which Clarity turns into heatmaps and anonymised replays of your visit;
• your device, browser, operating system and language;
• your approximate location (country or city), worked out from your IP address;
• an anonymous identifier stored in your browser that recognises repeat visits.

We hide the parts of the site that show personal details from Clarity, so they never appear in a replay: the dashboard, the sign-in and profile windows, the signed-in name and email in the header, the contact form and your notes. We don’t send your name, email address, notes, quiz answers or learning progress to analytics, and we don’t use it for advertising. Analytics is linked to an anonymous identifier, not to your account.

If you were asked, you can change your mind at any time with Cookie settings in the footer of any page. Choosing Decline turns analytics and Clarity off and removes their cookies from your browser. Your choice is remembered in your browser’s local storage.

If you were not asked, the site has no setting to turn analytics off. If you don’t want your visits measured, you can block it in your browser, as described under Cookies and local storage below.

2. How we use information

• To create and secure your account and keep you signed in.
• To show your name and picture in the site header, save your progress to your account and show it on your dashboard.
• To send account emails you ask for, such as verification and password resets.
• To reply to messages you send us.
• To measure how the site is used and decide which chapters and features to improve.
• To keep the site running, fix problems and prevent abuse.

3. Cookies and local storage

Your learning progress and saved questions are not stored in your browser. Firebase uses browser storage to keep you signed in, and if you were asked about analytics, the site remembers your choice in your browser’s local storage. These are needed for the site to work. When analytics is running, Google Analytics for Firebase and Microsoft Clarity also store anonymous identifiers in cookies (such as _ga, _clck and _clsk) or browser storage to recognise repeat visits and measure usage. We don’t use advertising cookies.

Questions you save under lessons in the question notebook, including any equations, drawings and photos you attach, are stored in the same database, in your own account, and only you can read them. They are not stored in your browser. Deleting a question removes it from your account. You need to be signed in to save questions.

You can clear this storage at any time in your browser settings, which signs you out and resets your analytics identifier. Your progress and questions stay in your account. To stop analytics, you can change your choice with Cookie settings if you were asked, block cookies and trackers in your browser, or install the Google Analytics opt-out browser add-on.

4. Who we share information with

We don’t sell or rent your information. It is processed by the services that run the site:

• Google Firebase handles sign-in, account emails and the storage of your saved progress.
• Google Analytics for Firebase receives the usage information described above while analytics is running. Google processes it under its own privacy policy.
• Microsoft Clarity receives the usage information and anonymised screen activity described above while analytics is running. Microsoft processes it under the Microsoft Privacy Statement.
• Cloudflare (cdnjs) delivers the maths-rendering library (KaTeX) the first time you open the question notebook, so it receives your IP address and browser details with that request, under its own privacy policy.
• Our contact form service receives and forwards the messages you send through the contact form, under its own privacy policy.
• Our web host (Hostinger) serves the site’s pages and files.
• WhatsApp (Meta) only if you choose to message us there, under their own privacy policy.

We may also disclose information if the law requires it, or to protect the safety and rights of our users and the site.

5. International processing

Firebase and our host may process data in countries other than your own. Their safeguards are described in their own privacy documentation.

6. How long we keep information

Account details and saved progress are kept in Firebase until you ask us to delete your account. Your saved questions are kept until you delete them or your account is deleted. Usage analytics are kept by Google for up to 14 months, then deleted automatically. Clarity recordings and heatmaps are kept by Microsoft for the period set in Clarity’s own data retention policy. Messages you send us are kept only as long as needed to respond and keep a record of the conversation.

7. Your choices and rights

You can sign out at any time, clear your browser storage, or stop using the site. Deleting your account also deletes your saved progress and questions. Depending on where you live, you may also have the right to access, correct or delete the information we hold about you, to object to or restrict how it is used, and to complain to your local data protection authority. To use any of these rights, or to have your account deleted, email us at contact@questionnova.com. We may need to confirm it is really you before acting on a request.

8. Children

Question Nova is made for students, but it is not directed at children under 13, and in some regions the minimum age is higher. If you are under the age at which you can consent in your country, please use the site with a parent or guardian and ask them to create the account. If we learn we hold account information from a child without the required consent, we will delete it.

9. Security

The site is served over HTTPS and sign-in is handled by Firebase, so we never store passwords. No online service is perfectly secure, so we can’t guarantee absolute security. Please use a strong, unique password.

10. Links to other sites

The site links to services we don’t control, such as WhatsApp and Google. Their privacy practices are their own, and we encourage you to read their policies.

11. Changes to this policy

We may update this policy as the site changes. When we do, we will change the “Last updated” date above. Continuing to use the site after an update means you accept the revised policy.

12. Contact us

Questions about privacy? Email contact@questionnova.com.