If your quiz collects names or email addresses and some of your visitors live in the EU, the GDPR applies to you. That doesn’t mean you need an expensive tool. A GDPR compliant quiz maker has to give you a few specific things, from a data processing agreement to a consent checkbox in the form, and several affordable tools do.
This guide lists what to check, shows how Qzzr covers each point on its free plan, and compares what Typeform, Jotform and Tally say about GDPR on their own pages and what they cost. It is not legal advice: what your quiz needs is something to settle with your lawyer or data protection officer.
The short answer
- Qzzr is run from Saarbrücken, Germany, is free to start with no time limit, and has a DPA, a consent block, double opt-in and lead deletion on every plan. Pro costs $9/month, billed monthly.
- Typeform publishes a DPA. Its free plan has 10 responses a month and no scored quiz mode; Basic is $39/month, billed monthly.
- Jotform offers a pre-signed DPA and EU data storage in Frankfurt once you switch it on. The free plan allows 5 forms and 100 submissions a month.
- Tally is based in Belgium and stores form data in Europe. Its free plan has unlimited forms and submissions under fair use, with Tally branding.
What a GDPR compliant quiz maker has to give you
No tool makes you compliant on its own. When your quiz collects leads, you are the controller of that data, and the quiz tool processes it on your behalf. A good tool makes your part easy. Before you pick one, check these six points:
- A data processing agreement (DPA). The GDPR expects a written contract with every service that handles personal data for you.
- Clear information on where the data is stored and who else processes it.
- Consent inside the form: a checkbox you can word yourself, with a link to your privacy policy.
- Double opt-in, so only people who confirm their email address end up on your list.
- Control over storage: the choice not to keep leads in the tool, and a way to delete them.
- Data minimization. The tool shouldn’t keep more than it needs, raw IP addresses for example.
Price has nothing to do with any of these. A free plan can tick every box, and an expensive one can miss some. So compare the checklist first and the price second.
Qzzr as a GDPR compliant quiz maker: setup step by step
Everything below works on the free plan. Qzzr has two plans, Free and Pro, and both include all features.
1. Sign the DPA
Qzzr’s data processing agreement is signed online with Adobe Sign on the DPA page. Qzzr is a trademark of Riddle Technologies AG in Saarbrücken, Germany, and describes itself as GDPR/CCPA compliant by default. If your data protection officer wants details such as subprocessors, the DPA is the document to read before you sign.
2. Add a consent checkbox to the form
Add a form block for name and email, then the Data & Tracking consent block, which you find under Personal details. Its first checkbox asks for consent to combine quiz answers with the form data. It is switched on by default, and you can rewrite the label, description and checkbox text and link your privacy policy.
A second checkbox asks for consent to custom trackers. Turn it on if you run a Meta Pixel or your own tracking code on the quiz. You can also show a privacy message in the form.
3. Turn on double opt-in
Under PUBLISH, Privacy / Opt-in, you choose one of three methods: a confirmation email with a link, a code sent by email, or a code sent by SMS. Only people who confirm are saved as verified leads. If the confirmation should come from your own domain, send it through your own SMTP server.
Double opt-in also keeps fake addresses off your list. If you plan to send people a series of emails after the quiz, our guide to growing your email list with quizzes covers the follow-up.
4. Decide where leads live
By default Qzzr stores leads and individual answers on its GDPR-compliant servers. If you would like to keep personal data in one place, your email tool or CRM, switch off Save w/Qzzr under PUBLISH, Save and connect data, and send the leads straight to your own tool.
Native integrations cover Mailchimp, ActiveCampaign, AWeber, Brevo and Google Drive (see quiz makers that connect to Mailchimp and ActiveCampaign). For anything else there is a webhook with custom headers and a signed request, explained in sending quiz scores to a CRM via webhook.
5. Delete leads you no longer need
Under MANAGE LEADS in the main menu you can delete all leads of a quiz in one step, after confirming with your account email and typing DELETE. It can’t be undone, so download the leads as CSV first if you still need them. A giveaway that ended last spring is a good candidate.
6. Check what ends up in the browser
Qzzr never stores the actual IP addresses of your quiz takers. The IP limit, which blocks repeated spam votes, works on the server and without cookies.
One setting needs a line in your privacy policy: Remember users via cookies. Despite the name it doesn’t set a cookie. It keeps form data such as name and email, plus the visitor’s progress, in the browser’s local storage, and only for quizzes embedded on your website. Local storage falls under privacy rules like the GDPR, so mention it in your privacy policy or cookie banner if you switch it on.
What a GDPR compliant quiz maker costs
The table compares free plans and the cheapest monthly price, next to what each vendor says about GDPR on its own website.
| Tool | Free plan | Cheapest paid plan (billed monthly) | GDPR, in the vendor’s own words |
|---|---|---|---|
| Qzzr | Free forever, all features, 300 completions in total, unlimited quizzes | Pro $9/month, 1,000 completions per month | EU-based company, DPA signed online, actual IP addresses not stored |
| Typeform | 10 responses per month, no scored quiz mode | Basic $39/month, 100 responses per month | Publishes a DPA with Typeform SL |
| Jotform | 5 forms, 100 submissions per month, Jotform branding | Bronze $39/month, 1,000 submissions per month | Pre-signed DPA; EU storage in Frankfurt once you switch it on |
| Tally | Unlimited forms and submissions (fair use), Tally branding | Pro $29/month | Based in Belgium, form data stored in Europe, DPA part of the terms |
Prices come from each vendor’s pricing page, the GDPR column from their own GDPR or DPA pages. We only list what a vendor states itself.
For a small business the real cost difference sits in the limits. Typeform’s free plan stops at 10 responses a month and has no scored quiz mode, so a lead quiz with a score is off the table on the free plan. On Jotform’s free plan a sixth form means deleting one of the five you have. Qzzr has no cap on quizzes. Its free plan ends after 300 completions in total; then your content is paused, not deleted, and Pro costs $9/month, billed monthly, with no annual plan.
Where Qzzr has limits
- Qzzr branding stays on every plan. You can add your own logo and footer text.
- The free plan has 300 completions in total, not per month. After that you top up or move to Pro.
- Quiz takers can’t get a PDF report of their result.
- Zapier works through a webhook, not a native Zapier app.
When Qzzr Isn’t the Right Fit
If your quizzes must carry only your own brand, or you expect far more traffic than 1,000 completions a month, look at Riddle. It comes from the same team in Saarbrücken. Every Riddle plan includes unlimited content, responses and leads, and the Riddle logo can be removed. There is no free plan, but a 14-day trial with no credit card; Pro costs $119/month billed yearly or $129 billed monthly.
FAQ
Is Qzzr GDPR compliant?
Qzzr is run by Riddle Technologies AG in Saarbrücken, Germany, and describes itself as GDPR/CCPA compliant by default. You sign its DPA online, your forms get a consent checkbox and double opt-in, leads can be deleted per quiz, and Qzzr never stores the actual IP addresses of quiz takers. Whether your quiz is compliant also depends on your setup and your privacy policy.
Do I need a DPA with my quiz tool?
If the quiz collects personal data such as names or email addresses, the GDPR expects a written agreement with the tool that processes it for you. Qzzr’s DPA is signed online with Adobe Sign.
Can a free quiz maker be GDPR compliant?
Yes. Price says nothing about compliance; check the DPA, consent options, double opt-in and deletion. Qzzr has all of these on the free plan, which has no time limit and 300 completions in total.
How do I ask for consent in a quiz?
Add the Data & Tracking consent block to your form, write your own checkbox text and link your privacy policy. Turn on the second checkbox if you use tracking such as a Meta Pixel.
What does Qzzr cost?
The free plan costs $0, with all features and 300 completions in total. Pro is $9/month, billed monthly, for 1,000 completions per month; each extra 1,000 completions cost $5/month.
Start with the consent block and double opt-in, sign the DPA, and write one line about local storage into your privacy policy. You can set all of it up on the free plan before a single lead comes in.