You’ve seen them everywhere. ‘Find out your personality type.’ ‘Enter to win a $500 gift card.’ ‘Take this quiz to see which career fits you best.’ They’re fun, they’re free, and they take about 90 seconds. What they don’t tell you is what happens to your answers after you hit submit.
Here’s the real deal: the United States does not have a comprehensive federal data protection law. That means companies that collect your data through these forms — your name, email, age, preferences, opinions, even your location — are largely free to do whatever they want with it. While some narrow federal laws protect specific types of data (like children’s information or medical records), there’s no blanket rule saying they have to protect it, delete it, or keep it between you and them.
So where does it go? A lot of it ends up with data brokers. These are companies whose entire business model is collecting information about people and selling it to anyone willing to pay — marketers, political campaigns, corporations, and sometimes even government agencies. The House Committee on Energy and Commerce has been investigating exactly this kind of unrestrained data collection, noting that brokers can sell Americans’ most sensitive information with few meaningful restrictions.
And it’s not just the sketchy-looking sites. Even well-designed, totally normal-looking forms can be doing this. That’s the part that catches most people off guard — it doesn’t look shady because it isn’t supposed to.
What kind of data are we talking about? Think about what you hand over when you fill one of these out. Your real name. Your email or phone number. Your birthday. Your interests. Sometimes your opinions on political or social issues. Quiz answers that reveal your personality, your insecurities, your aspirations. On their own, each piece seems harmless. But data brokers are really good at connecting the dots — combining bits from multiple sources to build a surprisingly detailed picture of who you are.
Once your data is sold, you don’t get a say in what happens next. It can be resold again and again. It can be used to target you with ads, influence your political views, or just sit in a database somewhere waiting to be hacked. You won’t get a notification. You won’t get a cut of the profit.
So what can you actually do?
First — be skeptical of anything that’s free and asks for your information. That’s not cynicism, that’s just how this works. If you’re not paying for the product, your data probably is the product.
Second — use a throwaway email address for quizzes and giveaway entries. Set one up just for stuff like this. That way, the spam and targeting stays contained and your real inbox stays clean.
Third — read the privacy policy before you enter anything. Yes, they’re long and boring. But even skimming for the words ‘share,’ ‘sell,’ or ‘third party’ takes about a minute and tells you a lot.
Fourth — if a giveaway or quiz asks for more than makes sense — your phone number, your address, your date of birth — that’s a red flag. Legitimate contests don’t need your life story.
You don’t have to swear off every online quiz forever. But knowing what you’re trading when you fill one out? That changes everything.