Privacy Policy

1Who is responsible for your data

The data controller is named in the seller details card at the end of this page. It is the same seller that charges you for the report.

For any question about your data, write to the support address listed in those details and on the contact page.

2What we collect

The test requires no registration. We do not ask for your name, phone number or email to take it, nor for your age or gender. How much data exists depends on how far you go:

• your answers to the test items and the computed result: core type, wing, instinct profile and current range. A draft of an unfinished test is kept on the server for 30 days
• the random token that makes up the address of your result page. Only you, and the people you send it to, know that address
• if you buy a report: your email address, the amount, the currency and technical payment marks. Your card number never reaches us, it is handled by the payment provider on their side
• if you create an account: your email and password. The password is stored as an irreversible hash and cannot be read back
• short-lived abuse protection logs: a hash of the IP address and a truncated subnet, without the address itself

3Why we need it

Each item above has a specific job:

• computing your result and showing it to you
• storing the result so that its link still opens months later
• delivering a purchased report and sending the access email
• keeping a history of results in your account, if you created one
• limiting bots and abusive request rates
• keeping the sales records that tax law requires

4Cookies and browser storage

The site sets no persistent identifier cookies of its own. There are exactly two cookies: your interface language (kept up to a year) and a session cookie that appears only if you sign in to an account (up to 30 days; during sign-in itself the browser also receives a couple of short-lived form protection cookies).

In your browser's localStorage the site keeps: your theme choice, the token of an unfinished test, a bookmark to your latest result and the key of your reading route. All of it stays in your browser and disappears when you clear site data.

Visit statistics may be collected by Google Analytics or Yandex Metrica counters when they are enabled. They receive depersonalised page view data under their own terms; you can block them with a content blocker or browser settings.

5Who receives your data

We pass data only to services without which a specific feature cannot work:

• the payment provider: the buyer's email, the amount and the purchase description. It processes the card payment itself, under its own terms
• the AI provider: a depersonalised profile of your result used to write the report, described in the next section
• the email service: the address and the text of the access email
• web analytics services, when enabled: depersonalised visit statistics
• the hosting that runs the site

6What the language model receives

The written report is produced by a language model run by an external provider. It receives only aggregates of your result: the core type and the confidence of the calculation, the scores of all nine types, the wing, the instinct profile and the current range.

Your name, email, IP address and answers to individual test items are never sent to the model. The model provider may be located outside your country.

7How long data is kept

The periods differ because the jobs differ:

• a test result is kept with no pre-announced expiry: its link should still open a long time later
• a draft of an unfinished test: 30 days after the last answer
• an anonymous route key: 90 days
• abuse protection logs: no longer than 48 hours
• purchase records are kept as financial documents for as long as the law requires

8Your rights and data deletion

If you have an account, you can delete it in your dashboard. Deleting it also removes the results and routes linked to it. Purchase records remain, as they are financial documents, but a purchased report still opens through the link from the access email.

To delete a single result without an account, write to support and include its link: the link itself is the proof that the result is yours.

9How data is protected

The connection to the site is encrypted with TLS. Passwords are stored as irreversible hashes. AI provider keys and payment credentials are encrypted at rest and are not shown in plain text even to the administrator. The admin panel sits behind authentication.

IP addresses in protection logs are stored as a hash or a truncated subnet; the original address cannot be recovered from them.

10Children

The test is written for adults: its wording and interpretations assume an adult reader. If you are under 16, take the test together with a parent and do not leave your email on the site. A report may be purchased only by an adult.

11Changes to this policy

The version and revision date are shown at the top of the page. A substantive change raises the version number; minor wording fixes do not.