Your privacy

What stays in your browser

We use localStorage to remember quiz progress, an anonymous browser owner ID, result and unlock tokens, payment session references, and your analytics choice. This helps you continue a quiz and reopen a report. Progress and result entries reset when you retake a quiz. Other entries stay until you clear your browser’s site data. Clearing them does not delete a result already saved on our servers.

If you unlock full results, we also set two first-party cookies: cq_paid, which holds the tokens of the results you unlocked, and cq_pass, which holds your checkout reference so results from our other quizzes unlock in this browser. They last up to 31 days. We don't use them for analytics or ads.

Quiz results and share links

When you finish a quiz, your answers stay in your browser. We save a result in Cloudflare KV only when you share its link, invite your partner, start a purchase, or use your pass to unlock it. Each saved result has a random token and expires 30 days after it was saved; a paid result expires 30 days after it was unlocked, and a partner result linked to it is kept as long. We also store the anonymous owner ID, creation time, anonymous IDs of up to 20 visitors who open the link, any partner answers, and any report unlock or payment status.

Anyone with the share link can read the parts of the result that are unlocked. When full results are unlocked, this includes both people’s answers. The link is not a private account or a password. Share it only with people you trust. Shared result pages are marked to stay out of search results, but this does not stop someone from forwarding a link.

Analytics and cookies

We use Google Analytics 4 to understand which pages people visit and how they use quizzes. It can collect page views, quiz and button interactions, purchase confirmations and transaction references, referral information, approximate location, and browser and device information. We do not send your quiz answers, contact message, email, or result token as analytics event data. We remove query strings and result tokens from the page address we configure for analytics.

Google uses first-party cookies, including cookies whose names start with _ga, to distinguish browsers and visits. We set their lifetime to up to two years; visits can renew that period. Google says GA4 does not log or store individual IP addresses, though it uses an IP address to derive approximate location. Read Google’s data guidance.

For visitors in the EEA, UK, or Switzerland, we use the country supplied by Cloudflare to show a choice. Analytics storage starts denied, and Google Analytics loads only after you accept. Elsewhere, analytics is enabled by default. You can turn it off here at any time. Your choice is saved in this browser; turning it off clears our GA cookies but does not erase data already collected by Google.

Hosting and security

Cloudflare hosts this site and handles requests. Its hosting and security logs may include IP addresses, request addresses, timestamps, and browser information. These logs are separate from quiz results and help operate and protect the site. Retention follows the Cloudflare services and account settings in use. Cloudflare’s privacy policy explains its handling of data.

Messages to the team

If you use the contact form, we store your topic, message, optional reply email, and submission time for up to 365 days (about 12 months). We use them to handle your request and reply if you ask us to.

To limit spam, we turn your IP address into a salted SHA-256 hash. We keep that hash and recent submission times for one hour after the latest submission. We do not store your raw IP address in contact records or rate-limit records. Cloudflare may separately process it as described above.

Optional payments

If paid reports are enabled, Stripe Managed Payments handles the optional one-time purchase as merchant of record. We never see your card number. We store the Stripe checkout session ID and payment status with your result. Stripe’s privacy policy covers its payment processing.

Your choices

We do not sell personal data. We use the service providers named above to run the site. This site is not directed at children under 13.

To request deletion of a result, choose “Privacy request” on our contact form and include its share link so we can find it. You can also ask about a contact message you sent. Add a reply email if you want a response. Please do not send card details or other sensitive information.

Changes to this notice

We update this page when our data practices change. The date above tells you which version you’re reading. If something is unclear, ask the team.