Privacy Policy

This site is operated by the person named in the details at the end of this page, who decides what is collected here and why. In the language of data protection law that person is the controller of your data, and in the language of Russian law the operator of personal data.

If you have a question about this policy, or you want your data corrected or deleted, write to the support address in those details. We answer in the language of your message when we can, and in English otherwise.

Taking the test needs no account, no name and no email address. What we hold depends on how far you go.

While you are answering questions, your progress lives in your own browser and nowhere else. Nothing reaches our server until you finish the last item.

When you finish, we store the result: your answers on the one to five scale, the thirty facet sums calculated from them, the sex and age you gave if you gave them, how long the test took, the interface language and the date. This record is not connected to your name, and it carries no identifier of you unless you were signed in at the time.

The link to your result carries the profile inside the address itself. That is what makes the result work without an account, and it also means that anyone you send the link to can open the profile. Treat it as private.

If you create an account we store your email address, your password as a one way bcrypt hash that cannot be turned back into the password, the display name you choose, your language and your access level.

If you buy a written report we store the email address you type for delivery, the amount and currency, the identifier the payment service gives the transaction, the language of the purchase and the finished report itself. Card numbers never reach us: they are typed on the payment service page.

Sex and age are optional. We ask for them only to pick the comparison group for percentiles, because the same raw score sits at a different percentile for a 20 year old man and a 55 year old woman. Skip them and you are compared against the whole sample.

Every item below is something the site actually does. We do not collect anything for a purpose we cannot name.

• To score the test and show you the result, including the percentile comparison. This is the service you asked for.
• To keep your history in your account and let you return to an earlier result, if you have an account.
• To deliver the extended access you paid for: to open the closed sections, to generate the written analysis, and to send the access link to your email address.
• To protect the site from abuse: short lived counters that limit how often the same visitor can submit forms, sign in or start a test.
• To understand how many people reach the pages and where they lose their way, through the analytics described below.
• To meet accounting and tax duties for purchases, where the law requires it.

For visitors in the European Economic Area and the United Kingdom the legal bases are performance of a contract for scoring and delivery (Article 6(1)(b) GDPR), our legitimate interest in a working and unabused site (Article 6(1)(f)), consent where analytics requires it, and a legal obligation for purchase records (Article 6(1)(c)). For visitors in Russia the processing is carried out under Federal Law 152-FZ on the basis of your action of submitting the data.

Cookies set by the site itself:

Your browser also keeps a few things that never leave it on their own: the light or dark theme you chose, the answers you have given so far in an unfinished test, and the list of reports you have unlocked on this device so the site can show them to you again.

For visitor statistics we use Yandex Metrica, and Google Analytics when it is switched on. They set their own cookies and receive the address of the page you opened, the referring page, your approximate region from the network address, and the type of device and browser. We cut the part of the address that carries your result before it is sent, so the link to your profile never reaches them. Yandex Metrica is configured with session recording, which registers scrolling, clicks and movement on the page so we can see where a layout confuses people. It does not read what you type into fields.

You can refuse analytics with the privacy settings or a content blocker in your browser. The test, the result and the report work with analytics blocked.

• A session cookie for signed in users. Without it there is no way to stay signed in.
• A cookie that remembers the language you chose, so the site does not send you back to the wrong version.

We run no advertising networks and no cross site trackers, and we do not sell audience data.

We work with a small number of services, each of which sees only the part it needs to do its job.

• The payment service you pay through receives your email address, the amount and the description of the purchase. It processes the card itself and is a separate controller of that data under its own policy.
• The AI provider that writes the report receives the profile snapshot described in the next section.
• The mail service that sends the access letter receives your email address and the text of the letter.
• The analytics services receive the statistics described above.
• The hosting provider stores the database and the server logs in which the site runs.

We do not sell your answers, we do not trade them, and we never publish an individual result. We hand data to authorities only on a lawful demand addressed to us.

The written report is generated by a language model, so it is worth being exact about what leaves our server. The model receives the percentile for each of the five domains and each of the thirty facets, the sex and age if you gave them, the name of the comparison group, and the questions the report has to answer.

It does not receive your name, your email address, your account, your payment details or your item by item answers. The model has no way to identify you from what it is given.

The provider is chosen from the list we have configured and its servers may sit outside your country. The generated text comes back to us and is stored with the purchase, so you can open the report again later from the same access link.

Result records are kept for as long as our resources allow. They are the reason a result link still opens months later, and in aggregate they are how we watch that the norms behave. We promise no fixed term for a free result, and we delete yours if you ask.

Account data is kept until you delete the account. Deleting the account releases the results that were attached to it, which then continue as records with no owner.

For purchased access we guarantee two months from the day of payment: through that time it opens from your access link, barring something happening to the site itself. After that we keep it for as long as we can, but the term is at our discretion and depends on how much storage we have. Save or download what you bought while it is open, because that copy no longer depends on us. Records of the payment itself are kept for as long as accounting and tax rules require.

The counters that limit request rates hold a network address for minutes and then expire on their own. The network address is never written to the database.

Analytics data is kept by Yandex and Google under their own retention rules, which we do not control.

You can ask us to delete your account together with the data attached to it, and we will do it.

Write to the support address at the end of this page. If your result was taken without an account, include the result link in your message: an anonymous record has nothing else in it that would let us find yours, and we will not guess.

We answer within thirty days. We may ask you to confirm control of the email address of an account before we act on a request about it, because acting for someone who merely claims to be you is the worse failure.

The site runs over an encrypted connection. Passwords are stored only as bcrypt hashes. Provider keys and payment credentials are encrypted at rest and are never shown back in the admin area. Administrative pages are behind a role check on every request.

Access links and report links are long random values rather than guessable numbers, which is what keeps a result private without an account. The other side of that design is that the link is the key: anyone who has it can open what it points to, so do not post it publicly.

The test is not aimed at children. The comparison groups begin at age 16, and we ask that people under 16 use the site only with the involvement of a parent or guardian. If you believe a child has sent us data, write to us and we will delete it.

The date and version of the current text are shown at the top of this page. When we change something that matters, we raise the version and update the date, and we describe the change on the site rather than replacing the text quietly.

This policy is published in every language the site speaks. The translations are provided for convenience, and where a translation and the English text disagree, the English text is the one that applies.