Privacy Policy
Version of October 3, 2026
This is our current text. It will be updated after a legal review, and each update gets a new version date.
The short version
- We keep what we need to run your account and show your results. Nothing more.
- Analytics are off unless you say yes. Without your OK we only count page visits, with no cookie and no identifier.
- We never sell your data, and there are no ads or trackers from other companies.
- You can download all your data, or delete your account, from your account page.
1. Who is responsible
Insightful Traits LLC is the controller of your personal data. Contact: privacy@identityexplorer.com.
2. What we collect, and why
| Data | When | Why (legal basis) | Kept for |
|---|---|---|---|
| Email, password (stored only as a hash), language, display name, leaderboard visibility, sign-up and last sign-in dates, and when you accepted the terms and passed the age check | You create an account | To run your account (contract) | Until you delete your account (see "Deleting your account") |
| Quiz results: the quiz, your answers, your result, how long it took, retakes | You finish a quiz while signed in, or sign up within 30 minutes of finishing one | To show your results, history, badges and progress (contract) | Until you delete them or your account |
| Progress: when you finished quizzes (local date and hour), shares, badges, news and your profile | You use the dashboard | The same | The same |
| Crew invites: the invited person's email and your optional message | You invite someone | To send and track the invite (contract and legitimate interest) | Until the invite is removed or revoked, or you delete your account |
| Analytics events (listed in section 4) | Only if you allow analytics | To learn which quizzes and pages work (consent) | 400 days, then deleted. Daily totals with no personal data are kept |
| Anonymous page counts | Always | Basic traffic counting, with no cookie and no identifier (legitimate interest) | 400 days |
| Emails we send you, and whether they were delivered | Password resets, account notices, crew invites | To deliver them (contract) | Until you delete your account |
| Server logs | Every request | Security and fixing errors (legitimate interest) | Up to 7 days |
| Staff audit log | Our staff change something on your account, or you download or delete your data | Accountability (legitimate interest) | As long as we need it for accountability. Once you delete your account, it names you only by account number |
We do not collect your date of birth, keep your IP address in our databases, store your full browser user-agent string, take payment card details, or use advertising identifiers.
3. Who we share it with
We never sell your data and never share it for advertising. We use one service provider:
- Cloudflare, Inc. hosts the site, its databases and logs, and protects it from attacks. Data is processed in the United States and worldwide.
There are no analytics companies, ad networks or social media plugins on the site. When we start sending email through an email provider, we will name it here first.
For transfers outside the EU and the UK, we rely on Cloudflare's data processing agreement and the EU-US Data Privacy Framework.
We give data to authorities only when the law requires it.
4. Analytics events
If you allow analytics, we record these events:
- page viewed
- quiz page viewed
- quiz started
- question answered (the question's number, not your answer)
- quiz completed
- result viewed
- plans page viewed
- signed up
- signed in
- checkout started, succeeded or declined
- companion chosen
- dashboard tab viewed
- result shared (and how: share sheet or copy link)
Each event stores the time, the page address without anything after a ?, your language, the referring site (domain only), your device type (mobile, tablet, desktop or bot), your country, your site theme, the quiz and result, a random session id (ie_sid), and your account id if you are signed in.
Without your OK, we record only one anonymous row per page visit: the language, the page address, the referring domain, the device type and the country. It has no cookie, no session id, no account id and no IP address.
5. Cookies and similar storage
We use only our own cookies. The only one that needs your consent is the analytics cookie ie_sid, and it is never set without it. The Cookie Policy lists every cookie, and you can change your choice on Cookie settings.
6. Your rights
- Access and portability: "Download my data" on your account page gives you your account data in one file: your details, crew invites, quiz results, progress and analytics events.
- Deletion: "Delete account" on your account page.
- Correction: change your display name on your account page, or email us.
- Objection and restriction: email us.
- Withdrawing consent: Cookie settings. It takes effect immediately.
Email privacy@identityexplorer.com for anything else. We answer within 30 days. You can also complain to your data protection authority.
California. You have the right to know what we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell or share personal information (see Do not sell or share).
Brazil. Under the LGPD you have the right to confirm and access your data, correct it, delete it, port it, and withdraw consent. Use the same tools or email us.
7. Deleting your account: what happens
- Your quiz results and progress are deleted.
- Your analytics events are deleted.
- Crew invites you sent, password reset requests and emails we queued for you are deleted.
- Your email is replaced with a placeholder. An empty account record stays, so account numbers are never reused.
- Staff audit entries keep the action but never your email.
If any part of the deletion fails, nothing is deleted and we ask you to try again.
8. Children
Accounts are for people aged 13 or older. Sign-up asks for your birth month and year. We check them and do not keep them.
We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it. Parents can contact privacy@identityexplorer.com.
9. Security
Passwords are stored only as hashes, every connection uses HTTPS, and your sign-in cookie cannot be read by scripts on the page.
10. Changes to this policy
If we change this policy in a way that matters, we will tell account holders by email and put a notice on the site at least 30 days ahead. The version date is at the top of this page.
11. Contact
privacy@identityexplorer.com. Our company details are on the imprint.
