Privacy

Your results are saved inside your own browser, under names beginning cd:v1:. That happens on every test, signed in or not, and it is the copy the page reads.

Clearing your browser data removes them. Every test also has a button in its settings panel that clears its own history straight away.

No test asks who you are. There is no sign-in wall anywhere on the site, and there will not be one.

An account exists for one reason. Local storage cannot follow you to a new phone, and an account can.

We store four things, and this is the whole list.

• Your email address, because that is how you sign in.
• Your results: which test, what you scored, the settings you used and when you took it.
• Your name and picture, only if you signed in with Google, which is what Google hands over.
• An age band and sex, only if you fill them in. Both are optional and both can be cleared.

There is no password to store, so there is no password to lose. We email you a six-digit code instead, and it expires in ten minutes.

Signing in sets one cookie. It holds a random token and nothing about you, and it is the only cookie this site sets itself.

Delete the account from your dashboard and every result goes with it, along with your email address. It is a real deletion rather than a flag on a row we keep. The copy in your own browser is left alone, because that copy is yours.

We do not sell anything to anyone, and nothing here is shared with a third party. There is no marketing email and no newsletter. The site sends two messages and no others. One is the sign-in code you asked for. The other is a single welcome, sent once, when the account is first made.

The welcome is plain text. It says what the account does, points at the dashboard and the methodology page, and gives you a person to reply to. It carries no score of yours. Nothing follows it, and there is nothing to unsubscribe from, because there is no list.

Your dashboard can publish a page showing your best on each test. It is off until you turn it on, and nothing is public before that.

The page lives at a long random address that nobody can guess or work through in order. It carries your scores, how many runs you have taken, and a name only if you type one. Your email is never on it.

It is live rather than a snapshot. Whoever holds the link sees your current numbers, not the ones you had on the day you shared it. That is the point of it, and it is the part worth understanding before you send it to anybody.

Turn it off and the address stops working immediately. Turning it back on creates a different address, so a link you withdrew stays dead. Search engines are told not to index these pages.

The site runs Google Analytics 4. It sets cookies, and it is the only third-party script on the site.

It records which pages you view, roughly where you are from your IP address, and what browser and device you are on. It also records six things you do here.

• Starting a test.
• Finishing one.
• Pressing Try again.
• Changing a setting.
• Sharing a score card.
• Following a link from the Try next rail.

What it never receives is your score. Finishing a test tells us that the test was finished, not what number it gave you. Google Analytics is never told what you scored, whether or not you have an account.

There is no cookie banner yet. That is a decision rather than an oversight, and it is on the list to revisit before this site has real traffic. If you would rather not be counted, any content blocker stops the script, and nothing on the site needs it to work.

No advertising runs on the site. When it does, this page will name the network and describe what it sets, before the first advert appears.

A hosting provider serves these pages as plain files. Like any host, it keeps ordinary server logs, including IP addresses, for a short period. Those exist for security and to stop abuse. We do not use them to build profiles.

Accounts add a database, held by a managed provider, and an email provider that delivers the sign-in code and the welcome. Both see the address you signed in with. Neither is sent your scores, and the email provider is used for those two messages and nothing else.

We eventually intend to pool anonymous scores, so we can publish real figures of our own. The methodology page explains why. That is not running yet.

When it starts, we will announce it here. It will carry nothing that could tie a score back to a person. And it will be opt-out, with the control on the test page itself.