Without an account
An assessment is stored with the answers given, whatever demographics were offered for the comparison, and nothing else. It is not attached to a person, and it is kept for 24 hours after your last answer, so you can finish, see your result and decide whether to keep it. Unless you keep it, by logging in or creating an account, it is then deleted automatically, answers and all. Your browser keeps a token proving it was the one that took the assessment, which is what allows you to claim it later; that token is the only link between you and the answers, and it never leaves your browser except to claim them.
We do not ask for your name, and the only IP-derived data on this site is in the reference samples we compare against, not in what we store about you. If you allow analytics, Google sees your IP address to count your visit; see cookies.
With an account
We store your email address and the assessments you have claimed. If you sign in with Google, we store the identifier Google gives us for your account rather than a password.
If you fill in the “about you” fields when taking an inventory, your answers are also remembered on the account so the next one arrives filled in. They are a convenience, not a requirement: you can change or clear them on your account at any time, and clearing one removes it.
Results are visible to you and to nobody else. They are not sold, shared, or used for anything but showing you your own scores.
Taking a copy, and deleting it
From your account you can download everything we hold in one file — your email, every assessment, and every individual answer with the item it belongs to, not just the scores. No request, no waiting.
You can also delete the account, and that happens immediately. Your email address and your login are removed, and your results go with them — every assessment, and every individual answer inside it. There is no grace period and no copy kept aside.
What remains is an empty record that an account existed here and was deleted. It holds nothing that identifies you; it is there so that nothing referring to the account is left pointing at a gap.
This cannot be undone, by you or by us — once the answers are gone there is nothing to restore. If you want to keep your results, download them first; the account page will give you everything in one file.
Who holds it, and on what basis
The operator of this site is the data controller for everything described here. Nothing is processed on anyone else's behalf.
An assessment taken without an account is processed on the basis of legitimate interest — you asked for a score, and producing it requires storing the answers. An account, and the email we send to confirm it, rest on the contract you enter into by creating one. The demographics you offer are consent: every field is optional, leaving them blank compares you with everyone, and clearing them later removes them. Analytics is consent too: nothing is sent to Google until you allow it, and you can withdraw it under cookies.
The personality inventories collect no special-category data. Two things on this site are, and each is held only with your explicit consent — see special-category data below.
Special-category data
Article 9 of the GDPR sets apart data that reveals, among other things, religious or philosophical beliefs, political opinions, and a person's sex life. Two things here can:
- Your answers to the MFQ-2, the Moral Foundations Questionnaire. Its statements ask about religion-adjacent ideas of purity, chastity, country, authority and fairness, so the answers can reveal beliefs, political opinions and attitudes to sex. It does not start until you have consented to that. Signed in, your consent is saved on your account so you are not asked at every start, and you can withdraw it in your account settings.
- A left–right placement, if you choose to give one on the questionnaire's first page. It is a political opinion, covered by the consent you give before starting, and kept with that result. Keeping it on your account as well, to fill in future questionnaires, is a separate choice with its own consent box: offered once the result is yours, or made in your account settings.
The basis for both is your explicit consent (Article 9(2)(a)). They are used for one thing: scoring the questionnaire and showing your result against the published reference data. They are not shared, sold, used for advertising, or used to decide anything about you.
Withdrawing consent is as quick as giving it. Every result has a Delete this result button, which removes it and every answer in it at once — for a result taken without an account, from the browser that took it. In your account settings, unticking the consent withdraws it and deletes every result that needed it, after a warning, and setting your placement to “Not set” deletes it. Deleting your account removes all of it.
Your rights
You can see and take a copy of everything we hold from your account, as a file, without asking and without waiting. You can delete it from the same page, which happens immediately. Between them those cover access, portability and erasure without a request having to be made at all.
For the rest — correcting something, objecting to processing, restricting it, or asking a question about any of this — support@inbound.konnectome.ai. You can also complain to your national data protection authority, and you do not have to raise it with us first.
Where it is held
In the European Union. The server and the database are both in Frankfurt, and email is handled within the EU. One sub-processor is outside it: Postmark, in the United States, which aggregates the reports mail servers send us about our own sending — those describe our infrastructure, not you, and carry no account data and no message content. If you allow analytics, Google Analytics is run by Google Ireland, and Google may process that data in the United States under the EU–US Data Privacy Framework. Records of how the site is running — which kinds of page are slow or failing, and the server's own load — go to Grafana Cloud, in the EU, with every id, token and email address taken out first. Errors — what failed, and on which kind of page — go to Sentry, in the EU, with the same ids, tokens and email addresses taken out. Errors in this site's own scripts are reported to Sentry directly from your browser, so Sentry sees your IP address and which browser you use; it is set not to store the IP address.
Cookies
This site sets a session cookie when you sign in and, for
administrators, a second one scoped to the admin panel. Both are
strictly necessary. So is analytics_consent, which
remembers your answer to the question about analytics for a year so
it is not asked on every page.
Google Analytics runs only if you allow it, and sets
_ga and _ga_… to tell one visit from
the next. It is sent which pages are visited, with any result or
assessment number in the address blanked out and nothing after a
?; the page title; the site you came from; and your
device, browser and rough location, which Google works out from your
IP address and then discards. It is never sent your answers, scores,
demographics, placement or email address, and its advertising
features and Google signals are off. The basis is your consent, and
Google keeps it for fourteen months.
There is no advertising network, and no other third-party script on any page.
Age
An account requires you to be at least 16. The inventories themselves are normed on adult samples, and a score from a child is not meaningfully comparable to the reference groups whatever the arithmetic says.
How long
An account and its results are kept until you delete them. An assessment taken without an account is deleted automatically 24 hours after its last answer unless you keep it, and sooner if you delete it yourself with the Delete this result button.
Getting in touch
About anything here — a copy of your data, a question about what is held, or anything this page does not answer — support@inbound.konnectome.ai.
Language
This notice is written in English, and the English version is the one that applies. Where the site offers it in another language, the translation is there for convenience; if it differs from the English, the English governs. Ask, and we will explain any part of it in plain terms.
Changes to this notice
This notice is part of the site's source code and changes with it, so its history is the commit history. Material changes to who processes your data are announced on the sub-processors page. If a change is one you object to, deleting your account is immediate and takes your results with it.
We email you to confirm your address, to welcome you once, and to reset a password if you ask. There is no mailing list and nothing else is sent.
If you write to us, that message is stored so it can be read and answered — the address you sent from, the subject and the text, and our replies. A conversation is deleted 24 months after its last message, whether or not you have an account; ask, and we delete it sooner. Deleting your account does not delete it, because a conversation is not held in your account — you need not have one to write to us. Your account's data export includes every conversation with the address on your account.