Privacy Policy

Sociotype.com is operated by SOCIOTYPE, a sole proprietorship in the United States. Questions: [email protected].

What we collect

Your email, if you make an account. We email you a sign-in link rather than storing a password.

Your assessment answers and results, including anything you enter by hand. Take a test without an account and those results are stored under a random token with no name or email attached, so you can claim them later.

A purchase record, if you buy a report: amount, date, Stripe identifier, and your card's brand and last four digits. Your full card number never reaches us. We also store a non-reversible fingerprint Stripe derives from your card, which lets us spot refund abuse across accounts.

We don't store IP addresses in our logs or sessions, and we don't ask for your name, address, or phone number.

Cookies and third parties

Essential cookies keep you signed in. On the free parts of the site we run Google Analytics and Google AdSense, which set their own cookies and use data under Google's policies. In the EEA, UK, and Switzerland you'll see a consent prompt for advertising, and your choice governs what ads run. Analytics runs on all pages to help us understand how the site is used.

No advertising appears on your profile, on any report you've bought, or in the purchase flow.

We also use Stripe for payments, Resend for email, and Cloudflare as a CDN. Our server is in Oregon, USA, so if you're elsewhere your data is stored in the US.

We don't sell your data or share it beyond those providers, unless legally required or to investigate abuse.

How long we keep it

Your account and results stay while your account does. Unclaimed anonymous results are deleted after 12 months. Purchase records are kept 7 years for tax purposes, reduced to amount, date, and transaction reference.

Your choices

Email [email protected] to see what we hold, correct it, or delete it. We reply within 7 days. Deleting your account revokes access to purchased reports, so download the PDFs first.

Depending where you live you may have further rights under the GDPR, CCPA, or similar laws — ask and we'll help.

Children

Not intended for under-16s. Email us if you think we hold a child's data and we'll delete it.

Security

Traffic is encrypted, sign-in links are hashed and expire in 30 minutes, and card details never touch our servers. We hold as little as we can. Found a security problem? Email us — we won't pursue good-faith reports.

Changes

Material changes bump the version and date above.