Privacy Notice

This notice describes Group Personality Quiz (“the app”), a personal project operated by Raul Plascencia. It applies to the website and the API behind it.

Questions, requests, or complaints: privacy@raulplascencia.dev.

All of it comes from you, or is produced by the quiz you choose to take.

Account

Your name, email address, and password. The password is stored only as a cryptographic hash. We never hold the password itself and cannot recover it.

Sessions

When you sign in we store a session record with your IP address and browser user-agent, so a session can be recognized and expired. Sessions last 7 days.

Group membership

The display name you choose for each group, your role in it, and when you joined. Your display name is per-group and does not have to be your real name.

Quiz answers

Your response to each statement, on the 1–5 scale, kept against the quiz version you answered.

Results

The trait scores and the archetype computed from your answers. All scoring happens on our server; the formulas are never sent to your browser.

Invite links

Links you generate for a group, and who generated them. An invite link is a capability: anyone holding it can see the group name and join.

Usage analytics

Which pages you visit and which features you use, and details of any error you hit. The next section covers exactly what is sent.

We use PostHog, a product analytics service, to see which parts of the app get used and to find errors. It runs in your browser, signed in or not, unless you turn it off.

If you visit from the EU, the EEA, the UK, or Switzerland, we ask first. Until you allow it, PostHog is not loaded at all: nothing is sent to it, not even that you opened a page. You can switch analytics on or off at any time, wherever you are: under Analytics in your account settings, or right here for this browser.

Pages and clicks

The address of each page you open, and which buttons and links you click. We record which element you clicked, never the text on it, so your answers and people’s names are not included. Invite, password-reset, email-confirmation, and unsubscribe links are removed from every address before anything is sent.

Named actions

A short list: creating an account, signing in, creating or joining a group, copying an invite link, finishing the quiz (with how many questions it had, not what you answered), sharing or downloading a card (with its format), saving your settings or a group’s, changing your password, leaving or deleting a group, and asking to delete your account.

Who you are

Once you sign in, these events are linked to your account ID, your name, and your email address. Signing out disconnects the browser from your account.

Errors

When something breaks: the error message, where in our code it happened, the page you were on, and your browser and device type.

Your device

The browser, operating system, screen size, and the site that linked you here, as every browser reports them. PostHog does not keep your IP address.

Analytics never receives your quiz answers, your trait scores or results, what you type into any form, or your password. There are no screen recordings. It is used only to understand and improve the app, never for advertising, and it is not shared with anyone else.

With analytics off, or with PostHog blocked by your browser or a content blocker, none of this is sent, and the app works exactly the same.

No advertising identifiers, no tracking pixels, no advertising or social-media scripts, and no profiling beyond the quiz result you asked us to compute. We do not buy or sell personal data, and we do not use your answers to train anything.

The fonts are served from our own domain rather than a font CDN. The only third party your browser contacts is PostHog, and only while analytics is on.

Session

Set when you sign in. It is HTTP-only, so page scripts cannot read it, and it expires after 7 days or when you sign out. It exists solely to keep you signed in.

Analytics

PostHog’s cookie, with a copy in your browser’s local storage, set only while analytics is on. It holds a random ID for this browser so repeat visits count as the same visitor. It lasts up to a year; signing out replaces it with a new one, and turning analytics off deletes it.

Analytics region

Records only whether your region is one where we ask before running analytics, worked out from the country your connection comes from. It lasts a day.

Your analytics choice

Kept in your browser’s local storage, so we don’t ask again on every page. It never leaves your browser.

There are no advertising cookies.

Your individual answers are never shown to anyone. The people in your group see the scores your answers produce, never the answers themselves.

Inside a group

Members see each other’s display name, trait scores, archetype, and the comparisons the app draws between them. That is the point of the product.

Between groups

Nothing carries across. Results belong to a membership, not to your account, so the same person can hold different results in different groups.

Outside a group

Nothing. Groups are not publicly discoverable and are not indexed. A request for a group you are not in is refused.

With an invite link

Someone holding a link sees only the group’s name, description, and how many people are in it, never the member list or any result.

Five kinds, and no others. We do not send newsletters or product announcements. The weekly digest is the only one you can turn on or off, and it is off unless you turn it on.

Confirm your email

Once, when you sign up. Confirming is optional (nothing in the app is gated on it), but an unconfirmed address cannot be used to recover your account.

Password reset

Only when someone requests one for your address. The link lasts an hour and works once.

Bug reports

When you send one, it reaches us with your account email attached so we can reply, along with your browser and the page you came from. The form says so before you send it.

Account deletion

Once, when you ask us to delete your account. Requesting it signs you out and blocks sign-in, so this message is the only way left to reach you: it carries the date your data is erased and how to stop it before then.

Weekly digest

Only if you turn it on in Settings, and only to a confirmed address. At most once a week, and only in a week when something changed in one of your groups: who joined, left or finished, and how the group’s cards and callouts moved. It names the people in your groups, never their answers. Every one carries a link that turns it off without signing in.

The website is hosted by Vercel, the API and database by Railway, email is sent through Resend, and analytics are processed by PostHog, all in the United States. They process data on our behalf in order to run the service. Nobody else receives your data, and none of them receive your quiz answers except Railway, which stores them.

Account data

Until you delete your account. Deleting it erases everything we store 30 days later; ask us and we will do it by hand instead.

Analytics

Kept by PostHog for the retention period of our plan. Deleting your account does not erase it automatically: email us and we will delete everything PostHog holds about you.

Your preferences

Your theme and your default name are stored with your account and go when it does.

Deleted groups

Deleting a group hides it immediately and permanently erases it, along with every member’s answers and results for that group, after 30 days.

Sessions

Expire after 7 days, or immediately when you sign out.

After you leave a group

Your answers and result stay attached to that membership but are excluded from the group’s totals and comparisons. Ask us if you want them erased.

From inside the app you can change your account name, change the name you use inside any group you belong to, leave a group, and delete a group you own. The two names are separate on purpose: changing your account name does not rename you in groups you have already joined.

You can delete your account yourself, from your account settings. We ask for your password first. Deleting it signs you out everywhere, ends your memberships, and hides every group you are the only member of; 30 days later your account, your answers and your results are erased for good, and until then your email address stays taken. If you own a group other people are still in, hand it to another member first. We will not delete a group out from under the people using it. If you change your mind inside the 30 days, email privacy@raulplascencia.dev and we will stop it.

You can turn analytics off at any time under Analytics in your account settings or, with or without an account, from the Analytics section above. Turning it off stops anything more being sent and deletes PostHog’s cookie from your browser. Blocking PostHog in your browser or with a content blocker does the same; nothing in the app depends on it.

Depending on where you live you may have rights to access, correct, export, or erase your data, including your analytics. Use the same address and we will respond.

The app is not intended for anyone under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Traffic is encrypted in transit, passwords are hashed, session cookies are HTTP-only, and every request for group data is checked against your membership on the server. No system is perfectly secure, and we do not claim otherwise.

If this notice changes materially we will update the date at the top and, where the change affects how your data is used, tell you in the app before it takes effect.

See also the Terms of Service.