Privacy

What is stored, and where

• Your answers, progress, result history, and stored-result codes are saved in this browser, in local storage.
• Completed scores, including screening scores, are sent to a Cloudflare Worker and stored in Cloudflare D1. The row holds a random code, the test and scoring revision, score sums, a UTC day, and an expiry date.
• There is no account, email address, name, login, or tracking cookie. The result database does not store your IP address, user agent, location, or raw answers.
• Scores can still be sensitive personal information. Removing your name does not make a screening score harmless or guarantee anonymity.

Retention and deletion

A stored copy expires at midnight UTC, no later than 90 days after it was saved. Expired copies cannot be opened. A daily job deletes expired rows in bounded batches, so physical deletion can follow later if there is a backlog.

Use Delete stored copy on the result page to remove the database row sooner. Anyone with the stored link can read or delete that copy. Cloudflare D1 recovery copies can retain deleted data for the platform recovery period, currently up to seven days on the free plan.

Clearing browser data removes your local answers and history, but does not delete the server copy. Keep the stored link if you want to delete it later. Without a link or local copy, we cannot recover a result by identity because we do not collect one.

Sharing a result

A local share link carries the answers or scores after the # symbol. The server does not receive that fragment. These links and downloaded files still work without a database.

A stored link carries only a random code in the fragment. Opening it makes a separate API request that sends the code to the server to retrieve the scores. API paths can appear in host request logs. We do not log result bodies, scores, or answers in application code.

Treat every result link like a private key. Anyone who receives it can read the result. There is no public result directory or search.

Counts and service operation

The site owner can count stored completions and score distributions. These are unverified self-reports, not unique people, research samples, clinical records, or population norms. There is no advertising or cross-site tracking.

Cloudflare receives network information, including an IP address, to serve and protect the site. That infrastructure data is separate from the result database. We cannot promise that hosting infrastructure records no identifying information.