Privacy Policy
Last updated: September 2026
1. Core Invariant: Zero Quiz Answers on Server
Gender Atlas is engineered with zero-PII privacy. Your 24 quiz responses are evaluated in-memory or on-device and are never persisted to disk, database, or server logs.
2. Data Stored for Entitlements
To honor one-time purchase entitlements without requiring an account, we record payment transaction metadata (session_id, token, timestamp, Creem order ID) in Cloudflare D1. We explicitly do not collect or store email addresses (webhook payloads are stripped of email and stored as NULL). When you explicitly create a private link, an immutable report snapshot containing only aggregated scores and charts is stored in Cloudflare R2, accessible solely via an unguessable UUIDv4.
3. Zero Third-Party Trackers & Minimal Cookies
We operate with zero third-party tracking scripts, zero advertising beacons, and zero cross-site analytics. We set a single functional, first-party cookie (ga_token) solely to maintain your unlocked report state on your device.
4. GDPR & CCPA Compliance
Under GDPR and CCPA, you have the right to request deletion of any transaction records or hosted report snapshots. Contact us with your token or order receipt to trigger irreversible erasure within 48 hours.