Privacy Policy
Last updated: October 2026
1. Core Invariant: Zero Quiz Answers on Server
Gender Atlas is engineered with zero-PII privacy. Your 24 quiz responses are evaluated directly in your browser or temporarily transmitted to edge nodes for instant scoring and immediately discarded; they are never persisted to disk, database, or server logs.
2. Local Drafts & Clear Controls
Your draft responses are stored only in your browser’s local storage, allowing you to resume if refreshed or interrupted. We never upload drafts to any server. You can clear your draft at any time via the privacy menu, or instantly erase all local data using Quick Exit (double-press Esc).
3. Data Stored for Entitlements
To honor one-time purchase entitlements without requiring an account, we record payment transaction metadata (session_id, token, timestamp, Creem order ID) in Cloudflare D1. We explicitly do not collect or store email addresses (webhook payloads are stripped of email and will not be retained). When you explicitly create a private link, an immutable report snapshot containing only aggregated scores and charts is stored in Cloudflare R2, accessible solely via an unguessable UUIDv4.
4. Anonymous Reviews
If you choose to submit a reflection review after unlocking your report, we collect only: your 1–5 star rating, optional short comment, interface language, and timestamp. Reviews are mapped to an irreversible hash of your purchase token to prevent spam, containing zero names, email addresses, or quiz answers. Published reviews are displayed anonymously on our pricing page. If you wish to delete your review, you can contact support@genderatlas.tech at any time.
5. Zero Third-Party Trackers & Minimal Cookies
We operate with zero third-party tracking scripts, zero advertising beacons, and zero cross-site analytics. We set a single functional, first-party cookie (ga_token) solely to maintain your unlocked report state on your device.
6. GDPR & CCPA Compliance
Under GDPR and CCPA, you have the right to request deletion of any transaction records or hosted report snapshots. Contact us with your token or order receipt; we will delete records as promptly as permitted under applicable law.