What we collect, why we collect it, who processes it on our behalf, and how long it is retained.
Last updated: 30 April 2026
psychprofile is a library of psychology tests. We run on static files plus a small set of API endpoints. We do not track you across the web. We do not run third-party advertising. We do not sell your data.
We only ask for your email when you choose to have your test results emailed to you. We only store a contact-form message or a review you submit if you actually submit one.
psychprofile ("we", "us") operates psych-profile.com. For privacy questions, use the contact form and write "privacy" in the subject or first line.
Email address. When you finish a test and ask us to email your results.
Contact form. Name, email, and message when you use the contact form.
Review submissions. First name, country, star rating, an optional short quote, and a yes/no opt-in for whether you would like your review featured on the test page. We never publish a review without that opt-in.
Demographic context sent with a results email. Gender, age band, and education level that you selected during the test. Used to understand who our tests reach, never to identify you.
Anonymous conversion events. When you request a results email, our API endpoint writes a single non-identifying log entry containing the test result category (for example, "Secure" or "Anxious-Preoccupied"), the demographic context above (gender, age band, education level), and a timestamp. This log entry does not contain your email address, your IP, your name, or your raw answers. It is used to understand how many people finish each test and which results are most common.
Technical data via Cloudflare. Your IP address and basic request metadata. We use the IP for rate limiting (stopping one person flooding an endpoint) and Cloudflare uses it for standard edge security and logging. The IP is never stored against your email or your results.
No third-party analytics. No advertising trackers. No cross-site tracking pixels.
Your test answers never reach our servers on non-clinical tests. The attachment-style test computes your result in your browser and sends us only the final scores plus your email if you requested one. Server-scored tests (including ADHD, the Autism Traits Profile, anxiety, depression, and any other test marked as server-scored) send raw answers so our server can compute the score correctly. In both cases, answers are not retained after the email is sent.
We use a small number of sub-processors to run the service. We do not sell your data to anyone.
Results emails. Once we hand the email to Resend, their retention applies to any delivery logs they keep. We do not retain a copy of the email or your address on our servers.
Contact form messages. Delivered to our inbox. We keep them for as long as we need to respond and for a reasonable follow-up window. You can ask us to delete a message at any time.
Review submissions. Delivered to our inbox for curation. If we publish your review on a test page, we keep it until you ask us to remove it. You can always write to us via the contact form to have a review removed.
Session data. While you are taking a test, your browser stores your answers and progress in sessionStorage (device-local, never sent to us) for up to 30 minutes so refreshes can restore your current step or completed result in the same tab. A separate device-local resume record is held in localStorage for up to 30 days so you can close the tab and pick up where you left off — also never sent to us. The resume record is cleared as soon as you reach your results, retake the test, or exit. The sessionStorage record is cleared when you retake or exit, and otherwise expires on its own after 30 minutes.
Live counter state. The "people taking the test right now" number is seeded in localStorage so it behaves consistently across refreshes. It lives on your device and is not sent to us.
Rate-limit state. Held in memory at the Cloudflare edge. It resets when the edge process restarts and is not persisted anywhere.
Anonymous conversion events. Written to Cloudflare's Pages Function logs. Retention is governed by Cloudflare's log retention for Pages Functions. We do not move these logs into any other system and we do not retain a separate copy.
We do not set tracking cookies. We use sessionStorage and localStorage to hold your in-progress test and the live-counter drift on your device. Those are not cookies and are never transmitted to us.
Depending on where you live, you have rights under laws like the EU GDPR, UK GDPR, California CCPA, and the Australian Privacy Act. We apply the following regardless of your location.
Use the contact form to exercise any of these. We respond within a reasonable timeframe, usually within a few business days.
psychprofile is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has submitted their email, a contact-form message, or a review, tell us and we will delete it.
Cloudflare and Resend operate globally. Your data may be processed in countries other than your own, including the United States and the European Union. Both providers publish details of their international transfer safeguards in their own privacy policies linked above.
The site is served over HTTPS with strict transport security. Our API endpoints are rate-limited per IP, same-origin enforced, and validate and escape inputs before emailing them. No server-side database. No persistent answer storage.
No system is perfect. If you find a security issue, let us know and we will fix it.
psychprofile is not a crisis service and not a medical provider. If you are in distress or at risk, please find a helpline in your country or contact an emergency service.
We will update this page when our practices change and bump the "last updated" date at the top. Material changes will also bump the date on our sitemap.