Privacy policy
Who is responsible for your data
IQTested · Portugal · info@iqtested.app
What we store
- Your answers and score. Each test stores the option you picked for each question, the time you started and finished, and the computed result.
- How long each question took you. The server records the time between showing you a question and receiving your answer.
- Your email address, if you sign up. It identifies your account and is where your sign-in links are sent.
- Your age band and sex, if you give them on the personality questionnaire. They pick which group of people you are compared with, and both are optional.
- A session cookie. An opaque random token. Only its SHA-256 hash is stored on our side, so a database read never yields a usable credential.
Response times
We record how long each question takes you. The server measures the gap between showing you a question and receiving your answer. On the two reasoning tests, an answer that arrives in under three seconds is treated as missing rather than wrong. If most answers come in that fast, we can't give you a fair result, so we tell you that rather than guess. The personality questionnaire is timed the same way but is never refused for being fast.
The timings are kept with the test after it ends, so that we can later re-check how hard each question is against real answers. There is no separate expiry: they last as long as the sitting does. If the sitting belongs to an account, they are in your data export and they are erased when you delete the account.
Sittings we do not score
When a sitting cannot produce an honest result we write no result for it, and none appears in your history. What is kept is the sitting itself: your answers, their timings, and the record of which items you were shown. That is deliberate — it is what lets an immediate retake give you a different set of items rather than the same ones again.
If you were signed in when you sat it, an unscored sitting is exported and deleted with everything else. A sitting taken without an account is attached to no one, so there is no account for it to appear in or be removed from.
Nothing to buy
iqtested is a free beta. Nothing is sold here, so we never ask for or hold bank details of any kind.
What we do not do
We do not sell personal data to third parties, and we do not run advertising or advertising trackers anywhere on the site.
Analytics
If you choose Accept on the analytics card, we use Google Analytics 4 to see which pages and puzzles people use, so we can make them better. Until you choose, or if you choose Decline, Google Analytics sets no cookies and stores nothing on your device; Google receives only basic, cookieless signals that a page was loaded or that one of the events below happened. We use Google Consent Mode, and advertising signals are always off.
What is sent: the pages you visit, and simple events: that a test was started, reached a check-in or finished (and whether it could be scored), that a result page was viewed, that you began signing up or signed in, that a message was sent from the contact form (its topic only, never the message or your address), and your Daily 5 (how many of the five you got right) and lesson activity. What is never sent: your answers, your test scores or puzzle level, your email address or anything from your account.
Google acts as our processor for this. Google says Google Analytics 4 does not log or store IP addresses. You can change your mind at any time with Cookie settings at the bottom of every page.
Messages you send us
When you use the form on the contact page, we store your email address, the topic, any report reference, your message, and a one-way hash of your IP address that we use only to limit abuse. We use them to read and reply to you. The message is delivered to our inbox through Resend, the same service that sends sign-in emails.
We keep messages for 12 months, then delete them. Deleting your account also deletes the messages sent from it or from its email address. The form itself sets no cookies; if you chose Accept on the analytics card, the analytics cookie described below records that a message was sent.
Cookies
iqt_test_matrix— points at your current Matrix test sitting, so the test and your result page know which one is yours. It lasts seven days. A test you leave partway through is discarded, not kept.iqt_test_reasoning— points at your current Six-skill reasoning sitting, so the test and your result page know which one is yours. It lasts seven days. A test you leave partway through is discarded, not kept.iqt_test_personality— points at your current Personality profile sitting, so the test and your result page know which one is yours. It lasts seven days. A test you leave partway through is discarded, not kept.iqt_session— keeps you signed in to your account.iqt_signin— only while a sign-in is pending: ties the 6-digit code in your sign-in email to this device (it holds a reference to the request, never the code itself). It lasts fifteen minutes and is deleted when you sign in with the code.iqt_consent— remembers whether you chose Accept or Decline on the analytics card. It lasts twelve months.iqt_ev— only after you choose Accept: carries one analytics event (for example "test finished" or "message sent") to the next page, then is deleted. It lasts at most five minutes._gaand_ga_*— set by Google Analytics, only after you choose Accept. They let Google count returning visits without knowing who you are.
The sitting, session and analytics-choice cookies are strictly necessary. The last two exist only if you accept analytics.
Downloading your data
You can export everything we hold about you, as one JSON file, from the account tab. Because that one file is your whole record, we confirm the request with the address on your account: ask for the export, and a single-use link is sent there. The link opens the file once and stops working fifteen minutes after it is sent. Signing in needs nothing but that address either, so this is the one place we ask twice.
Deleting your data
You can permanently delete your account, results and answers from the account tab. Deletion is immediate and cascades to every table. Export everything first if you want a copy.
How long we keep it
Your account, results and answers are kept for as long as you have an account, so your history is there when you come back. Delete the account and they go with it, straight away.
Where data lives, and who helps us
The site runs on Cloudflare, and data is stored in Cloudflare D1. The database for this deployment is provisioned in the Western Europe region.
Sign-in emails are sent through Resend, an email delivery service that acts as our processor. It receives your email address and the message we send you, and nothing else.
Your rights
You can see, export and delete your data yourself from the account tab. For anything else about your data, write to info@iqtested.app.