Introduction
MyIQTested ("we", "us", "our") is committed to protecting your privacy. This policy explains how we handle information when you use our website and IQ test.
What We Collect
IQ Test Data
Your test answers are scored entirely in your browser. We do not send your individual question responses to any server. Your IQ score and domain breakdown are computed locally using JavaScript and are never stored in our database unless you explicitly choose to save your results.
Analytics Data
We collect anonymous usage data to improve our service, including:
- Page views and navigation patterns
- Test completion events (not individual answers)
- Browser type and screen size
- Referring website
- Country (derived from IP, which is not stored)
Cookies
We use the following cookies:
- smp_vid — Anonymous visitor identifier (2-year expiry). Used for analytics and experiment assignment. Does not contain personal information.
- smp_exp — Experiment variant assignments (30-day expiry). Used to ensure consistent A/B test experiences.
- sb-* (Supabase auth) — Set only after you sign in to /account via a magic-link. They keep you signed in and are cleared when you sign out.
When You Buy a Certificate
If you purchase a Standard or Complete certificate, we collect and store:
- The name you want printed on the certificate.
- Your email address — used to deliver the certificate and any future receipts.
- The IQ score and domain scores from the test you just took — these are what the certificate verifies.
- The fact that you paid, and how much — but never your card number or expiry. Card details are handled directly by Stripe (see below) and never touch our servers.
Your purchase record is linked to your email address. The first time you sign in via the magic-link in your receipt email, the purchase is associated with your account so you can access it later.
How We Use Your Data
Anonymous analytics data is used to understand how people interact with the test, identify usability issues, and run A/B tests to improve the experience. We do not sell, rent, or share your data with third parties for marketing purposes.
Third-Party Services
We use the following third-party services:
- Stripe (payments) — When you buy a certificate, Stripe handles the card transaction directly. Your card details are entered into a Stripe-hosted form embedded on our checkout page; the card number never touches our servers. Stripe receives your email and name to attach to the payment record. See Stripe's privacy policy.
- Supabase (accounts + database) — When you sign in via a magic-link, Supabase manages the session and stores your email address against an account record. The certificate record, your purchases, and any subscription state live in our Supabase Postgres database. See Supabase's privacy policy.
- SendGrid (email) — Used to send the receipt + certificate access email after a purchase, and the magic-link sign-in email when you visit /account. SendGrid receives your email address and the email content. See SendGrid (Twilio)'s privacy policy.
- Google Analytics — For website traffic analysis. IP addresses are anonymized.
- Vercel — For hosting and content delivery.
Data Retention
- Anonymous analytics — retained for up to 24 months.
- Test responses — never sent to our servers; nothing to retain or delete.
- Certificate + purchase records — retained while your account is active. You can request deletion at any time (see Your Rights below). After deletion, Stripe retains its own payment record per its legal obligations.
- Email logs (SendGrid) — delivery + open metadata is retained for up to 30 days for diagnostic purposes.
Your Rights
You have the right to:
- Clear your cookies at any time to remove your visitor identifier
- Use the test in private/incognito mode for maximum privacy
- Request deletion of your account, certificate, and purchase records — email us via the contact form
- Request a copy of all data we hold about you
- Opt out of analytics tracking by using a browser extension like uBlock Origin
Children's Privacy
Our service is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this policy from time to time. Significant changes will be noted on this page with an updated "Last updated" date.
Contact
If you have questions about this privacy policy or want to exercise your data rights, please contact us.