Specific by design
Privacy
What the test records, how result links work, and what deletion actually removes.
What is stored
When you submit, we store your answers, per-item timings, total duration, consent version and time, and IP address. Your IP address is nulled after 90 days by default; the answer vector is retained. Removing the IP does not make a distinctive political response anonymous.
2026-08-15.1Unlisted results and secret links
Results have unlisted capability URLs. Anyone who has the full view link can view the result, so treat it as private information. The view key is never stored in plain text; only its hash is stored.
The delete link contains a separate secret. Using it performs a hard delete of the response rather than hiding or soft-deleting it. Keep that link if you may want to delete the result.
Aggregates and deletion
Aggregate data is designed to refresh periodically, so a deleted row would disappear at the next refresh rather than instantly. Aggregates are not yet published, and no refresh cadence is currently live.
Accounts and analytics
There are no user accounts. Quiz pages do not load third-party analytics; the application sends your submission to the first-party API when you finish.