Privacy
You do not need an account
Every instrument, every result, the couple comparison and every page of the matrix work signed out. You can save a result and share it without an account, and delete it again with nothing but its link. An account exists for two things: finding your own results from a new device, and carrying something you have paid for across devices.
By default, your answers stay on your device
The questions, the matrices and the whole scoring engine ship with the page and run in your browser. Taking an instrument involves no server at all, and there is no request in which an answer could leak. Your answers sit in this browser's local storage and nowhere else unless you choose otherwise.
If you sign in, results are saved to your account
That is the whole of what signing in changes. From then on a result you finish is stored and listed on your account page, and anything already sitting in your browser moves across and is cleared from the browser at the same time. What is stored is: which option you picked for each question, the positions those answers produced, which instrument it was, the stage bracket if you gave one, and the date. There is no separate tickbox for this, because it is what an account is for — and it is why you never have to make one.
An account is never the price of using the site
Every instrument, every result, the couple comparison and every page of the matrix work signed out and are complete. The only thing an account buys is durability — your results on another device, a link you can send, and anything you have paid for following you around. Signed out, there is genuinely nothing of yours on our servers to ask about.
The link is the key
A saved result lives at a long random address. Anyone holding that link can open it, which is the point of being able to share it, so treat it like any link you would not want forwarded. These pages are never indexed by search engines, and none of them reveals whose account a result belongs to. Signed out you have no such link, because you have no stored result — the share card and the comparison link for your partner both still work, since neither touches our servers.
Deleting things
Every saved result has a delete button that needs nothing but the link, not a password — requiring one would strand results whose owner had forgotten it. Deleting your account removes the account and every result attached to it, permanently, including links other people hold and anything you have paid for. Anything still only in your browser is cleared by clearing your browser data, which we cannot do and cannot see.
How long we keep it
A result is kept until you delete it, or delete the account it belongs to. The two-year sweep for results with no account attached still runs, and now has almost nothing to sweep: a result without an account is a result that was never uploaded.
What we ask about your child
A stage bracket, optionally, at the end. That is the complete list. No ages, no dates of birth, no names, no health information of any kind, and no instrument on this site will ever ask for any of it. The rule is enforced in three places — the type system, an automated test that fails the build, and a constraint in the database itself, which holds even if the application is wrong.
The couple comparison
Unchanged by any of the above, and still stored nowhere. The link you send your partner carries your axis positions — the same numbers your result shows you — and nothing else. Not which options you chose, not the order, not how long you took. The comparison runs in whichever browser opens the link.
Payment
Checkout carries a random string and nothing else — no answers, and no account details. Payments are handled by Gumroad as merchant of record; they see your payment details and we do not. If you are signed in when you buy, we record that your account paid for a report or a pass, which is what lets it work on your next device. That record says what was bought and nothing about what you answered.
Analytics
We count page views and how far through an instrument people get. We do not, and structurally cannot, put what you answered into an analytics call — an automated test fails the build if any analytics call anywhere in the codebase mentions an answer, an option or a score.
Your rights, and how to use them
Delete a saved result from its own page, or your whole account from the account page — that covers erasure without asking anyone. For anything else, write to privacy@parentbrickroad.com. If you have never made an account we genuinely cannot look you up, because there is nothing to look up by: send the link instead.