Guest results and preferences stay in your browser by default. Account creation adds server-side storage for email, password hash, public nickname, privacy choices and result history.
Data minimization
Full IP addresses are not public. Rate limiting and fraud checks use a one-way hash with a server-side salt. Optional Google Analytics 4 and personalized advertising do not load before the relevant consent.
Google Analytics
When analytics consent is granted, Google Analytics 4 may process page views, test starts, test completions and share actions using the public measurement ID configured by the administrator. Consent can be withdrawn from the cookie settings in the footer.
Your choices
Profile tools provide export and deletion requests. Contact [email protected] for privacy questions.