Privacy policy

Who is responsible

The data controller is [TO FILL: full legal name of the autónomo] (Mindscape), NIF [TO FILL: NIF], [TO FILL: postal address — street, number, postcode, city, province], Spain. Contact: support@mindscape.quest.

What we process and why

Taking a test. Your answers, age range and occupation are kept in your own browser (local and session storage) so the test and your results work. They are not sent to us, except as described below.

Anonymous statistics. When you finish a test, we store the test type, language, number of correct answers and score, with no name, email, IP address or other identifier. We use this to show aggregate figures on the site. Because it cannot identify you, it is not personal data.

Buying the detailed report. If you choose to buy the report, we store your result, your occupation, a random access code and the email address you give at checkout, so we can deliver the report and send you a private link to it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Payments. Payments are handled by Stripe. We never see or store your card details. Stripe tells us whether the payment succeeded and the email address you entered. We keep payment records to meet tax and accounting obligations (Art. 6(1)(c) GDPR).

Emails. We only email you if you buy the report: one message with your access link, and replies to anything you send us. Legal basis: performance of a contract.

Support. If you write to us, we use your message and email address to answer you. Legal basis: our legitimate interest in replying (Art. 6(1)(f) GDPR).

Server logs. Our hosting provider keeps short-lived technical logs (such as IP address and time of request) to run and secure the service. Legal basis: legitimate interest in security.

Cookies and local storage

We do not use advertising or analytics cookies, and we do not track you across sites. The site stores a few strictly necessary preferences in your browser: your theme, your language choice, whether you dismissed the language suggestion, and your test answers and result. Because these are needed for features you ask for, no consent banner is required. You can clear them at any time in your browser settings.

Who we share data with

We use these service providers (processors), each bound by a data processing agreement:

• Vercel Inc. (USA): website hosting.
• [TO FILL: database provider and region, e.g. MongoDB Atlas, AWS eu-west-1 (Ireland)]: database for report purchases and anonymous statistics.
• Stripe Payments Europe Ltd. (Ireland): payments.
• Resend (Plus Five Five, Inc., USA): sending the report email.

Where a provider is outside the European Economic Area, transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. We do not sell your data or share it with anyone else, unless the law requires us to.

How long we keep it

• Data in your browser: until you clear it.
• Report purchases (result, email, access code): for as long as you can access your report, and then as long as tax and accounting law requires (generally up to 6 years).
• Support emails: up to 2 years after the conversation ends.
• Anonymous statistics: indefinitely, as they identify no one.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Write to support@mindscape.quest; we will reply within one month. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.

Age

Mindscape is intended for adults aged 18 and over.

Changes

If we change this policy, we will update the date at the top of this page.