Privacy Policy

1. Privacy at a glance

Mind Calculator calculates assessments on your device. Browsing still sends ordinary connection information to the hosting provider. Contact messages and report-access checks send the limited data explained below. We do not sell personal data or use answers for advertising, research or AI training. You control optional saving and sharing. This summary does not replace the details below.

2. Who we are

Mind Calculator operates the self-assessment website mindcalo.com, including its www address. This notice explains our current practices. Use Contact for support, operator details or a privacy request. Assessments are for adults aged 18 or over and for self-reflection, not diagnosis or emergency care.

3. Your answers stay in your browser

The assessments calculate scores in your browser. Answers, scores and elapsed time are not uploaded by the assessment tools or sent to an AI service. Without device saving, working answers stay in page memory until that state is discarded; browser restoration can vary. These answers may reveal sensitive information about you.

Device saving is unchecked by default. If you choose it, this browser stores an unfinished draft with answers, question position and elapsed time, and completed reports with score summaries, date and instrument version. A SCL-90 summary also retains its support-prompt flag. Completed history does not contain all item answers. Other people using the same browser profile may see saved data.

Sharing is optional. The default shares only the public assessment link. If you choose scores or answers, a preview shows the personal information sent as text to your selected app or copied to your clipboard. The website link still opens the assessment, not a public personal report. Recipients and platforms may retain or forward this text; we cannot recall it. Completed item answers remain only in the current page memory and are not added to saved report history.

4. What you need to provide

Free basic results and preview PDFs require no account, real name or payment. Answers stay on your device and saving reports is optional. Optional purchases use Stripe-hosted Checkout, which may request an email and billing details. Contact requires its stated fields. Paid access uses a necessary cookie or recovery code, without requiring report saving.

5. Contact messages and technical information

Only when you submit Contact do we receive your name, reply email, topic and message. The service records a random reference, timestamps, notification status and email message identifier. A daily IP-derived hash limits abuse; this is pseudonymous, not anonymous. Cloudflare may separately process the raw IP address, requested URL, browser details, referring information, time and security or error data.

The form accepts text only and does not attach your answers or reports. Do not include assessment answers, mental-health details, medical records, passwords or information about others. This inbox is not monitored for emergencies.

6. Permanent site-wide access

One US$9.99 payment grants permanent access to all test features, complete reports and full PDFs across MindCalo: no subscription, renewal or separate edition purchase. The licence has no scheduled expiry. Keep your recovery code to restore the same personal licence in another browser without paying again; do not share it. Valid existing purchased codes upgrade to permanent site-wide access. This personal licence supports up to 3 browser devices. Clearing cookies does not free an old device slot. Use Contact to manage devices.

Access checks use a random session secret or recovery code, not answers, scores or a report fingerprint. The database keeps secret hashes, licence and checkout identifiers, Stripe order/payment references, timestamps and revocation status. The server verifies payment status, amount and currency; returning from Checkout alone never grants access. These purchase records are pseudonymous, not anonymous.

After server-verified payment, the success page displays a licence/recovery code and the service attempts to email it to your Stripe purchase address through Resend. Save the code. Email delivery may fail; the code shown on the page still restores the same licence without repurchase.

7. Purposes and disclosures

Support messages are used to answer and resolve your request. Purchase-related access records are used to fulfill and administer your requested digital report; where applicable this relies on performance of a contract. Security and necessary operation rely on legitimate interests where applicable, legal duties on legal obligations, and optional processing requiring consent on that consent. We do not sell personal information, share it for targeted advertising, use assessment answers for research or train AI models with it. There are no visitor analytics tags, advertising pixels, newsletters, user accounts or on-site card processing. Results are calculated automatically in the browser, not decisions about your eligibility, employment, insurance or healthcare. Anti-abuse limits can temporarily block submissions; use Contact to request review.

8. Retention

Local drafts, report summaries and the chosen language have no automatic expiry. Delete reports and progress in My reports; clear this site’s browser data to remove the language choice too. Downloaded reports, print jobs and browser backups must be managed separately. We cannot retrieve or erase answers that never left your browser.

Contact records and their IP hash are scheduled for deletion after 30 days; cleanup runs every five minutes, subject to service availability. Provider recovery copies may persist after deletion. Notification emails and replies in the operator’s mailbox have no fixed automatic deletion schedule and may remain longer for follow-up or legal needs. Provider logs follow provider settings, not the contact database’s 30-day schedule. Ask through Contact about information we control.

Permanent licences and payment references support continued access, recovery, refunds, disputes and legal duties, with no fixed automatic deletion period. Browser-session records expire after at most 400 days and may be renewed. Legacy report-code records retain cleanup 30 days after the old recorded expiry, without expiring upgraded licences. Redemption limits are scheduled for deletion after 24 hours. Private fulfilment files, Stripe records and correspondence follow their own retention rules. Use Contact for records we control. Legacy compatibility records may retain old code/session hashes, order references, report fingerprints, activation/expiry timestamps and revocation status until their cleanup.

9. Providers, locations and security

Cloudflare provides hosting, protection, contact/access services, database storage and notifications. Google Gmail receives support correspondence. Stripe processes hosted payments and may receive purchase email, billing and payment details under its policies. This site receives no card details and sends no assessment answers or scores to Stripe. Disclosures are limited to these functions, support, legal duties and security; there is no public user directory. Resend receives the purchase email and licence code to send the transactional licence message from MindCalo support; it does not receive assessment answers, scores or report text. Delivery timestamps/status may be recorded. Resend and Stripe keep provider records under their own policies; no fixed automatic deletion of those provider records is promised.

Their international infrastructure may process messages and technical information outside your country, including in the United States. We do not promise local-only hosting. Use Contact to ask about processing locations and safeguards applicable to a transfer; this policy does not itself establish a transfer agreement or certification.

Access controls, HTTPS and hashed access credentials reduce risk; they do not guarantee absolute security or make records anonymous. We limit backend use to operating the service and handling support. If an incident triggers legal notification duties, we will follow those requirements. Browser extensions, shared profiles, backups, clipboard history, print services and downloaded files are controlled by you or their providers; removing site data does not necessarily remove those copies.

10. Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, withdraw consent where processing relies on it, and complain to a relevant data protection authority. Use Contact and choose Privacy request; include an earlier message reference if available. We may request proportionate verification and explain legal or technical limitations. We respond within applicable legal time limits. Browsing is not consent to optional tracking.

There is no advertising sale or sharing to disable through Do Not Track or Global Privacy Control signals; those signals do not erase messages already sent. If a child has submitted personal information, a parent or guardian can contact us for review.

For information held by us, choose Privacy request in Contact and state the action you want, with a previous message or order reference if available. Do not send an activation code, complete answers or identity documents with the initial request. We may ask for limited verification appropriate to the record to prevent disclosure to someone else, and explain any inability to locate data or lawful retention exception. Where applicable, authorized representatives can request on your behalf with suitable authority checks. Exercising privacy rights does not attract retaliation or a penalty. Withdrawing optional saving does not remove earlier copies: delete existing local data separately. You can export available results yourself, and manage sharing through the receiving platform.

11. Young people and sensitive information

The assessments are intended for adults aged 18 or over. We do not request a date of birth or use an identity check to verify age. If a young person has sent personal information through Contact, a parent or guardian can ask us to locate and review it for deletion where appropriate. Please do not submit another person’s information without authority or include health records in support messages. We cannot retrieve or delete answers that exist only on another device.

12. Changes and contact

We update this notice when practices change and revise the date above. Where required, we provide notice and obtain consent before new optional processing begins. Contact is the public channel for questions and privacy requests to the Mind Calculator operator. Read the Cookie Policy for browser storage details.