_Last updated: 2026-10-18. This document was prepared from common website-policy structures (e.g. those used by free generators such as Termly and TermsFeed) and has not been reviewed by a lawyer. It is not legal advice._
1. The short version
- You can take the test without an account and without giving your name or email.
- Your answers reveal political opinions, which the EU and UK GDPR treat as special-category data (Article 9). We process them only with your explicit consent, which you give by ticking a box before the test starts. You can withdraw that consent at any time.
- We do not store your IP address with your answers, and we don't build profiles of you.
- We never sell data, never share answers with political organisations, and don't use advertising or cross-site tracking cookies.
- You can delete a saved result at any time.
2. Who we are
The data controller is the operator of IdeoQuiz, an independent project run by a sole proprietor. Contact: support@ideoquiz.com (subject: Privacy). We do not currently have an EU or UK representative; if the law requires one, we will appoint one and list them here..
3. What we collect and why
| Data | When | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Test answers and scores, linked to a random result ID (no name, email or IP) | When you finish the test | To show your result and let you return to it with the link | Explicit consent (GDPR Art. 9(2)(a)); Art. 6(1)(a) | Until you delete it, or 24 months after last access |
| Answers kept only in your browser (localStorage) while you take the test | During the test | So you can resume | Strictly necessary | Until you finish or clear storage |
| Email address (optional) | If you ask us to email your result or report | To send that email | Consent; contract for purchases | Until you delete it or 24 months after last use |
| Order data (order ID, product, amount, date, result ID) | If you buy a report | To deliver the report and handle refunds | Contract; legal obligation (tax records) | As required by law (usually 6–10 years for invoices) |
| Payment details | At checkout | Processed by our merchant of record, Waffo; we never see card details | Contract | Per Waffo's policy |
| Feedback ratings and text (optional) | If you rate a result or report | To improve the service | Consent | 24 months |
| Abuse reports | If you report content | To enforce our AUP | Legitimate interests; legal obligation | 24 months or as required |
| Aggregate statistics (counts, averages, never individual answers) | Ongoing | To measure reliability and improve questions | Not personal data once aggregated | Indefinitely |
| Optional research use of anonymised answers | Only if you tick a separate box | To publish reliability statistics (see Methodology) | Explicit consent | Until you withdraw |
We don't use automated decision-making that produces legal or similarly significant effects on you.
4. Anonymous storage by design
- Results are stored under a random identifier. We don't attach names, IP addresses or device fingerprints.
- Our hosting provider (Cloudflare) processes IP addresses transiently to deliver the website and protect it from attacks; we configure our application not to write IP addresses to our database or application logs.
- Rate limiting uses short-lived, hashed tokens that are discarded within 24 hours and aren't linked to answers.
- If you add an email, it is stored separately from your answers and linked only by the random ID, so that we can delete either independently.
5. The AI report
If you buy the optional report, your scores and answers (not your email) are sent to an AI model provider to generate the text. The provider acts as our processor under a data processing agreement and is not permitted to use your data to train models. The current provider is listed at /privacy#processors.. Reports are stored under your random result ID so you can return to them.
6. Who we share data with
Only processors who help us run the service: Cloudflare (hosting, database, storage); Waffo (merchant of record: payments, tax, invoicing, refunds); our transactional email provider (sending emails you request); and our AI model provider (generating reports). We don't share data with political parties, campaigns, data brokers or advertisers. We may disclose information if required by law; where lawful, we'll tell you.
7. International transfers
Some processors may process data outside the EEA/UK. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.
8. Cookies
We use only strictly necessary storage (for example, saving test progress and your consent choice). We don't use advertising or cross-site tracking cookies. If we add privacy-friendly analytics, it will be cookieless and aggregate, or we'll ask your consent first.
9. Your rights
Depending on where you live, you have rights to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time without affecting earlier processing. To delete a result, use the delete link on the result page. For other requests, email support@ideoquiz.com (subject: Privacy) with your result ID. Because we don't know who you are, the result ID or link is how we verify a request. You can complain to your data protection authority.
US residents: we don't sell or share personal information for cross-context behavioural advertising. California residents can exercise the rights under the CCPA/CPRA using the same contact.
10. Age
The service is intended for people aged 16 and over. If you are under 16, please don't save results or buy reports. If we learn we've stored data from a child under 16 without appropriate consent, we'll delete it.
11. Security
We use encryption in transit, access controls and separation of identifiers from answers. No system is perfectly secure; if a breach affects you, we'll notify you and the authorities as the law requires.
12. Changes
We'll post changes here with a new date and highlight significant ones on the site.