WHAT WE KNOW ABOUT YOU. WHICH ISN'T MUCH.

There are no accounts, so we never have your name, your email address or a password. A random session ID is created in your browser when you start a test. Your answers and your result are stored against that ID and nothing else. We do not store your IP address, we set no advertising or analytics cookies, and we do not track you across other websites.

Vibe Check is the controller of the data described below.

The Political Lean test asks about your political opinions. Under Article 9 of the UK GDPR and the EU GDPR, political opinions are “special category” data and need a stronger lawful basis than ordinary personal data.

Our lawful basis is your explicit consent, given when you tap START on the test intro screen, where we tell you plainly that your answers will be processed to produce your result. You can withdraw that consent at any time by asking us to delete your session (see below). Withdrawal does not affect processing that already happened.

If you would rather not have political opinions processed at all, do not take the test. Browsing the site does not create a session.

• A random anonymous session ID, generated in your browser.
• A random 8-character share slug, which is what a shared link points at.
• The answers you tapped, and the text of the question you answered.
• Your result: the archetype, the three axis scores, and the written interpretation.
• A two-letter country code, chosen by you or guessed coarsely from your connection, used only to pick the right question set and to compare you with other people in the same country.
• If you paid: a Stripe payment reference, so we know the result is unlocked. We never see or store your card details.
• Anonymous product events — for example “question 6 answered” and how long a screen was on-screen — with no IP address and no cookie attached.

• No name, email address, phone number, account or password.
• No IP addresses. An IP is used in memory for a few seconds to throttle abuse, then discarded.
• No advertising identifiers, no cross-site tracking, no cookies for analytics.
• No card numbers.

The exported chat file is read and analysed inside your own browser. It is never uploaded, never stored and never logged. If you close the tab, it is gone.

What leaves your device is only what you see and approve on the review screen: anonymous statistics (message counts, reply times, question rates, hour-by-hour activity) about participants labelled PERSON A, PERSON B and so on, plus up to twelve short excerpts you approve individually, with names and numbers stripped out. Any nickname or initials you type on that screen stay in your browser and are never sent.

The approved excerpts are used once to write your interpretation and are then discarded. They are never written to our database — there is no column for them. Real names never reach our database, our share cards or our logs.

One honest caveat: the other people in that chat did not agree to this. That is why the output describes patterns and assigns roles, and never makes a judgement about a named person's character.

Named, not hidden behind “trusted partners”:

• Stripe — Takes the $2 payment. Stripe sees the card details; we never do. (US / EU)
• Supabase — Hosts the database holding your anonymous session, answers and result. (EU)
• Google (Gemini, via the Lovable AI gateway) — Writes the interpretation text from your answers or your chat statistics. Sent without any name, email or account attached. (US)
• Plausible Analytics — Counts anonymous, cookieless page and event totals. No cookies, no cross-site tracking, no profile. (EU)
• Cloudflare — Serves the site and terminates the connection. (Global edge)

Transfers outside the UK/EU rely on the relevant standard contractual clauses or adequacy decisions. Your answers are sent to the AI provider without any identifier that could link them back to you, and are not used to train models.

• Sessions, answers and results: 24 months, then deleted. Paid results are kept for that period so your link keeps working.
• Approved chat excerpts: deleted as soon as the analysis is written — minutes, not days.
• Anonymous product events: 14 months.
• Payment records: held by Stripe for as long as tax law requires.

There are no accounts, so we cannot look you up by name — and that is the point. The handle is your share slug: the 8 characters at the end of your result or share link, for example vibecheck.app/r/wd25qmcv.

Email hello@vibecheck.app with that slug and say whether you want a copy of the data or it deleted. We will action it within 30 days and reply to confirm. We do not ask you to prove who you are, because we have nothing to check you against — anyone holding the slug can delete it, which is why you should treat a link to an unshared result as private.

You also have the right to object, to restrict processing, to withdraw consent, and to complain to your supervisory authority — in the UK, the Information Commissioner's Office.

Vibe Check is not intended for anyone under 16.

If we change this policy in a way that affects what we collect, we will change the date at the top and, for anything material, say so on the site.