Effective date: October 17, 2026
PersonalitySite.com is operated by Endtek LLC, Spokane, Washington, United States. Contact us through https://personalitysite.com/contact. This notice describes our website, assessments, accounts, saved results, report access, and optional private sharing. Our separate Consumer Health Data Privacy Policy is at https://personalitysite.com/consumer-health-privacy.
Accounts and assessments
When you register, we collect your email address and display name and store a password hash, not your readable password. We store email-confirmation and recovery records, accepted policy versions, and account security records. An account must confirm its email before signing in. When you take an assessment, we store your selected answers, the assessment/version, progress and completion times, calculated scores, and result interpretations. Guest attempts are linked to a private browser credential; signed-in attempts are linked to your account. You may choose to save a completed guest result and its linked report purchases to your verified account. Saving it changes its ownership from browser access to account access.
Some answers and interpretations concern stress, emotions, self-esteem, relationships, or other matters that may reveal or imply health-related information. Assessments are for reflection and education, not diagnosis or clinical care. We use the data needed to deliver the assessment and account features you request. Do not submit another person's private information or put medical records or unnecessary sensitive details into support messages.
Reports, downloads, and your sharing choice
Saved results and reports are private by default. Your account lets you revisit them on other devices and download available PDFs. A free-result PDF contains the free summary and visible scores; it is not a purchased full report. Website report payments use Stripe. In the Android app, available paid reports use Google Play Billing. We send a protected account identifier and order reference to Google to verify the correct purchase; assessment answers and report contents are not sent to Google Play for billing. We store purchase references, status, amount/currency, and report entitlements, not your full payment-card number. Prices and purchase terms are shown before an available checkout.
We do not automatically make profiles, answers, results, or reports public. You may separately choose to create a link to one free result summary or one full report. Anyone possessing the complete link can view and download that selected content without an account. Individual answers and account details are not added to a shared result summary. A full-report PDF is shared as it exists and may contain details visible in that report. Links expire after the duration you choose (1, 7, or 30 days) and can be revoked in Sharing controls. Revocation stops future link access but cannot recall earlier downloads, screenshots, or copies someone else made. Share only with people you intend to receive the selected content.
Support, service providers, and security
Support forms collect the name, email, topic, and message you submit. Hosting providers process data needed to run and protect the service. SMTP2GO processes support and account-confirmation/recovery email. Ordinary account mail contains account links rather than your assessment answers or results. Provider mail open/click tracking and optional archiving are disabled for this connection. SMTP2GO may retain email delivery metadata for approximately 30 to 35 days under its own retention policy; this is outside our local seven-day cleanup. Google and Stripe independently retain their own payment records under their policies. We do not sell personal or consumer health data or use assessment responses for targeted advertising. Authorized operators may access information needed for support, privacy requests, troubleshooting, and security. Information may be disclosed when legally required or necessary to protect the service, subject to applicable law.
Essential cookies maintain login sessions, form security, and guest assessment access. Security throttling uses keyed network-address digests and recent timestamps. The server may retain network addresses, requested paths, request times, browser information, and response status in operational logs. Account session records contain broad browser/platform labels, timestamps, and a hashed session identifier. Sharing secrets are hashed in the database and placed in the share URL fragment so the secret is not part of the server-request URL. HTTPS, restricted storage, owner access checks, and other safeguards protect data, but no service can guarantee absolute security.
Retention and requests
We keep account and assessment records while needed to provide the saved access you request. Receipt/contact details and our site logs expire after seven days. Minimum genuine purchase identifiers, verified payment amounts and dates, token fingerprints/protected verification tokens, delivery-suppression references and refund/revocation evidence remain to preserve paid-report access, prevent duplicate use and handle reversals. This exception does not retain receipt email addresses or assessment answers and reports after account deletion. Restricted completed recovery snapshots expire seven days after creation. A backup made before live deletion may retain a residual copy for up to another seven days; current deletion records must be reapplied before a restored site reopens. Removing browser cookies ends local access but does not itself erase server records.
Use Account & privacy for an account-data download or deletion request, or use https://personalitysite.com/android/account-deletion even after uninstalling the app. Confirming your current password verifies signed-in ownership automatically. Processing normally begins on the next maintenance run and completes within seven days; you can withdraw until processing starts. Deletion removes profile identity, passwords and sessions, assessment answers, scores and personalized results, private reports and sharing/download access. Paid reports become unavailable when you delete the account. Closed internal purchase/security references remain without your name, account email, answers, scores or report content. Administrator responsibilities must be transferred with support before deleting a privileged account; shared company-owned material is handled separately from personal assessment content. For lost access, guest data, correction, broader access requests or appeals, use the privacy contact form. We verify ownership before disclosing or changing private information. You can revoke shared links immediately. Files you saved or shared cannot be recalled. The separate Consumer Health Data Privacy Policy explains health-data requests and appeals.
The service is intended for adults aged 18 or older. We do not invite children to create accounts. Contact support if you believe a child submitted data. We will explain material changes before introducing new uses that require notice or consent. This notice does not authorize new marketing or organization sharing merely because those features are developed.