The Meta Intelligence IndexPrivacy

Privacy

Only what is necessary.

The assessment works without an account. An anonymous secret is kept in a protected cookie; only its hash is stored. This page lists everything that is recorded, why, and for how long.

What is recorded

Answers, response times, changes of mindScore the assessment and improve the items.With the session. Removed when a linked account is deleted.
Declared confidence per questionCompare stated certainty with actual accuracy.Optional. With the session.
Optional context: age range, education, occupational category, income range, regionDescribe the population the norms calibrate against.Entirely optional, stored as brackets and never as exact values. A fully declined set is not stored at all.
Device marker (random value, stored as a hash)Tell a first attempt from a retake, protecting the norms and the certificates.Twelve-month cookie. Contains no network, account or personal identifier. Clearing cookies defeats it.
First name, last name and email at unlockDeliver the report and name a certificate.Only when a report is purchased. Never resold. Removed when a linked account is deleted, including for retained purchases.
Share cards: public token, opens, tests startedMake propagation measurable.Created only if you share. The token cannot be traced back to the session.
Machine API runs: model name, key labelTrace and revoke a key, and keep these runs out of the human norms.Unrelated to human sessions.
Stripe identifiers and the accounting recordEvidence a purchase.Retained for accounting obligations, even after account deletion.
Certificate: public alias, serial, token hash, revocationAllow honest public verification.The minimal registry survives deletion, otherwise a revoked certificate would verify as valid.

What is never collected or exposed

  • No raw keystrokes, no fingerprinting, no named leaderboard.
  • No IP address is written to the database: it is used only for rate limiting, in memory, and disappears with the process.
  • A certificate contains no email, IP address, Stripe identifier or access secret. A name appears only with explicit consent.
  • A public share page exposes no session identifier: the token cannot be traced back to the assessment.
  • Tab changes are logged but never automatically penalized.

Your rights

  • The assessment runs without an account. Linking an identity is an explicit action, never an implicit one.
  • From /account, a linked account can delete everything: unpaid assessments, raw behavioural data, declared context, delivery details and identity links. Issued certificates are revoked before being erased.

Limits we would rather state

  • If you unlock a report without linking an account, your email stays on record and you have no automatic way to request its removal. Write to us; an automatic purge is still to be built.
  • No scheduled purge is in place yet: the retention periods above describe intent, not yet an automatism.
  • Rate limiting is per server instance, not global.
  • The deployer remains responsible for legal retention periods and for propagating deletions into backups and infrastructure logs.

More about the method →