Privacy

What we won't do

Let's start with what we won't do:

• We won't upload your photos. A photo you add to a result card is shrunk and drawn onto the card on your own phone or computer, and it's gone from the browser once you leave the page.
• We can't see what your browser stores. Your language, whether sound is on, the nicknames and pet names you've typed, unfinished tests and past results stay on your device, so you can pick up where you left off.
• We won't ask for your real name, phone number or address. Nicknames don't have to be real names.
• We won't ask for sensitive information such as your health, religion or political views. Some tests ask about your habits or how you feel; those answers are used only to work out your result and the overall figures.
• We won't link your email address to your test results.
• We won't pass your nickname, pet's name, photos, run ID or email address to our analytics service.
• We won't keep IP addresses in our own database.
• We won't use your data to build an advertising profile of you, or to make decisions about you that have any real effect on your life.

What we do collect

We collect only the following, and each has a job to do:

• Test results. Some tests save your final result to our database so we can tell you how many people have taken a test and how everyone did on average. A record holds your answers, score, nickname (if the test uses one) and language, plus a random run ID, the test version, how long you took and when you finished. It holds no IP address and no contact details.
• Your email address, only if you sign up for news of new tests. We also note the language and page you signed up from, and whether our email service has accepted the address.
• Technical details of your visit. As with almost any website, your browser sends your IP address, browser and system type, device type, the page you asked for, where you came from and the time. Our host, Cloudflare, uses these to deliver pages and fend off attacks.

Apart from the nickname a few tests print on your result card (any name will do), nothing is required. If you don't sign up, you simply won't hear about new tests by email.

How we use it

We use this information only to:

• work out your result, make your result card and remember where you are;
• show how many people have taken a test and how they did on average;
• spot questions that confuse people and features that don't work, and fix them;
• tell you about new tests, once you've signed up and confirmed your email;
• keep the site running and secure, and fix problems;
• answer your emails and handle requests about your data.

Figures pooled so that no one can be picked out, such as how many people got a question right, may appear on the site or in articles we write.

Analytics

To learn what works on the site and what doesn't, we use Google Analytics on test pages. The home page, these two pages and preview versions of the site don't load it.

It sees which pages you open, how long you stay, what kind of device you use, your rough region, and some test events: starting, finishing, the answer picked for a question and whether it was right, and whether sharing worked.

We've limited it: Google signals and ad personalisation are off, and advertising storage is always denied. The page address it receives is only the path; everything after a ? or # (where nicknames and challenge details live) is removed, and the referring page is cut down to the site's domain. Your nickname, pet's name, photos, run ID and email address are never sent to it.

If your browser sends a Do Not Track or Global Privacy Control signal, test pages don't load Google Analytics at all. You can also turn on your browser's tracking protection, use a content blocker or install Google's opt-out add-on (tools.google.com/dlpage/gaoptout). Every test still works. How Google handles this data is described at policies.google.com/privacy.

Cookies and browser storage

The site uses only these kinds of storage:

• The site's own browser storage, which remembers your language, sound setting, nicknames and pet names, test progress and past results, plus a few small markers that stop the same event being counted twice. It stays on your device and we can't read it. We set no cookies of our own.
• Google Analytics cookies (test pages only): _ga and cookies starting with _ga_. They hold a random identifier used to tell whether the same visitor has come back, and expire after two years by default.
• Security checks. To stop attacks and tell people from bots, Cloudflare and the Turnstile check on the sign-up form may run checks in your browser, using only the browser and network details each check needs.

There are no advertising, targeting or social-media tracking cookies. Every test still works if you block cookies, but clearing browser storage also clears your progress and past results.

Speed measurement

We measure how quickly pages load, using a small service of our own on Cloudflare. Each sample holds only the page type, the timings, whether you're on a phone or a computer and the country the connection comes from. There are no answers, nicknames or email addresses in it, and nothing that links one of your visits to another.

It uses no cookies or browser storage, and samples are deleted after 32 days. It switches itself off if your browser sends a Do Not Track or Global Privacy Control signal.

Who else handles it

The only others who handle your data are:

• The services that run the site. Cloudflare hosts the site and its database and provides Turnstile. Google provides Google Analytics. Buttondown sends our emails and handles confirmations and unsubscribes. They process data on our instructions and under their own terms and privacy policies.
• The people you share with. Whatever is on a result card or challenge link (a nickname or a score, say) is seen by the people you send it to, and they can pass it on. A challenge link keeps those details in the part of the address only your browser reads, so opening it doesn't send them to our server.
• The platforms you post to. Once you post a result card to a social network or messaging app, that platform's own rules apply, and it may keep copies of the image and link preview.
• The law. We may disclose data if a court or government authority lawfully requires it, or where it's genuinely needed to protect the safety or rights of visitors, the public or us.
• A new owner. If the site is sold or merged into another project, its data may go with it. We'll post a notice here before your data falls under a different privacy policy.
• Anyone else you agree to.

The numbers shown publicly on the site are only totals and averages. Other visitors' nicknames and answers are never shown.

How long we keep it

• Test results in our database: as long as we need them to run the tests and keep historical figures, then deleted or anonymised.
• Your email address: until you unsubscribe or ask us to delete it. After you unsubscribe, Buttondown may keep a suppression record so you aren't emailed again.
• Google Analytics data: up to 14 months, then deleted automatically.
• Speed samples: 32 days.
• Cloudflare's request and security logs: as set by Cloudflare's own policies.
• What's in your browser: on your device until you clear it.
• Emails you send us: as long as it takes to deal with them.

Deleting or getting your data

In your browser: clear this site's data in your browser settings. That removes the language, names, unfinished tests and past results saved on that device.

A result in our database: email us with the test, the nickname you used and roughly when you took it, so we can find it. We may ask a question or two to make sure it's yours.

Emails: every email has an unsubscribe link at the bottom. To have your address deleted entirely, email us.

Depending on where you live (the EEA, the UK or California, for example), you can also ask to see, correct or export the data we hold about you, object to or restrict our use of it (including for analytics), and withdraw consent you gave earlier. Doing so won't change how you're treated. Just email us. We'll reply within the time the law allows, usually a month, and you can also complain to your local data protection authority.

We don't currently sell personal information or share it for cross-context behavioural advertising, as California law defines those terms. We may keep some information where the law requires us to.

Security

Our main protection is collecting little: there are no passwords or IP addresses in our database, and the only contact details are subscribers' email addresses. The site is served only over HTTPS, and access to the data is limited.

No way of storing or sending data over the internet is completely secure, and we can't promise otherwise. If a security incident ever affects your data, we'll deal with it quickly and tell you and the relevant authorities as the law requires.

Legal basis (GDPR)

Weirdly Accurate runs weirdlyaccurate.com and is the controller of your data under the GDPR and UK GDPR. If you're in the EEA or the UK, we rely on:

• running the tests you choose to take and saving results for totals and averages: our legitimate interest in providing the site you're using;
• hosting, security and abuse prevention, including speed measurement and the sign-up check: our legitimate interest in keeping the site available, fast and safe;
• analytics: our legitimate interest in understanding how the site is used overall so we can improve it. You can object at any time, as described under Analytics;
• email updates: the consent you give when you confirm your address, which you can withdraw by unsubscribing;
• answering your emails: our legitimate interest in replying, or our legal obligation for data protection requests.

If you want to know which basis applies to a particular use, ask us.

International transfers

Our providers have servers in many countries, so your data may be processed outside your own, including in the United States, where data protection law may differ. Where the law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

Children

The site is for a general audience and isn't aimed at children under 13. We don't knowingly collect their personal data. If you're a parent or guardian and think your child has given us personal data (a nickname on a saved result, for example), get in touch and we'll delete it.

Links to other sites

Test pages link to other websites, such as the sources a result draws on and the people who made credited images. We don't control those sites; their content and privacy practices are covered by their own policies.