1. What we collect
When you take the Common Ground quiz, we collect:
- —Quiz answers. Your responses to each question, stored against an anonymous session token (a random UUID). No name, account, or identity is attached.
- —Computed scores. Your ideology, emotional intensity, animosity, and bridgeability scores, derived server-side from your answers.
- —Email address (optional). If you choose to enter your email mid-quiz, we store it separately from your quiz data. We record whether you consented to transactional emails (results link) and/or marketing emails, independently.
- —Payment information. If you purchase the full report, payment is processed by Stripe. We store only a record of the transaction (amount and Stripe payment intent ID) — we never see or store your card details. Stripe's privacy policy governs their data handling.
- —Analytics events. We use PostHog to collect anonymized usage data (pages visited, quiz started/completed, etc.) to understand how the product is used. No personally identifiable information is attached to these events.
2. How we use your data
- —To compute and display your quiz results
- —To send you your results link by email (only if you gave transactional consent)
- —To send you marketing communications (only if you gave explicit marketing consent)
- —To process your payment and unlock your premium report
- —To improve the product using aggregated, anonymized analytics
We do not sell your data. We do not share your individual quiz data with third parties except as described in this policy.
3. Data retention
- —Raw quiz answers are deleted 90 days after your session is created.
- —Computed scores (anonymized aggregates) may be retained indefinitely for research and product improvement.
- —Email addresses are retained until you request deletion.
- —Purchase records are retained as required by law and for financial record-keeping.
4. Cookies and tracking
We use PostHog for product analytics, which may set cookies to track sessions across page visits. We use Upstash Redis for rate limiting, which stores your IP address temporarily. We do not use advertising cookies or third-party tracking pixels.
5. Your rights
You have the right to request access to, correction of, or deletion of your personal data. To make a request, email us at support@commongroundquiz.com. We will respond within 30 days. Because quiz sessions are anonymous by design, deletion requests for quiz data require you to provide your session token (visible in your results URL).
6. GDPR
If you are located in the European Economic Area, you have additional rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data is consent (for email communications) and legitimate interests (for analytics and rate limiting).