Privacy Policy

Summary

• Your answers and your result stay on your device. We don't receive them and we don't send them to anyone.
• We use Google Analytics to count visits and to see which tests are started and finished. It only loads if you click “Accept” on the cookie notice.
• Saying no changes nothing about how you can use the site. You can change your mind at any time under “Cookie preferences” in the footer.
• We don't ask for your name, email or an account, and the site shows no ads.
• The tests are self-reflection tools. They are not a psychological assessment or a diagnosis.

1. Who is responsible for your data

InnerlyTests is run by AFS IT Services Ltda, based in São Paulo (SP), Brazil. It is the data controller: the party that decides how your data is handled, as defined by the GDPR and Brazil's LGPD.

For any privacy matter, write to the email address below. It is also the channel for our data protection officer (DPO), who is the company's owner. We reply within 15 days.

Privacy email: contato@studioatlas.com.br

2. Your answers stay on your device

The test runs in your browser. Adding up the points and choosing your result happen on your device. Your answers and your score are not sent to our server or to Google Analytics.

While you answer, your browser saves your progress in your device's local storage (localStorage), under the name innerly_test_ followed by the test code. This way you don't lose your answers if you reload the page. The record holds the test code, the answers you've given so far, the question you're on, the time you started, the time it was last saved, and a technical code that identifies the version of the questions and scoring, so that answers given to an older version of the quiz are not added up under the new rules. That code is the same for everyone and contains no data about you.

The record is deleted when your result appears. If you stop halfway, it is deleted after 24 hours, the next time you open the site. You can also delete it whenever you like by clearing this site's data in your browser settings.

Why we do it this way: answers about emotions and relationships may count as data concerning health, which the GDPR (special category data) and the LGPD (sensitive personal data) protect with stricter rules. That's why we chose not to receive them.

On a shared device, someone who opens the same test in the same browser may see a test you left halfway. If you prefer, use a private window.

3. If you share your result

The result screen has buttons to share on X (formerly Twitter) and WhatsApp. They open the service you choose with a ready-made message: the test name, your score (for example, 12/24) and a link to the test. The link goes to the test, not to your result.

Nothing is sent unless you click. When you click, the message travels inside the web address that opens, so X or WhatsApp receive it even if you decide not to post. From that point on, the privacy policy of the service you chose applies.

4. Your choice about analytics cookies

On your first visit, a notice asks whether you accept analytics cookies. Until you click “Accept”, Google Analytics is not loaded and nothing is sent to Google.

If you decline or ignore the notice, the site works exactly the same, tests included. We don't ask for advertising permission: it is always declined.

Your choice is saved on your device (innerly_consent), so we don't ask again on every page. You can change it at any time using “Cookie preferences” in the footer. If you withdraw permission, Google Analytics stops loading and the site deletes the Google Analytics cookies already set. This doesn't affect what happened before.

Open cookie preferences

5. Google Analytics

If you accept, we use Google Analytics 4, a Google service, to learn how many people use the site, which tests are started and finished, and where the site breaks. In that case, Google receives:

• the address of the page you open, which shows which test you opened, and the page you came from, if any. The page title sent to Google is neutral and doesn't name the test's topic;
• technical data about your browser and device, such as the browser type, language and screen size;
• your IP address, which Google uses to estimate your approximate location (city or region). According to Google, Google Analytics does not log or store IP addresses;
• how you use the page: scrolling, clicks on links to other sites, page changes and form interactions, without what you type;
• two events from the site itself: test_start, when a test begins, and test_complete, when the result appears. They carry the test code (for example, fi-02), the language and, at the end, how many seconds you took.

Google does not receive your answers, your score or your result.

Google Signals is turned off, and Google Analytics is not linked to Google Ads, AdSense or BigQuery.

We don't know who you are. But Google Analytics recognises your browser through a cookie and can link it to the fact that you opened a test about an emotional topic. We think you should know that before you accept.

• How Google uses information from sites that use its services

6. Cookies and local storage

The InnerlyTests items live on your device and are not used by our server: the page language depends only on the address (for example, en.innerlytests.com for English). Local storage items never leave your device. Earlier versions of the site set a language cookie (preferred_lang); it is no longer used, and the site deletes it on your next visit.

7. Server and hosting

The site is hosted by Unified Layer (Newfold Digital group), on servers in Provo, Utah, in the United States. As with any website, when you open a page your browser sends the server some technical data: your IP address, the page requested, the browser type and the page you came from. These records (logs) are used to run and protect the site, and the provider keeps them for a limited period that it sets.

The site's fonts and styles come from our own server. We don't use Google Fonts or other content delivery networks (CDNs).

8. Legal bases

You are not required to provide any data. Declining analytics cookies has no consequence for how you can use the site.

• Google Analytics: your consent (GDPR, Art. 6(1)(a); LGPD, Art. 7, I). You can withdraw it whenever you like (section 4).
• The record of your cookie choice and your test progress: technical items that make the site work the way you asked. Basis: our legitimate interest in providing that (GDPR, Art. 6(1)(f); LGPD, Art. 7, IX).
• Server logs: our legitimate interest in keeping the site running and secure (same articles).
• Your answers: we don't receive them, so we don't process them in our systems.

9. Who we share data with, and international transfers

• Google, which runs Google Analytics, only if you accept. Google acts as a processor: it handles the data on our behalf.
• Unified Layer, which hosts the site (section 7).
• X and WhatsApp, only if you click share (section 3).

We don't sell data and we don't share it with anyone else, unless the law or a court order requires it.

Your data is transferred internationally: the site's servers are in the United States, and Google may process Google Analytics data in several countries, including the United States. For its own transfers, Google states that it takes part in the EU-U.S. Data Privacy Framework and uses standard contractual clauses where required, including those approved by Brazil's data protection authority (ANPD).

• Google's legal frameworks for data transfers

10. How long data is kept

• Test progress: on your device, until the result appears; if you stop halfway, 24 hours (section 2).
• Your cookie choice: until you change your choice or clear the site's data.
• Google Analytics: event data is kept for 2 months, and data linked to your browser's identifier for 14 months. This period restarts with each new visit. Aggregated reports, which don't identify browsers, may be kept longer.
• Google Analytics cookies in your browser: up to 2 years, or until you delete them.
• Server logs: for a limited period set by the hosting provider.

11. Your rights

Under the GDPR and the LGPD (Art. 18), you can ask, free of charge, for:

• confirmation that we process data about you, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymisation, blocking or erasure of data that is unnecessary, excessive or processed unlawfully, and erasure of data processed with your consent;
• data portability;
• information about who we share data with;
• information about your option not to consent and what that means (here, nothing changes);
• objection to processing and restriction of processing;
• withdrawal of consent, at any time.

In practice: your answers are only on your device, and you can delete them yourself by clearing the site's data. Because we don't have your name or email, in general we can't link Google Analytics data to you. Even so, write to the email in section 1: we'll do whatever is technically within our reach and reply within 15 days.

If you think your rights were not respected, you can complain to a data protection authority: in the European Union, the authority in your country; in Brazil, the ANPD; elsewhere, your local authority.

• Brazil's National Data Protection Authority (ANPD)
• EU data protection authorities (EDPB list)

12. Children and teenagers

The site is recommended for people aged 16 and over, and it doesn't check visitors' age. If you are under 16, talk to a parent or guardian before using the site and before accepting analytics cookies. If in doubt, click “Decline”: the tests work exactly the same. Parents and guardians can write to us at the email in section 1.

Some tests deal with emotional topics. If a test brings up difficult feelings, talk to an adult you trust or reach out to an emotional support or health service in your country. In an emergency, contact your local emergency services.

13. What we don't do

• We don't ask for an account, name, email or phone number.
• We don't sell data.
• We don't show ads. If that changes, we'll update this policy and ask for your consent before any ad appears.
• We make no automated decisions about you and we do not build profiles of you. The result is a simple sum of points and, in some quizzes, the direction of your answers picks one of two versions of the range text. All of this happens in your browser: neither your answers nor your result are sent to us or to Google Analytics. Your score only leaves your device if you click to share it, and then it goes to the service you chose (section 3). The calculation is there only to help you reflect.

14. Security

Every page uses an encrypted connection (HTTPS). Because your answers stay on your device, their security also depends on that device: screen lock, an up-to-date browser and who else has access to it.

15. Changes to this policy

When we change how we handle data, we'll update this page and the date at the top. Important changes will be highlighted at the top of the page, with the date of the update. If a change needs a new permission from you, we'll ask before applying it.