Draft for legal review · last updated 28 October 2026
Privacy
The short version
- Your questionnaire answers, notes and settings are saved in your browser (local storage) on your device, not on our server.
- They leave your device only if you choose one of three things: save a copy to open elsewhere, buy the full report, or turn on AI answers in the help panel.
- No cookies, no advertising, no third-party analytics, no session recording. We never use your answers for advertising or share them with other products.
- We are not anonymous to the payment provider when you buy: Stripe needs your payment details and email.
What is stored, where, and for how long
| What | Where | How long | When |
|---|---|---|---|
| Answers, language choice, progress, notes, discussion sheet, planner | Your browser | 30 days after your last change, then removed on your next visit. Or until you delete it. | Always, while you use the questionnaire |
| Reading settings | Your browser | Until you reset them | If you change a setting |
| Saved copy: answers, language choice, and (if you tick it) your discussion-sheet text | Our server (Cloudflare Workers KV) | 30 days, then deleted automatically. Or when you delete it. | Only if you choose "Save a copy" |
| Purchase record: checkout email, payment session id, dates | Our server | 400 days, then deleted automatically. Or when you delete it. | Only if you buy the full report |
| Payment details, email, billing country | Stripe | Under Stripe's own policy and legal duties | Only if you buy the full report |
| Rate-limit counters: a keyed hash of your IP address or email | Our server | About 1 to 2 hours | When you save, buy, recover access or use AI answers |
| Usage counters: a fixed event name and the date, such as "questionnaire_finished, 2026-10-28" | Our server | 400 days | When you use main features. No identifier, answer, page text or device information is attached. |
Access keys for saved copies and report links are random and long. We store only a one-way hash of each key, so the key itself cannot be recovered from our records. Keys travel in the part of a link after the # sign, which browsers do not send to servers.
Who else processes data
- Cloudflare hosts the site. Like any host, it handles your IP address and the pages you request in order to deliver them. Our code does not write request contents to logs.
- Stripe processes payments if you buy the full report. See Stripe's privacy policy.
- Anthropic receives your help-panel questions only if you turn on AI answers, and the sentences of your summary only if you tick a second box. Raw answers are never sent. We do not store those messages. See Anthropic's privacy policy.
- Email: the only email we send is a report access link you ask for. The email provider for this is not chosen yet.
What we never do
- Put answers, report text, email addresses or access keys into analytics, advertising tools, error logs or session recording.
- Use your answers for ad targeting, sell them, or combine them with data from other products.
- Send marketing email. There is no mailing list.
Deleting your data
Go to Your data. One button clears everything in this browser. Saved copies and purchase records can be deleted from there too, using the key stored in this browser. Deleting a purchase record removes our copy of your email and ends report access; Stripe keeps its own payment records. If you no longer have the browser or link, contact support@wordrhino.com (not yet active, see the launch checklist).
Age
This site is for adults 18 and over. We ask you to confirm that before the questionnaire. We do not ask for a date of birth.