Privacy, by design

You can take the whole test with no account, no email, and no sign-up. What you do leaves behind a random session id and your answers — never your name, your IP address, your full browser string, or any device fingerprint. We can’t tie a result back to you, and that’s on purpose.

We record only what scoring and honest norming actually need:

• · Your responses and how long each item took (per-item timing lets us filter rushed, random guesses so the norm stays clean).
• · A random session id (a throwaway UUID), generated in your browser.
• · Coarse device buckets only — device class, OS family, browser family, a viewport-size bucket, and a timezone-offset bucket.

We do not collect your name, email, IP address, full user-agent, precise location, or any fingerprint — and we don’t run advertising or third-party tracking.

Only to score your test, keep the norm accurate, and improve the items. Because the data is anonymized at ingestion, it isn’t information we can link back to you as a person — which is the strongest privacy guarantee we can offer.

The optional report is handled by Stripe, our payment processor. Your card details go straight to Stripe over an encrypted connection — FAIQ never sees or stores them. When a payment succeeds, we store a simple paid/not-paid flag against your random session id so your report unlocks. Stripe processes your payment data under its own privacy policy.

Responses are stored in a managed Postgres database (Supabase) with row-level security, and the site is served on Vercel. Access is restricted to the FAIQ operators. We keep anonymized response data to maintain and re-calibrate the norm; payment records are kept as long as needed for tax and accounting.

No advertising or cross-site tracking cookies. We use your browser’s local storage for one thing: to save your progress mid-test so an accidental refresh doesn’t lose ~25 minutes of work. It’s cleared when you finish or start over, and it never leaves your device.

We support the rights the GDPR gives you (access, correction, erasure, objection). In practice, because we anonymize at ingestion, we usually can’t tell which rows are yours — there’s no identifier to look you up by, so there’s nothing personal to export or delete. If you made a purchase, contact us and we can act on that payment record. The data controller is FAIQ — reach us at support@fullability.org.

FAIQ isn’t directed at young children, and we don’t knowingly collect identifying data from anyone. The optional age band you can pick before the test (used only to sharpen the norm) collects nothing that identifies you.

If this policy changes we’ll update the date above. Questions about privacy? Email support@fullability.org. See also our Terms and Refund policy.