Privacy policy
Privacy policy
Short version: your answers never leave your device unless you choose to share or buy something — and even then we store your score and profile, never your answers. We use analytics only with your consent, and you can delete everything.
Who is responsible
Wabiro operates Wabiro (the "Service"). For any question about this policy or your data, write to hello@wabiro.com.
What stays on your device
When you take a test, your answers, your progress and your result are stored in your browser's local storage. The score is computed in your browser. This data is not transmitted to us. You can erase it at any time with "Delete my data" on a result page, or by clearing your browser storage.
What we store on our servers, and when
We only create server-side records when you explicitly take one of these actions:
- Creating a share link: we store the test identifier, your score, your category, your main profile name and a random share token. Never your answers or dimension details.
- Buying a report: we store the test identifier, your aggregated result (index, dimension scores, profile keys) so that the report can be generated, the order status and the e-mail address you enter on the Stripe checkout page (to send the receipt and let you recover the report). Payment card data is handled entirely by Stripe and never reaches us.
- Consent choices: an anonymous random identifier, your analytics choice, the policy version and a timestamp.
- Creating an optional account: your e-mail address, used only to sign you in with a magic link and to list the reports bought with that e-mail.
All server-side records use random, unguessable identifiers. We do not store IP addresses with your results.
Cookies
- NEXT_LOCALE — remembers your language (1 year).
- wabiro_consent — remembers your analytics choice (6 months).
- Supabase authentication cookies — only if you create an account, to keep you signed in.
- PostHog cookies — only after you accept analytics.
No advertising cookies. No third-party tracking pixels.
Analytics (with consent only)
If you accept, we use PostHog (hosted in the European Union) to understand which pages and steps help people: page views and product events such as "test started" or "share clicked". We never send your answers, your scores, your profile, a partner's name or any free text. Session recording is disabled. You can withdraw consent at any time from the footer.
Sub-processors
- Vercel — hosting.
- Supabase — database and authentication.
- Stripe — payments and receipts.
- PostHog — analytics, only with consent.
Retention
- Pending (unpaid) orders: deleted after 48 hours.
- Share links and synced results: until you delete them.
- Paid orders and reports: kept as long as legally required for accounting, then deleted.
Your rights
Depending on where you live (GDPR, UK GDPR, CCPA and similar laws), you can access, correct, export, delete or object to the processing of your data. Most of this is self-service: "Delete my data" on a result page, and export or delete from your account page. For anything else, e-mail hello@wabiro.com. You can also lodge a complaint with your local data protection authority.
Children
The Service is intended for people aged 16 and over.
Changes
We will update the date at the top of this page and, for significant changes, show the consent banner again.