Privacy
A short notice, because there is very little to describe.
Your answers #
The assessment engine runs in your browser. Your answers, the findings and any file you download never leave your device, are never transmitted to this service, and are not stored by it. Closing the page discards them. There is no account, no login and no submission.
This is a property of the architecture rather than a promise about conduct: the site is static files, there is no server-side code, and the build refuses to publish if any is introduced.
What the host necessarily sees #
Serving a page involves your IP address reaching the hosting provider, Cloudflare, which processes it to deliver the page and to protect against abuse, acting as a processor for that purpose. Standard request logs may be retained by the provider for a short period under its own terms.
Analytics, and what it cannot see #
The informational pages, this one among them, are measured with Google Analytics and Cloudflare Web Analytics, and only with your consent. The measurement scripts are not in these pages: no page in the built artefact carries a third-party script, and a build gate fails if one appears. Both are loaded at the edge by Cloudflare Zaraz, which shows the consent choice, holds every event until you have answered, and sends nothing to either processor if you decline or ignore it. Declining costs nothing and the choice can be reopened at any time from Privacy choices in the footer. What Google receives, on consent: the page path, time on page, and the device characteristics any request reveals; retention at Google is set to two months, the minimum offered. What Cloudflare Web Analytics receives is the same kind of page-level measurement, kept as aggregates; it sets no cookies of its own.
The assessment page, at its own address, is not measured at all, and this is structural rather than a setting: the measurement loader is never injected there, the beacon in this repository refuses that page by its first line, and a legacy link opening at the root is forwarded to the assessment before anything else runs. A share link carries your answers in the address fragment, and the page where fragments occur must never contain a channel that could read one. The method page describes the fragment; the arrangement here is what keeps its promise true after analytics exists.
No advertising, no tracking pixels beyond the above, and one item of local storage holding your light or dark preference, which stays in your browser and identifies nobody. See the cookies note.
Your rights #
Because no personal data is collected or stored here, there is nothing to access, rectify, erase or port. If you write to the operator, that correspondence is personal data held on the basis of legitimate interest in answering you, kept no longer than needed, and deletable on request.
You may complain to a supervisory authority; in Poland that is the President of the Personal Data Protection Office.