Privacy policy

1. Who we are

SixteenKind (the website at sixteenkind.com) is operated by SEO Rank SERP LLC, a Delaware limited liability company, located at 8 The Green, Dover, Delaware 19901, USA (“SixteenKind”, “we”, “us”). We are the “controller” (in GDPR terms) or “business” (in US state privacy law terms) responsible for the personal information described in this policy.

This policy applies to the SixteenKind website and the services offered on it. It does not apply to websites or services run by others, including Google and Stripe, even when you reach them from our site. You can contact us about anything in this policy at build100k@gmail.com.

2. What we collect

Test answers and results

• When you take a test, your in-progress answers are kept in your browser’s session storage so a page refresh does not lose your place. They are removed when you finish the test or close the tab.
• When you finish a test, your results (for example your type, your preference percentages, your cognitive function scores, your stress check result, your closest type matches and which tests you have completed) are saved in your browser’s local storage so you can come back to them.
• If you are signed in, we also save your latest result for each test to your account in our database, with the date you completed it, so your results appear on any device where you sign in. When you first sign in, results already saved in that browser are copied to your account. We store the results, not your individual answers. If you are not signed in, your results stay on your device and are not sent to our database.
• For the SixteenKind Pro In-Depth Assessment, your answers are sent to our server to be scored. We save the scored result to your account; we do not keep the individual answers.
• Result pages put your scores in the page address (for example ?p=70-67-30-37-63) so you can share or bookmark them. Anyone you give that link to can see those scores. The link does not contain your name or email address. Because the scores are in the address, they reach our hosting provider when the page loads, in the same way as any other web address (see “Technical data” below).

Account information (only if you sign in)

You need an account only to buy and use SixteenKind Pro, or if you want your results saved across devices. We currently offer sign-in with Google. When you sign in, Google shares the basic profile information you approve (we request only the standard “openid”, “email” and “profile” permissions). We store:

• your name, email address and profile picture link, as provided by Google;
• a Google account identifier and the technical sign-in data Google returns (such as tokens used to complete sign-in). We do not use these to read your email, contacts, files or anything else in your Google account;
• an internal account ID that we create for you.

Purchase information

When you buy SixteenKind Pro, you pay on a checkout page hosted by Stripe. Stripe collects your payment details (such as card number, expiry date, billing country and postcode) directly. We never see or store your full card number. We send Stripe your email address and your internal account ID so the payment can be linked to your account, and we receive and store a purchase record: the Stripe checkout reference, amount, currency, status (paid or refunded) and date.

Messages you send us

If you email us, we receive your email address and whatever you choose to include, and we keep the conversation so we can help you.

Technical data

Like almost every website, our hosting provider (Vercel) automatically processes technical information when you visit, such as your IP address, browser type, the pages and addresses you request, the referring page and the date and time. This is used to deliver the site, keep it secure and fix errors, and is kept in logs for a limited period.

Usage statistics (analytics)

We use Vercel Web Analytics to understand, in aggregate, how the site is used: which pages are visited and a few key steps, namely when a test is started or completed, when the pricing page is viewed, when checkout is started and when a purchase is completed. For each page view or step, it records the page address (we remove everything after the “?” first, so your scores and payment references are never sent), the referring page, the time, your approximate location (country, region and city, worked out from your IP address), your device type, operating system and browser. Event details are limited to things like which test it was, or the currency and amount of a purchase. We never send your name, email, answers, scores or type.

This analytics does not use cookies or store anything on your device. Vercel counts visits using a short-lived code calculated from the request, which is discarded after 24 hours, and we only see aggregated statistics, not individual visitors. It is not used to track you across other websites, and we do not use advertising trackers or build profiles of your browsing.

What we do not collect

We do not ask for or knowingly collect sensitive information such as health data, government ID numbers or precise location. We do not buy personal information from data brokers.

3. How we use it and our legal bases

We use personal information only for the purposes below. If you are in the European Economic Area (EEA) or the United Kingdom, the law requires us to tell you the legal basis for each use.

We do not use your information for automated decision-making that has legal or similarly significant effects on you, and we do not send marketing emails. Where we rely on legitimate interests, you can object (see “Your privacy rights”).

4. Who we share it with

We do not sell personal information. We share it only with service providers that help us run SixteenKind, and only as needed for them to do that work:

Stripe and Google also act as independent controllers for some of the information they handle (for example, Stripe for fraud prevention and its legal obligations as a payment provider, and Google for your Google account). Their own privacy policies apply to that use.

We may also disclose personal information when it is reasonably necessary to:

• comply with the law, a court order or a valid request from a public authority;
• protect the rights, safety or property of our users, the public or us, including to prevent fraud;
• complete a merger, acquisition or sale of all or part of our business, in which case the information would remain protected by the commitments in this policy or equivalent ones; or
• carry out your instructions or with your consent.

5. International transfers

SEO Rank SERP LLC is based in the United States, and our service providers process data in the United States and possibly other countries. If you are outside the US, your information will be transferred to and processed in countries whose data protection laws may differ from yours. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses (and the UK addendum) included in our providers’ data processing terms, or the provider’s certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where applicable. You can contact us for more information about these safeguards.

6. How long we keep it

• Results in your browser: until you clear them. We cannot see or delete them for you; see “Cookies and browser storage”.
• Results saved to your account: until you delete them (you can do this at any time on your account page) or your account is deleted.
• Account information: for as long as your account exists. If you ask us to delete your account, we delete it within 30 days, except for records we must keep (below).
• Purchase records: for as long as we need them for tax, accounting and legal purposes, which is usually several years after the purchase.
• Sign-in cookie: up to 30 days after your last visit, or until you sign out.
• Hosting logs: for the limited period set by our hosting provider.
• Usage statistics: the short-lived visitor code is discarded after 24 hours; the aggregated statistics are kept for the period our analytics provider offers on our plan.
• Emails with us: as long as needed to deal with your request and any follow-up, then deleted or archived.

7. Security

We use reasonable technical and organizational measures to protect personal information. The site is served only over encrypted HTTPS connections. Sign-in cookies are encrypted, marked secure and not readable by page scripts. Pro access is checked on our server rather than trusted from your browser, and access to our database and provider accounts is limited and protected. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities where the law requires.

8. Your privacy rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it (access);
• have inaccurate information corrected (correction);
• have your information deleted (deletion);
• receive your information in a portable, machine-readable format (portability);
• object to, or ask us to restrict, certain uses of your information;
• withdraw any consent you have given, without affecting earlier use;
• opt out of the sale or sharing of personal information (we do not sell or share it; see below); and
• not be treated differently for exercising your rights.

How to exercise your rights

Email build100k@gmail.com from the email address on your account, and tell us what you would like us to do. If you do not have an account, tell us what you would like and how we can identify information about you. We may need to confirm your identity before acting, for example by replying to the email address on your account. You may use an authorized agent; we may ask for proof that they are authorized and may ask you to confirm your identity directly.

There is no charge. We will confirm receipt within 10 business days and respond within one month (EEA/UK) or 45 days (US states). Where the law allows, we may extend this period once if a request is complex, and we will tell you if we do. If we cannot fully meet a request, we will explain why.

Your results: you can delete the results saved to your account at any time on your account page. Results kept in your browser can be deleted by clearing this site’s data in your browser settings.

Complaints and appeals

If you are not happy with our response, reply to tell us and we will review our decision (this is your right to appeal under several US state laws). If you are in the EEA or UK, you also have the right to complain to your local data protection authority; in the UK this is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to address your concern first.

9. Notice for California and other US states

This section is for residents of California and other US states with consumer privacy laws. In the last 12 months we have collected the following categories of personal information, for the purposes and from the sources described above:

• Identifiers: name, email address, account ID, IP address.
• Commercial information: records of Pro purchases and refunds.
• Internet or other electronic network activity: technical request data processed by our host, and cookieless, aggregated usage statistics (pages visited and key steps such as starting a test).
• Inferences: the personality results you generate. These stay in your browser, and are also stored on your account if you are signed in.

We disclose these categories only to the service providers listed in “Who we share it with”, for the business purposes described in this policy. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA). We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that would give you a right to limit it.

10. Do Not Track and Global Privacy Control

Because we do not track you across websites or use your information for targeted advertising, there is nothing for a Do Not Track or Global Privacy Control (GPC) signal to switch off. If your browser sends a GPC signal, we treat it as a valid request to opt out of any sale or sharing of your personal information, which matches what we already do.

11. Cookies and browser storage

We use only a small number of strictly necessary cookies (mainly to keep you signed in and protect sign-in from forgery) and browser storage to keep your results and test progress on your device. We do not use analytics or advertising cookies; our usage statistics are cookieless (see “Usage statistics” above). Our cookie policy lists every cookie and storage item we use and explains how to control them.

12. Children

SixteenKind is not directed to children under 13, and we do not knowingly collect personal information from them. You must be at least 13 to use the site, and at least 16 to create an account if you live in the EEA or UK. If you are under 18, please involve a parent or guardian before buying anything; purchases are intended for adults or with a parent’s or guardian’s permission. If we learn that we have collected personal information from a child below the relevant age without proper consent, we will delete it. If you believe a child has given us personal information, please contact us at build100k@gmail.com.

13. A note about personality results

Personality results can feel personal. They describe preferences you reported about yourself and are meant for self-reflection and entertainment. They are not a psychological or medical assessment, and we do not treat them as health information. Think before sharing a results link, because anyone with the link can see the scores in it. We never publish your results.

14. Changes to this policy

We may update this policy as the site or the law changes. We will post the new version on this page and update the “Last updated” date. If a change materially affects how we use personal information we already hold, we will give notice on the site and, where appropriate, by email before it takes effect.

15. Contact us

For privacy questions or requests, contact:

• SEO Rank SERP LLC
• 8 The Green, Dover, Delaware 19901, USA
• Email: build100k@gmail.com