How MyType Quiz collects, uses and protects your information, and how to exercise your data rights
2026/11/11
Last Updated: November 11, 2026
This Privacy Policy explains what information MyType Quiz ("MyType", "we", "us") collects when you use mytypequizfyi.com (the "Service"), why we collect it, who we share it with, and the rights you have over it. MyType has no user accounts: you can take the quiz without signing up, and paid reports are bought as a guest.
The data controller for the Service is:
We only collect what the Service needs.
| Category | What it includes | When |
|---|---|---|
| Quiz activity | Which portraits were shown and which you picked, the portrait set you chose (women or men), your result type and language. No name, email or photo is required. | When you take the quiz |
| Report data | Your quiz picks for that result, a random private report ID, and the AI reading text if you bought one | When you start a purchase |
| Purchase details | The email address you enter at checkout, order ID, product, amount, currency and payment status, received from our payment provider. We never receive or store card numbers. | When you buy a report |
| Restore requests | The email address you enter on the Restore purchase page and the time of the request | When you ask us to resend your report links |
| Messages to us | Your name, email address and message | When you use the contact form |
| Usage analytics | Pages viewed, referrer, approximate location (country or region), device and browser type, and in-site events such as starting the quiz, finishing a round, sharing a result or starting a checkout. Collected through Google Analytics and Umami. Custom event fields describe actions, product labels, result types and pick counts, without email addresses, individual portrait selections or private report identifiers. Google Analytics automatic pageviews may also process page URLs and referrers. | When you visit the Service |
| Technical data | IP address, browser type and request logs processed by our hosting provider for delivery and security | When you visit the Service |
| Data on your device | Your language and theme preference, and a list of reports you opened on this device (stored in your browser only) | When you use the Service |
We do not ask for, and you should not send us, sensitive personal data. The portraits in the quiz are AI-generated images of fictional people, not photos of real people.
| Purpose | Legal basis |
|---|---|
| Run the quiz and show your result | Legitimate interests (providing the service you requested) |
| Create, deliver and restore paid reports, including the AI reading | Performance of a contract |
| Process payments, refunds and chargebacks via our payment provider | Performance of a contract; legal obligation |
| Answer messages and support requests | Legitimate interests |
| Understand how the Service is used and improve it (usage analytics) | Consent for Google Analytics cookies where the law requires it (EEA, UK and Switzerland); otherwise legitimate interests |
| Show how common each type is | Legitimate interests (using anonymous, aggregated counts only) |
| Keep the Service secure and prevent abuse | Legitimate interests |
| Meet tax, accounting and legal requirements | Legal obligation |
Quiz tallies used for statistics contain no information that identifies you. We do not use your information for advertising, we do not send marketing emails, and we do not make decisions about you that have legal or similarly significant effects.
We use storage that is strictly necessary or remembers your settings, plus analytics. We do not use advertising cookies and we do not sell analytics data.
| Name | Type | Purpose | Duration |
|---|---|---|---|
NEXT_LOCALE | Cookie (functional) | Remembers your language | Until you clear it |
theme | Browser storage (functional) | Remembers light or dark mode | Until you clear it |
mytype.reports | Browser storage (functional) | Lists report links opened on this device | Until you clear it |
mytype.quiz-entry | Session storage (analytics) | Remembers the public landing-page path for aggregated quiz start and completion events, without query strings or report IDs | Until the tab session ends or you clear it |
mytype.consent | Browser storage (strictly necessary) | Remembers your cookie choice | Until you clear it |
mt_consent_region | Cookie (strictly necessary) | Remembers whether your region requires cookie consent. Holds only "0" or "1". | 1 day |
_ga, _ga_* | Cookies (analytics, Google Analytics) | Distinguish visitors and sessions to measure how the Service is used | Up to 2 years |
We also use Umami for analytics, which does not set cookies or store anything on your device. If you visit from the EEA, the UK or Switzerland, Google Analytics loads only after you accept it in our cookie banner. Everywhere else it is on by default. You can change your choice at any time with Cookie settings in the footer, and you can also use the Google Analytics opt-out add-on. The Service works the same without analytics cookies.
Our hosting provider may set strictly necessary security cookies to protect the Service from attacks.
Umami page and event URLs have query strings, fragments and private report identifiers removed. Our custom Google Analytics events also sanitize those page fields. Google Analytics automatic pageviews are separate and may include the URL of a report page. You can control whether Google Analytics is enabled through Cookie settings.
We do not sell or rent your personal information. We share it only with service providers that process it on our behalf:
We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy will continue to apply.
We protect information with HTTPS/TLS encryption in transit, encrypted database connections, encryption at rest provided by our database host, least-privilege access to production systems, and secrets that are never stored in source code. Private report links use 128-bit random identifiers. If we discover a personal data breach that is likely to put you at risk, we will notify affected users and the relevant authorities without undue delay and, where required, within 72 hours of discovery.
| Information | How long we keep it | What happens next |
|---|---|---|
| Anonymous quiz tallies | Indefinitely | They contain no personal data |
| Report data for unpaid checkouts | 90 days | Deleted |
| Paid reports, AI readings and purchase details | 3 years from the purchase date, so you can restore access | Deleted, or anonymized where records must be kept for tax and accounting purposes |
| Restore requests | 30 days | Deleted |
| Contact-form messages | 24 months | Deleted |
| Usage analytics | Up to 14 months in Google Analytics; aggregated statistics in Umami | Deleted or kept only in aggregated form |
| Hosting request logs | Up to 7 days | Deleted by our hosting provider |
Our payment provider keeps its own transaction records as required by law.
Depending on where you live, you have the following rights over your personal information:
| Right | What it means |
|---|---|
| Right to be informed | Know what we collect and why. This policy explains it. |
| Right of access | Get a copy of the personal information we hold about you. |
| Right to rectification | Correct inaccurate or incomplete information, such as a mistyped email address. |
| Right to erasure | Ask us to delete your personal information. |
| Right to restrict processing | Ask us to pause using your information while a request or complaint is reviewed. |
| Right to data portability | Receive your information in a machine-readable format (JSON). |
| Right to object | Object to processing based on our legitimate interests. |
| Right to withdraw consent | Where we rely on consent, withdraw it at any time. This does not affect earlier processing. |
How to make a request. Email support@mytypequizfyi.com or use our contact form, and include the email address you used at checkout and, if you have it, your report link. To protect your data, we confirm your identity by replying to the email address on the purchase before acting on a request.
Response time. We acknowledge requests within 7 days and complete them within 30 calendar days. If a request is complex, we may extend this by up to 60 more days and will tell you why. Requests are free unless they are clearly unfounded or excessive.
You also have the right to lodge a complaint with your local data protection authority.
We do not send marketing emails. The only emails we send are ones you ask for, such as restore-purchase links, and replies to your messages. Our payment provider sends payment receipts.
We and our providers may process information outside your country, including in the United States. Where personal data from the EEA, UK or Switzerland is transferred, we rely on our providers' Standard Contractual Clauses or other lawful transfer mechanisms. Data sent to DeepSeek for AI readings contains no personal information.
The Service is intended for people aged 16 and over. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has given us personal information, contact us and we will delete it.
The Service links to other websites, such as research papers and our payment provider. We are not responsible for their privacy practices.
We will post any changes on this page and update the "Last Updated" date. For material changes, we will give at least 15 days' notice on the Service before they take effect.