The short version: We collect very little. Your quiz answers are sent to our servers to be scored and then discarded — nothing that identifies you is ever stored. We use privacy-first analytics that collect no personal data. We don't sell your data. Ever.
1. Information We Collect
1.1 Quiz and Snapshot — Transmitted for Server-Side Scoring
When you submit the assessment or Snapshot, your answers are sent to our servers to calculate your results. This is true for all tiers, including the free 40-question and 12-question Snapshot assessments.
For the free tier: your answers are used immediately to score your result and nothing is retained — no response data is written to any database after scoring is complete.
For extended tiers (80-question, 150-question, Couples): item responses may be stored as an anonymous row only if you explicitly opt in to our calibration program (see Section 11). Without that opt-in, extended-tier answers are handled identically to the free tier — scored and discarded.
On every tier, your IP address is stripped server-side before any data touches a database. No name, email address, account identifier, session ID, device fingerprint, or precise timestamp is ever stored alongside your answers. Your results are returned to your browser and stored in your browser's local storage.
1.2 Checklist and Aftercare — Processed Locally Only
The following tools are processed entirely in your browser. The data involved is never transmitted to our servers:
- Your Yes/No/Maybe checklist entries
- Your aftercare protocol details
All processing for these tools happens locally. Results are stored in your browser's local storage only. We have no technical access to this data.
1.3 Analytics Data (Anonymous)
We use GoatCounter, a privacy-first analytics service, to understand how the Service is used. This tool:
- Does not use cookies
- Does not collect personal information
- Does not track you across websites
- Does not store IP addresses
- Collects only aggregate data: page views, referral source, browser type, country (not city), and device type — never tied to an individual
- Is fully GDPR and CCPA compliant without requiring a cookie consent banner
1.4 Information You Voluntarily Provide
If you contact us via email, we will receive the content of your message and your email address. We use this solely to respond to your inquiry.
1.5 Technical Data
Standard web server logs may capture your IP address, browser type, and pages visited for security and operational purposes. Logs are retained for no more than 30 days and are not used for marketing.
2. How We Use Information
We use the limited information we collect to:
- Operate and improve the Service
- Understand aggregate usage patterns (via anonymous analytics)
- Respond to support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not use your information to build profiles about you, target you with advertising, sell or rent your data to any third party, or contact you with marketing.
3. Cookies and Local Storage
Cookies
We use no advertising or tracking cookies. Our analytics tool is cookieless. We may use a strictly necessary session cookie if required for security purposes. No consent is required for strictly necessary cookies under GDPR.
Local Storage
After scoring, your quiz results are saved in your browser's local storage so you can access them later without an account. This locally stored data:
- Exists only on your device
- Can be deleted at any time by clearing your browser data or local storage
- Is not accessible to us once written to your browser — we have no mechanism to read or retrieve it
Note: submitting the quiz transmits your answers to our servers for scoring (see Sections 1.1 and 10). What is saved to local storage is your scored results — returned from the server and then held in your browser. The two steps are distinct: transit for scoring, then local storage of the output.
4. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| GoatCounter | Anonymous usage analytics | No personal data |
| Hostinger | Web hosting | Server logs (IP, standard access logs) |
We do not currently use Google Analytics, Facebook Pixel, any advertising networks, or any data brokers. When payment processing is introduced (Phase 2), this policy will be updated.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Browser local storage (your data) | 30 days (or until you clear it) |
| Server/access logs | 30 days |
| Support emails | Duration of issue + 1 year |
| Anonymous analytics | Indefinite (aggregate only) |
6. Children's Privacy
The Service is strictly for adults 18 and older. We do not knowingly collect any information from anyone under 18. If we become aware that a person under 18 has provided us information, we will delete it immediately. Contact us at info@150layers.com if you believe a minor has accessed the Service.
7. Your Rights
For All Users
- Access: Request information about what personal data we hold
- Deletion: Request deletion of any personal data we hold
- Correction: Request correction of inaccurate data
- Opt-out: Opt out of any future communications
Since we collect minimal personal data in Phase 1, most users will find that we hold no personal data about them beyond server logs.
For European Users (GDPR)
You have the right to access (Article 15), rectification (16), erasure (17), restriction of processing (18), data portability (20), objection (21), and to lodge a complaint with your national data protection authority.
Your quiz answers reveal information about your sex life and sexual preferences. Under Article 9 of the GDPR and UK GDPR, this is "special category" personal data, which receives heightened legal protection.
How we process this data: When you submit the assessment or Snapshot, your answers are transmitted to our servers for scoring. For the free tier, nothing is retained after your results are returned — answers are used transiently and never written to a database. For extended tiers, item responses may be stored as an anonymous row only if you have explicitly opted in (see Section 11).
Legal basis under Article 6: We rely on Article 6(1)(b) — processing necessary to provide the service you explicitly requested. You submit the quiz to receive a scored result; the transient server-side scoring is inherent to that service.
Legal basis under Article 9: Because your answers constitute special category data, Article 9(2) applies. We rely on Article 9(2)(a) — explicit consent. By deliberately submitting a kink personality assessment for the stated purpose of receiving scored results, we consider you to have given explicit consent to that specific, limited processing.
⚠️ Note for users: if you wish to withdraw consent, you may close the assessment before submitting. Submitting is the act that triggers processing; prior to submission, no data leaves your browser.
Extended-tier stored data (opt-in only): If you opt in to sharing your responses for calibration (Section 11), the stored data is genuinely anonymous — no IP address, session identifier, or linkable field is retained alongside your answers. Under GDPR Recital 26, genuinely anonymous data falls outside the GDPR's scope. We maintain that this stored data is not personal data and therefore neither Article 6 nor Article 9 is engaged for it. Your right of erasure, access, and data portability cannot practically be exercised against anonymous data, because there is no stored record that can be linked to you — which is by design.
For California Users (CCPA)
California residents have the right to know what personal information is collected, know that we do not sell personal information, opt out of any future sale (we don't sell data), delete personal information, and non-discrimination for exercising these rights. Contact us at info@150layers.com to exercise any right. We respond within 30 days.
8. Security
We implement reasonable technical and organizational measures to protect the Service and any data transmitted through it. No method of transmission over the internet is 100% secure. We encourage you to use the Service from trusted devices and networks.
9. International Users
The Service is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US. We treat all user data in accordance with this Privacy Policy regardless of location.
10. How Your Answers Are Processed
When you complete any assessment on 150 Layers, your responses are submitted to our servers to calculate your results. This applies to all tiers, including the free 40-question assessment.
What happens to your answers
Your responses are transmitted over an encrypted connection and used immediately to compute your results. For the free 40-question assessment and 12-question Snapshot, no response data is written to our database — your results are returned to your browser and nothing is retained server-side after scoring is complete.
What we strip before any processing
Your IP address is never written to any log or database in connection with your responses. We do not associate your responses with any session identifier, account, device fingerprint, browser data, or other information that could be used to identify you.
Your results
Your results are returned to your browser and stored in your browser's local storage so you can access them without an account. We do not store your results on our servers.
No account, no identity
No account is required at any point. There is no mechanism by which your responses can be linked to you as an individual.
11. Research Data Sharing (Optional — Deep Assessment Tiers)
When you access the extended 80-question, 150-question, or Couples assessment, you will be offered the option to share your anonymous responses to help us improve the assessment instrument. Participation is strictly voluntary. Declining does not affect your access to the free 40-question assessment.
What we store if you opt in
We store your item-level responses (each question ID and your 1–7 rating), the tier you completed (80-question, 150-question, or Couples), the calendar week you finished (not the day or time), and any demographic details you choose to provide (see below). All of this is stored as a single anonymous record with no identifying field attached.
What we never store
Your IP address is stripped by our server before any data is written to our database. We do not store your name, email address, account identifier, session ID, cookie, browser fingerprint, device identifier, or any timestamp more precise than the calendar week. These fields are absent from our database schema — they cannot be retroactively attached to an anonymous record.
The calibration dataset is never joined to any other data we hold. It is maintained separately from analytics data, mailing lists, and every other data source. This is the structural constraint on which the anonymity of the dataset depends.
Why we collect it
The data is used exclusively to calibrate and improve the assessment: refining question quality, improving scoring weights, and checking for psychometric validity. We do not use it for marketing, advertising, or any purpose unrelated to assessment development.
Optional demographic fields
You may optionally provide your age range (18–24, 25–34, 35–44, 45–54, 55+), gender, sexual orientation, and experience level, using the broad categories shown on the consent screen. All demographic fields are optional. We do not collect your precise age, specific location, or any fine-grained identity attribute.
Anonymous data and data protection law
Because no IP address, session identifier, or linkable field is stored alongside your responses, we believe this data does not constitute personal data within the meaning of the UK GDPR, EU GDPR, or the California Consumer Privacy Act. We disclose it here in the interest of transparency, even though we believe these legal regimes do not require us to do so.
Third-party sharing
We do not sell, rent, or share this data with any third party for any purpose. It is used internally for assessment development only.
Retention
We retain calibration responses for the active life of the calibration project, up to a maximum of three years. Once calibration is complete and scoring weights are finalized, source response rows are deleted and only aggregate outputs are retained. We review the dataset annually.
Couples tier
In the Couples assessment, each partner's consent is obtained independently. Each partner's responses are stored as a completely independent, anonymous record. We do not store any information linking two partners' responses together. The compatibility comparison between partners occurs in your browsers only and is never transmitted to our servers in linked form.
12. Dating-Site Waitlist (Optional)
We offer an optional email waitlist for our upcoming dating product. This is entirely separate from the assessment and is not connected to the assessment flow in any way.
What we collect
If you choose to join, we collect your email address only.
How it is used
Your email will be used to notify you when the dating site opens. We will not use it for marketing, surveys, or any purpose unrelated to that one notification, unless you explicitly ask us to.
What is not collected
We do not link your email address to your assessment results in any way. The dating waitlist is stored in a completely separate database table with no connection to assessment data or calibration responses. We have no technical means of associating your email address with your quiz answers.
Third-party sharing
We do not sell, rent, or share your email address with any third party.
Deletion
To remove your email address from the waitlist at any time, email us at info@150layers.com with the subject "waitlist removal." We will delete your address within 7 days and confirm by reply.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. This policy will be substantially updated when user accounts and payment processing are introduced in Phase 2.
14. Contact
Discover URS, LLC
Email: info@150layers.com
Website: 150layers.com
We aim to respond to all privacy inquiries within 30 days.