Privacy Policy

1. Who We Are

We're the team behind realenneagramtest.com — a free personality test that combines the Enneagram framework with attachment style theory. We built it because we wanted a tool that goes deep without charging you or harvesting your data.

Questions about this policy? Reach us via our contact page.

2. What We Collect (and What We Don't)

Your test answers: Scored entirely in your browser. They never touch our servers. We genuinely cannot see your results — by design, not just by promise. When you close the tab, they're gone (unless you saved progress to resume later — see below).

No account, no email: We don't ask for your name, email address, or any contact details. There's no registration of any kind.

Anonymous site analytics: We use Google Analytics 4 (GA4) to track things like how many people visit, which pages they read, and roughly where in the world they are (country/city level — not your precise location). This helps us understand what's working and what to improve. GA4 never receives your test answers or results. It runs in a background worker so it doesn't slow your experience.

Browser storage: We save a few small pieces of data in your browser's local storage — purely so the site works well. More detail in Section 4 below.

3. How We Use What We Collect

The only data we collect is anonymous analytics — page views, session length, device type, rough location. We use it to:

• See which pages and features people actually use, so we can improve them.
• Catch performance issues or broken pages we might otherwise miss.
• Understand the broad geographic reach of the site.

That's it. We don't profile you, don't serve you ads, and don't sell or share any data with third parties for commercial purposes. Ever.

4. Cookies and Browser Storage

We don't use advertising cookies or any cross-site tracking.

What we store in your browser:

• Test progress — if you're mid-test, your answers are saved locally so you can pick up where you left off. This is cleared as soon as you finish or start fresh.
• Accent theme — the colour theme randomly assigned to your session is remembered so it doesn't change on you mid-visit.
• Homepage variant — we rotate a few headline versions so you don't see the same one every time. We remember which one you last saw.

None of this contains personal information and none of it can be read by third parties.

Google Analytics cookies: GA4 sets _ga and _ga_* cookies to count unique visits and sessions. These are set by Google, not us, and last up to 2 years. If you'd rather opt out, the Google Analytics Opt-out Add-on works in all major browsers.

5. Third-Party Services We Use

Three external services touch this site. Here's exactly what each one does:

• Google Fonts — loads the typefaces used on the site. Google may log your IP address as a standard part of serving fonts. Google's Privacy Policy →
• Google Analytics 4 — anonymous site usage stats as described above. Runs in a background worker. Your test data is never shared. Google's Privacy Policy →
• Cloudflare Pages — hosts the website. Cloudflare processes standard server logs (IP address, browser type, timestamp) for security and infrastructure purposes. Cloudflare's Privacy Policy →

No Facebook Pixel. No advertising networks. No data brokers.

6. How Long We Keep Data

We don't store personal data on our servers — there's nothing to delete on our end. Your test progress lives only on your device and disappears when you clear your browser storage.

Google Analytics holds anonymised event data for up to 14 months by default, after which it's automatically deleted.

7. Your Privacy Rights

Depending on where you live, you may have rights over your personal data — including the right to access it, correct it, delete it, or object to how it's processed. Because we don't collect personally identifiable information directly, most of these rights are satisfied by the way the product is built.

For anything GA4-related, the opt-out add-on gives you direct control. For any other privacy request, contact us and we'll respond within 5 business days.

California (CCPA): We don't sell personal information. We don't share it for targeted advertising.

EEA and UK (GDPR / UK GDPR): Our lawful basis for analytics is legitimate interests — understanding how the site is used so we can improve it. You have the right to object at any time.

8. Children's Privacy

This service is intended for users aged 13 and older (16 in some jurisdictions). We don't knowingly collect information from children. Since we don't collect personal data from anyone, this is largely handled by how the product works. If you think a child has shared personal information with us, get in touch and we'll address it right away.

9. Security

Because your answers are processed locally and never sent to our servers, there's no database of your personality data that could be breached. The architecture is the security.

For the limited data that passes through third-party services — analytics and hosting — we rely on the security practices of Google and Cloudflare, both of which maintain industry-standard protections.

10. International Transfers

We're based in the United States. Google Analytics data may be processed in the US and other countries where Google operates. Google uses Standard Contractual Clauses for transfers from the EEA and UK. See Google's Privacy Policy for full details.

11. Changes to This Policy

If we make meaningful changes to this policy, we'll update the date at the top. We'll always keep this page as the authoritative version. Continuing to use the site after a change means you accept the updated policy.

12. Get in Touch

Privacy questions, concerns, or requests — we want to hear them. Use our contact page and we'll get back to you within 5 business days.