Privacy policy

Last updated: October 28, 2026

Short version: your answers and the chats you analyse never leave your device. If you choose to share or buy something, we store a short summary — a score, a profile or a few aggregate numbers — never your answers or messages. We use analytics only with your consent, and you can delete everything.

Who is responsible

Wabiro operates Wabiro (the "Service"). For any question about this policy or your data, write to hello@wabiro.com.

What stays on your device

When you take a test, your answers, your progress and your result are stored in your browser's local storage. The score is computed in your browser. This data is not transmitted to us. You can erase it at any time with "Delete my data" on a result page, or by clearing your browser storage.

To keep the same premium presentation throughout your visit and on return, we save only an A or B presentation preference on your device. It contains no visitor identifier. Local result timestamps prevent repeat counting of the same premium step; these timestamps are never sent to the anonymous counter. Only the calendar day of premium eligibility accompanies a purchase for cohort reporting. Purchase ownership proof stays on this device so refreshing the confirmation page can securely check payment again with the server.

Chats you analyse (Group Chat Court, Situationship Autopsy) are opened and analysed inside your browser, in a background worker. The export file, the messages, the names, the phone numbers and the chat's name are never uploaded — not to our servers, not to analytics, not to Stripe, not to error reporting. When the analysis ends, only aggregate numbers (counts, times of day, awards) and the participant list stay in your browser so the result can be shown again; you can delete them from the result page.

Dating Pool Calculator filters (age range, height, income, education) are applied in your browser and not sent to us.

Your Wabiro ID is a list kept in your browser of the results you got: the experience, the result name, at most one number (for example a score) and a date — never answers or chat content.

What we store on our servers, and when

We only create server-side records when you explicitly take one of these actions:

Creating a share link or a challenge: we store the test identifier, your score, your category, your main profile name, the name you typed for the challenge (if any) and a random share token. Never your answers. On tests played for fun (every test except the purity and red-flag tests), anyone who has your link can also see your score per dimension (for example "Crowd energy 72/100"), so the person you challenge can see where the two of you differ. You can delete the link at any time from your result page ("Delete my share link"); the public page, its image and the comparison stop working immediately.
Sharing a fandom quiz result: we store the quiz, its version, the result shown (a character, a faction or a score), its percentage, the first name you typed (if any) and — for personality-style quizzes — how strongly you lean on each of the quiz’s traits, rounded to whole percents, so a friend’s result can be compared with yours. Never your answers. A squad link shows every member’s first name, role and result to anyone who has the link. You can delete your link at any time from your result page.
Curiosity games (Your Other Life, How Normal Are You?, The Decision Game): your choices, answers and results stay on your device. A share link stores only the outcome you share — the name of your other life; your habit map as five coarse positions; or your decision-style portrait and one scene, plus your own choice in that scene only if you switch on “reveal my choice”. Never your answers. If you buy the Your Other Life unlock, we store a one-way fingerprint of the story version and your six choices (not the choices themselves), tied to a hashed token kept on your device and to the order, so the purchase reopens that exact story.
Adding your answers to a community tally (How Normal Are You?, The Decision Game — optional, only when you tap “Add my answers”): the server adds one to a counter for each choice you made and one to the number of contributions for that version of the game. It does not store your set of answers, a row about you, the time of your contribution, your IP address or any identifier. Figures are published only once a version has 200 contributions, and a choice picked by fewer than 10 people never gets a percentage. This is separate from analytics consent.
How sharing spreads: for each share link, room or shared result we also keep a small record with no information about you: the test, the result name that was shared, and which earlier link or room it came from. It lets us measure how many new results each share leads to, across several steps. It contains no score, no answer, no name you typed and no identifier, and it is kept for 2 years even after the link itself is deleted.
Playing in a room: the name you type for the room, whether you are the host, and your result on that test — the headline score or result name and your score per dimension or per profile — never your answers. Everyone who has the room's link or code sees the names in the room, and everyone's results once the room is revealed; results stay hidden before that. A hash of a random device secret lets you leave the room: leaving deletes your name and your result. Rooms are deleted 30 days after they are created.
Comparing with someone (two-person test): we store one average per dimension for each participant (eight numbers between 0 and 3), the invitation token and the comparison itself. Never an individual answer, and neither participant can see the other's averages.
Arriving through a shared result or a campaign: when you later share or buy, we keep a reference to the share link or the campaign label you came from, so we can count which shares lead to new results. This is a label, not an identity.
Where a purchase came from: when you buy something, we store with the order a few acquisition labels kept in your browser since your first visit — the kind of channel (search, social, a shared result, a campaign, a referral or direct), the public page you first and last landed on, the test it was about, campaign labels and the device type (mobile, tablet or desktop) — and the two-letter country code of your connection. No referrer address, no query string, no identifier. The labels are recorded in your browser only if you accepted analytics; the country code comes from our hosting provider.
Buying a report: we store the test identifier, your aggregated result (index, dimension scores, profile keys) so that the report can be generated, the order status and the e-mail address you enter on the Stripe checkout page (to send the receipt and let you recover the report). Payment card data is handled entirely by Stripe and never reaches us.
Running a Dating DeepScan: what you enter in the DeepScan (goal, apps, the numbers you choose to give, your bio, prompts and interests, and how you describe each photo), the photos you add and the diagnostic built from them. Photos are resized and re-encoded in your browser before upload (which removes location and camera data), stored in a private space with no public address, and only shown to you through links that expire after an hour. Conversations you paste are analysed in memory and reduced to counts (number of messages, questions, greetings, date suggestions); the text itself is never stored. You can delete a photo or a whole DeepScan at any time. DeepScans you did not buy are deleted automatically after 30 days (drafts after 7). If you are signed in, we also keep a few labels from your DeepScans (dating goal, last bottleneck) on your account page, where you can delete them. Nothing you enter in a DeepScan is sent to analytics.
Sharing a chat result, a dating-pool result or your Wabiro ID: we store the summary shown on the share page — for a chat, the verdict or effort pattern, a few totals or percentages, the award names and the labels you chose for the people (display names, initials or none; names that are phone numbers are always removed), plus the chat's name only if you tick the box; for the calculator, the resulting range and which filter mattered most (never the filters); for Wabiro ID, only the items you made public. With it: a random share token, a hash of a random owner token (to let you delete the link) and, if you arrived through another share, a reference to it. Never a message, an answer or a filter. You can delete these links at any time.
Unlocking a full chat report (Full Case File, Full Autopsy): we store which offer you bought, a one-way fingerprint of the analysed export computed from aggregate numbers only (number of people, message counts, first and last date — no names, no text), a hash of a random device token, the order status and the e-mail you enter on the Stripe checkout page. Stripe receives the order and product identifiers only — nothing about the chat. The full report itself is still computed on your device when you open or re-import the export.
Syncing your Wabiro ID (optional, signed-in accounts only): the same summary fields as on your device (experience, version, result name, at most one number, public or not, date), so you can restore them on another device. You can delete them at any time; they are deleted with your account.
Consent choices: an anonymous random identifier, your analytics choice, the policy version and a timestamp.
Creating an optional account: your e-mail address, used only to sign you in with a magic link, to list the reports and unlocks bought with that e-mail and, if you choose, to keep your Wabiro ID summaries.
Creator referral links: if you follow a Wabiro creator link, a first-party, HTTP-only cookie keeps the creator, test, campaign and content label for up to 30 days. We use it to attribute eligible paid purchases and calculate commission. The latest eligible creator link before purchase is used. We record creator-linked test starts, completions, paywall views, checkout starts, purchases and result shares; we do not use device fingerprinting.
Creator applications and accounts: if you apply, we store the contact, social profile, audience and application details you submit. Approved creators can sign in by email link and see their own link and earnings records. Creator payment and commission records are retained as accounting records.

All server-side records use random, unguessable identifiers. We do not store IP addresses with your results.

iOS launch list and Wabiro Insider

These are two independent, optional subscriptions. Requesting the iOS launch alert lets us send an ownership-confirmation email, a confirmation of enrollment and the announcement when the app is actually available. It does not subscribe you to marketing. Wabiro Insider requires a separate unchecked choice and its own email confirmation; it covers news, new tests, product launches, occasional premium offers and relevant Wabiro promotions. Confirmation links expire after 48 hours. Your choices do not affect access to tests or purchases. We do not import quiz participants or customers into these lists.

We keep your normalized email address, language, signup placement, the purpose and version of each consent, request/confirmation/withdrawal timestamps and a provider contact identifier. Campaign and Red Flag referral labels are kept only with a current recorded analytics choice. No quiz answers, results, psychological profiles or customer purchase history are added to subscriber records. Consent is the basis for these subscriptions; minimal security and suppression records prevent abuse and unwanted mail.

Supabase stores the subscription ledger. Resend processes confirmation and lifecycle email; its separate Marketing Topics and Broadcasts manage purpose-specific campaigns. The existing processors’ contracts and international-transfer safeguards apply. We do not sell subscriber addresses. Open tracking should remain disabled; signed delivery, bounce, complaint and click notifications are retained as operational counts, without storing the provider’s raw payload or clicked URLs. Website campaign attribution uses the existing analytics choice.

Each purpose has its own unsubscribe link and one-click unsubscribe support. Withdrawal blocks local sending immediately and provider changes are retried if unavailable. Bounced, complained-about, globally unsubscribed and deleted addresses remain suppressed. You can also request deletion of both subscriptions using the private email link or contact hello@wabiro.com. Provider deletion is retried until completed; your address is removed locally after that deletion succeeds. Account and purchase deletion are separate.

Unconfirmed addresses are removed after 30 days. Active subscriptions are retained for their requested purpose; waitlist contacts should be reviewed and retired after the launch notice has been delivered. Withdrawal evidence is retained for up to three years and delivery metadata for 90 days. After deletion, only a keyed, non-reversible email fingerprint remains to prevent accidental re-enrollment or reimport; it cannot be used to send mail. Ordinary signups and imports cannot undo a withdrawal. Write to us for any deliberate resubscription request or to exercise your data rights.

Wabiro+ and your Wabiro profile

Wabiro+ is an optional subscription attached to an optional account; the Wabiro profile works on your device without either.

What is stored

Your profile history: each completed test adds its derived result — dimension and profile scores, the test and its version, the date — to a history kept in your browser (at most 12 results per test). It is copied to your account only if you switch on saving your profile across devices; that choice is yours and can be switched off.
Goals and experiments: the goals you pick, the experiments you start, the steps you tick and, if you write one, your own reflection text (up to 500 characters) — on your account, when you are signed in.
Subscription: your plan, its status, billing periods, payments, refunds and cancellations, and the Stripe customer and subscription identifiers. Payment details are processed by Stripe; we never receive your card number.
Reports included with Wabiro+: recorded like a purchased report (the aggregated result needed to generate it), at no cost and tied to the subscription.
Where the subscription came from: the same acquisition labels and country code as for any purchase (see above).

What is not stored: your individual answers. The profile is built from results, not answers — unless a feature explicitly says otherwise before you use it. Nothing from your profile (patterns, goals, experiments, reflections) is sent to analytics: Wabiro+ events carry only plan names, where an offer was shown and counts.

Export and deletion: the export on your account page includes your subscription, your synced profile history, goals and experiments. From the account page you can delete your profile data only (history, goals and experiments, on this device and on your account) or your whole account. Deleting your account cancels an active subscription immediately, so you are never charged again.

Retention: profile history, goals and experiments are kept until you delete them or your account. Subscription and payment records are kept as long as legally required for accounting, then deleted; they are detached from you when you delete your account.

Wabiro Lab

Lab programs are optional. Their free days work in your browser without an account.

What is stored

On this device, without an account: which free days you marked done or skipped, when, and the step size you chose; and whether suggestions may use the tests you took on this device. Never your notes — without an account, nothing you type is kept.
On your account, when you are signed in: each program you start (the program and its version, your choices — step size, time per day, the goal you picked, and whether you came from a test result), the days you mark done or skipped with their date, an optional "was it useful?" answer and skip reason, your optional 1–5 self-ratings at the start and at the end, your device's time zone (to know what "today" is for you) and the notes you choose to write (up to 600 characters each).
Suggestions are computed in your browser from the goal you pick and — unless you switch it off — the names of the tests completed on this device. Nothing about your tests is sent to us for this.

What never happens: notes and self-ratings are never sent to analytics, never shown to anyone else and never used to train a model; admin dashboards show only counts. With your analytics consent, Lab events carry only the program, the day number, the step size and fixed reason codes.

Reminders: we send none. The optional daily reminder is a calendar file made in your browser; your own calendar handles it, and deleting the event stops it.

Export, deletion, retention: Lab data is part of the export on your account page. You can delete one journey, all your Lab data (account page or "My journeys") or your whole account; Lab data is kept until you do. We store it to provide the service you asked for (saving your progress); analytics rely on your consent.

Purity Party

Purity Party is an optional, paid group mode of the Purity Test for adults (18+). No account is needed.

What is stored, per player: the nickname you type, whether you are the host, the date and version of your "I am 18 or older" declaration and of the content notice (never a date of birth), when you finished, your final score out of 100 with its band name and the test and scoring versions that produced it, and your choice to show it to the group (with the time you last changed it). Your answers, your per-category scores and your real name are never sent to us. A hash of a random secret kept on your phone proves you are you; the host also has a hash of a recovery key.

Who sees what: anyone with the party link sees the host's nickname and how many people joined. Players see each other's nicknames and who has finished — never a score before the reveal, and after it only the scores their owners chose to show. Nobody, not even the host, can change your choice. Group numbers (average, spread) appear only when at least three people show their score.

Payment: the host pays CHF 5.00 through Stripe. We keep the purchase (room, amount, status, Stripe payment references, refunds and disputes) as an accounting record; Stripe handles the card and the receipt. Guests share no payment data. The public "Wabi Daily Happiness" goal shows only the total of today's paid parties — never a buyer, an order or a payment.

Optional invitations: if you turn on Purity Party invitations (a separate choice, adults only), we keep your browser's push address, language, time zone and the dates of your consent and of the last invitation — at most one a week, between 10:00 and 20:00 in your time zone, and none to a browser that bought a party in the last 14 days. "Mute Wabi promos" stops them for good; the record is deleted 30 days later.

Leaving and deletion: a guest can leave at any time (nickname, score and choice are deleted at once); the host can delete the party for everyone. Images people already saved cannot be recalled. Party rooms are deleted 7 days after creation, or 7 days after payment for a paid room. Purchases are kept as long as legally required for accounting. We process party data to run the party you joined (the service you asked for), and invitations on your consent.

Support Wabiro (tips)

If you leave a tip on the Support Wabiro page, we keep the tip as an accounting record: the amount, the tier you picked, the date, its status (paid, refunded, disputed) and Stripe's payment references. Stripe handles your card, your e-mail address for the receipt and the payment itself; we never see your card.

The boards: the name you type for the boards (optional) is public on the Support Wabiro page, with your total and number of tips for today, this month and all time. Without a name, you appear as "Anonymous supporter". Tips under the same name are added up. We never show an e-mail, a city or a card. We hide names that impersonate someone or are offensive, and we hide yours on request (support@wabiro.com); the tip then stays counted as anonymous.

Retention: a checkout that is never paid is closed after a day and deleted, with the name typed for it, after 30 days. Paid tips are kept as long as accounting law requires. We process tips to provide the payment you asked for, and the public name on your choice to type one.

Wabiro Games

Wabiro Games are free games (dilemmas, party games, couple games) played alone, on one phone passed around, or in Party Rooms where everyone uses their own phone. No account is needed.

On your phone only: your answers in solo and one-phone games, the names you type for a one-phone game, the cards you have already seen (so the next game deals new ones), your intensity settings and your "I'm 18 or older" confirmation. They stay in your browser's storage.

Anonymous community counts (only if you say yes): if you tap "Count my votes", your votes are added in batches to anonymous counters per card (how many people chose each side). We keep the counters only — no list of your votes, no identifier, no IP. Percentages appear only once a card has enough votes. You can say no and still play.

Party Rooms: per player we keep the nickname you type, a hashed secret that proves the seat is yours, whether you are the host, whether you confirmed being 18+, and when you last checked in (to know who is still there). Per room: its code, language, the host's settings, the current game, the answers of the current game, the scores, and what players wrote in games that ask for it (two truths and a lie, anonymous confessions, a last guess). Answers are shown to the room only when the round is revealed — with nicknames if the host chose that, otherwise as counts; scoreboards show nicknames; anonymous confessions are never shown with their author unless the author ticked "let the room guess it's me". Secret roles, words and missions are shown only to their player. The host can hide something a player wrote. Every room — nicknames, answers, text — is deleted 24 hours after it opened. You can leave at any time.

Reports: "Report this card" adds one to an anonymous counter for that card; nothing about you is recorded.

Games Pass: a one-time purchase through Stripe, like our other purchases; we keep the order, not the card, and a random token on your device that proves the pass is yours (and your account, if you sign in). We process game data to run the games you play (the service you asked for), and community counts on your consent.

The Wabiro apps for iPhone and Android

The apps work without an account. They contain no advertising, do not use the advertising identifier (IDFA on iPhone, advertising ID on Android) and do not track you across other companies' apps or websites.

On your phone: answers, unfinished tests, results, progress (streak, quests, Wabi's wardrobe) and preferences are kept in an encrypted database on the device; its key and your sign-in session are kept in the iOS Keychain or protected by the Android Keystore. The Android app excludes its data from cloud backups, so it stays on the phone. Chat exports you import are read on the device: only aggregate numbers are kept, and the file, messages, names and phone numbers are never uploaded; the temporary copy made when you pick the file is deleted once it has been read. Deleting the app deletes the database.

Only when you choose:

Account: your e-mail address, used to send you a sign-in code.
Result sync (off by default): derived result summaries — the test and its version, profile and dimension scores, the date — saved to your account so you can restore them. Never individual answers or safety flags. The 12 most recent results per test are kept (plus any you unlocked a report for), until you delete your history or your account.
Shared results and comparisons: handled as on the website (see above).
Usage analytics (off by default): a random installation identifier, not linked to your account, groups a few events — app opened, onboarding finished, test started or completed, result viewed, share started, challenge created or opened, comparison completed, offer viewed, purchase completed or restored, subscription started, reminder enabled, link opened — with the test, the language, the app version and the platform (iPhone or Android). No answers, scores, e-mail or chat content. Events are kept for 90 days. Turning analytics off stops collection and deletes the events linked to that identifier.
Reminders: reminders are scheduled on your phone. On iPhone, if remote reminders are offered and you enable them, we store a push token, your chosen interests, language, time zone and reminder choices, and deliver them through Expo's push service and Apple Push Notification service. Turning reminders off deletes the token. The Android app only schedules reminders on the phone.
In-app purchases (when offered): Apple (App Store) or Google (Google Play) processes the payment. RevenueCat, our purchase-verification provider, receives your random account identifier and the store's transaction details so purchases can be verified and restored. A purchase made in one app is available in the other when you sign in with the same account. We keep the reports you unlock and purchase records (product, transaction, type, currency, amount, date) for accounting.

Export and deletion: in the app, You → Your privacy lets you export your data, delete your result history (on the device, synced copies and public links) and delete your account. You can also delete your account on the website: sign in with the same e-mail and open your account page. Account deletion removes your synced results, app reports and reminder registrations; purchase records kept for accounting are detached from you. Deleting your account does not cancel a store subscription: manage it in iOS Settings or in Google Play → Payments & subscriptions.

Creator program tracking

If you follow a Wabiro creator link, we set the first-party HTTP-only `wabiro_creator_attribution` cookie for up to 30 days. It retains the creator, test, campaign and content label to attribute a paid purchase. The last eligible creator link is used. Related test and checkout steps are counted against the creator without device fingerprinting. If you apply to the program, we keep the contact, social profile and audience information you submit to review the application.

Cookies

NEXT_LOCALE — remembers your language (1 year).
wabiro_consent — remembers separate analytics and advertising choices (6 months).
Supabase authentication cookies — only if you create an account, to keep you signed in.
`wabiro_creator_attribution` — creator referral attribution, up to 30 days, only after following a creator link.
PostHog cookies — only after you accept analytics.
Ad provider storage — only after you separately allow advertising, and only on selected informational guides. Ad requests are non-personalized; your answers and results are never sent to advertisers.

No advertising requests are made without advertising consent. We do not send quiz answers or results to advertisers.

To know whether the product works, we count a few steps — a landing page viewed, a test or tool started, completed, a result shown, a share button used and whether the share went out, a shared result opened, a room created, joined or revealed, the premium offer shown, a checkout started, a suggested next experience clicked or started, a chat that could not be read — together with the experience, the language, the share channel (for example WhatsApp or "copy link"), the number of seconds between seeing a result and sharing it and, when you arrived through a shared result, a room or a campaign, the share token or the campaign label. When we test two versions of a page, we also add one to a daily total per version; these totals are never linked to a device. If you tap a reaction under a result ("accurate", "not me", "too harsh", "made me laugh"), we add one to a total for that result and reaction, nothing more. These counters carry no identifier at all: no cookie, no random id, no IP address, no browser fingerprint, and never an answer, a score or a profile. They cannot be linked to you and are not personal data, which is why they do not depend on the analytics choice below.

If you accept, we use PostHog (hosted in the European Union) to understand which pages and steps help people: page views and product events such as "test started" or "share clicked", with the test, the language and whether you arrived through a shared result or a campaign. We never send your answers, your scores, your level, your profile, a partner's name, any free text, anything from a chat you analyse (messages, names, numbers, group names, counts) or your Dating Pool filters. Session recording is disabled. You can withdraw consent at any time from the footer.

Sub-processors

Vercel — hosting, and cookieless page-view statistics (Vercel Web Analytics: the page address with private tokens removed, the referring site, country, browser and device type; visitors are told apart by a hash of the request that is reset every 24 hours; private support pages are not counted).
Supabase — database and authentication.
Stripe — payments and receipts.
PostHog — analytics, only with consent.

Retention

Pending (unpaid) orders: deleted after 48 hours.
Share links (test results, fandom quiz results, chat results, dating-pool results, Wabiro ID): 365 days, or until you delete them.
Rooms: 30 days, or until you leave (for your name and result).
Community tallies of the curiosity games: aggregate counters only (no row per person), kept while that version of the game is published.
Unpaid chat-report unlocks: deleted after 48 hours. Paid unlocks follow their order (see below).
Synced Wabiro ID summaries: until you delete them or your account.
Synced results with no share link and no purchase: 90 days.
Partner invitations: 14 days if the other person never answers; completed comparisons without a paid report: 30 days.
Paid orders, reports and the credits of a report bundle: kept as long as legally required for accounting, then deleted. A full refund revokes the report immediately.
Consent records: 2 years. Anonymous counters and the records of how sharing spreads: 2 years.
Optional account: until you delete it from the account page.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA and similar laws), you can access, correct, export, delete or object to the processing of your data. Most of this is self-service: "Delete my data" on a result page, and export or delete from your account page. For anything else, e-mail hello@wabiro.com. You can also lodge a complaint with your local data protection authority.

Children

The Service is intended for people aged 16 and over.

Changes

We will update the date at the top of this page and, for significant changes, show the consent banner again.

Wabiro Intelligence

Intelligence provides research-backed personality questionnaires, original self-reflection exercises and educational reasoning challenges. Free results need no account. Answers are scored on your device and are not collected as individual responses by analytics. Eligible non-political progress and result summaries may be kept in your browser, which is not an encrypted vault. Use the Mind Profile and existing local-data controls to remove them, especially on shared devices.

Saving eligible discoveries across devices is a separate, explicit choice using your existing Wabiro ID account. We store aggregate dimensions, completion dates and assessment versions, not raw responses, for that requested service. Eligible paid reports use the existing order, report, account recovery and retention systems; an account or payment does not give us permission to collect political opinions. Account export and deletion controls cover synced data, subject to any legal retention obligation for payment records.

Political Affinity is free-only and restricted to adults aged 18 and over. Its answers and derived scores stay in the current page’s memory. They are not written to persistent browser storage or Wabiro’s servers, synced to Wabiro ID or Wabiro+, shared, sent to payment or marketing providers, or used for targeting. Reloading or leaving the experience clears that session. Analytics, replay and conversion experiments are excluded from its pages. Ordinary hosting requests and network metadata still occur when you load a page; they do not include the locally calculated answers or scores.

For eligible non-sensitive experiences, optional consent-based analytics can record limited operational events such as a start, completion, next-test selection or offer view. Those events do not contain questionnaire answers or psychological scores. No result is sold as a sensitive advertising profile. See Intelligence privacy for the data distinctions and controls, and the methodology for scoring, versions and limitations.