Privacy policy
Who is responsible for your information?
Legal trader: Piotr Franiak trading as Insight Lab (sole trader, United Kingdom).
Geographical business and correspondence address: 24 Grange Crescent, Thurnscoe, Rotherham, S63 0EA, United Kingdom.
Email: office.mpservice@gmail.com.
The trader above is the UK GDPR data controller for quiz responses and report fulfilment.
What we collect
When you use the quiz and request a paid report, we collect the email address you provide, the answers you choose (40 for Dark Psychology or 36 for Cognitive Challenge), a randomly generated attempt identifier, a record of your express request for immediate digital delivery (including the time and terms version), and the status and time of payment and delivery. We may store Ko-fi transaction and webhook message identifiers, which let us prevent duplicate delivery, match purchases and resolve payment enquiries. The generated report includes your answers and corresponding explanations. For Cognitive Challenge, we store the participant's unique payment reference and a private random access token associated with their attempt. An email link containing the token is sent only after the corresponding verified project-support contribution of at least £2. The token must be kept confidential. No questions are provided before verified payment.
Ko-fi and its connected payment provider handle payment and card information. Insight Lab does not request your card details. Support requests may contain additional information you voluntarily supply.
Why we process it and the legal basis
We use your answers and email to create and deliver the PDF requested under the purchase contract (UK GDPR Article 6(1)(b)). We use limited order and technical records to prevent duplicate processing, troubleshoot delivery and protect the service (legitimate interests, Article 6(1)(f), where applicable). We retain records where necessary to meet legal obligations, including appropriate accounting requirements (Article 6(1)(c)). We do not use quiz answers for advertising, marketing lists or decisions with legal or similarly significant effects.
Who processes the data?
Cloudflare hosts the website and Cloudflare D1 data store; Ko-fi and its connected payment service handle the order/payment; Resend provides transactional email delivery. These providers operate under their respective terms and privacy arrangements. Depending on service configuration, personal information may be processed outside the UK; where legally required, relevant international data-transfer protections apply.
How long do we keep it?
Unpaid quiz attempts are scheduled for deletion after seven days. Attempts marked as delivered, including the answers and email stored with them, are scheduled for deletion 30 days after delivery. Limited transaction identifiers are scheduled for deletion after 180 days. Automated cleanup is performed periodically and may run after the stated threshold rather than exactly at that instant. Financial records held by the seller or external payment providers may be retained for longer periods where required by law.
How matching works
For Dark Psychology, we match a Ko-fi Shop order using the same normalised email address and the correct Shop item. For Cognitive Challenge, verified payments for the specific Ko-fi Shop item are matched by the purchase email and product code. If the buyer has already started the test on the website, their waiting session is unlocked; otherwise, a new private access link is generated and sent only to the buyer's email supplied by Ko-fi. For a separate one-time Ko-fi tip (outside Shop), we additionally require the exact COG-XXXXXXXX reference in the payment message. If a transaction cannot be matched, its limited reference may be retained for manual investigation. We never release the report to an unrelated claimant. This matching is used for delivery administration and is not a psychological profile or validated assessment.
Cookies and browser storage
The Dark Psychology quiz uses temporary browser session storage for pending checkout; Cognitive Challenge uses device-local browser storage to remember progress, chosen language, pending order reference and report link, if used. Insight Lab does not intentionally deploy advertising or behavioural analytics trackers in this version. Essential security-related processing may be performed by our hosting or payment providers.
Your choices and rights
Subject to UK data protection law, you may request access, correction, erasure, restriction of processing, portability where applicable, or object to processing based on legitimate interests. Contact office.mpservice@gmail.com to make a request. Some financial records cannot be erased immediately where retention is legally required. You may also complain to the UK's Information Commissioner's Office at ico.org.uk.
Contact and changes
For privacy questions, contact the address above. We will revise this page as necessary before public sale and when our practices materially change. Last updated: 24 October 2026.