Effective: June 8, 2026 · Last updated: September 15, 2026
HEX Profile ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, why, and your rights.
When you create an account (via Google or X login):
When you take the quiz without an account:
Optional group-comparison details (all optional — every field can be skipped):
Every field above includes a "prefer not to say" option. You can skip any or all of them, and skipping does not affect your result, your report, or your access to any feature. We collect these details only from users aged 18 and over; for users aged 13–17 the fields are not shown at all.
Automatically:
We do not collect: your exact date of birth, your nationality or citizenship, your ethnicity, your employer's name or work email address, your precise location, or any biometric data.
We process your data based on your explicit consent (GDPR Art. 6(1)(a)), given when you choose to save your results. You can withdraw consent at any time via your account settings.
Quiz email capture: where you enter your email on the quiz, we process it on the basis of your explicit consent, given by checking the consent box (unchecked by default). This consent is specific, informed, and unambiguous, and you can withdraw it at any time.
Analytics and measurement: where you consent, we use Google Analytics 4 to measure how the site is used (GDPR Art. 6(1)(a)), with the cookie consent described in §7 as the operative gate under the ePrivacy rules.
Your data is retained while your account is active. If you delete your account, all personal data is removed immediately. Quiz results used for aggregate analytics are de-identified (aggregated without identifiers).
Email (quiz consent): we keep your email address and its consent record while your consent is active. If you withdraw consent, we remove your email from our delivery list and Meta audience lists within 30 days. We retain a record of the consent and its withdrawal (without the email address, or de-identified) for audit purposes.
Google Analytics: Google Analytics data is retained for 14 months. Google Analytics does not store IP addresses. Our own consent logs retain hashed IP addresses for audit; these are a separate record from Google Analytics data.
HEX Profile is not intended for users under 13. We do not knowingly collect data from children under 13.
Email capture requires confirmation that you are 18 or older. We do not collect email addresses from users who indicate they are under 18. The quiz itself remains available to all ages without email collection (no email is collected).
If you believe a child has provided us with data, contact us immediately.
We use one first-party session cookie to keep you logged in. The quiz itself works without cookies.
Google Analytics. Where you consent, we use Google Analytics 4 to understand how the site is used. It sets cookies that distinguish your browser (_ga, _ga_<container>) — these are third-party analytics cookies set by Google. Google Analytics does not store your IP address.
If you do not consent, those cookies are not set. Google Analytics then runs without storing cookies on your device, and we may still receive aggregate, cookieless measurements which do not identify you.
You can withdraw consent at any time, and we will stop collecting.
Joint control with Meta (Article 26 GDPR). We jointly control certain advertising data with Meta Platforms Ireland Ltd. (recognized by the CJEU in Fashion ID). For Custom Audience matching, we and Meta jointly decide the purposes and means of processing a hashed version of your email to show you relevant ads. The essence of this arrangement: (i) Meta is responsible for the data it processes to deliver and measure ads, and for enabling you to exercise your rights on its platforms; (ii) we never share your raw email — only a hashed identifier; (iii) you can object at any time via our "Stop profiling" control or Meta's ad preferences (facebook.com/adpreferences/ad_settings); (iv) you may contact us at [email protected] and we will forward any request to Meta; (v) Meta's Privacy Policy governs its part of the processing. The full arrangement is available in Meta's Complementary Controller Addendum.
Where your email (in hashed form) is transferred to Meta's systems outside your country or region, we rely on the EU–US Data Privacy Framework as our primary transfer mechanism — we verify Meta's current certification before the first upload — alongside the Article 26 GDPR joint-controller arrangement described in Section 8. Hashing is a security measure, not anonymization.
For privacy requests, account deletion, withdrawal, erasure, or questions: [email protected]
MBTI type is self-reported and entirely optional. We do not access your MBTI results, your account with The Myers-Briggs Company, or any third-party assessment data. Type names are referenced for rough comparison only. HEX Profile is not affiliated with, licensed by, or endorsed by The Myers-Briggs Company. MBTI® is a registered trademark of The Myers-Briggs Company.