Product consent / product-v1
Private by intention.
Clear by design.
Use this reflection tool without giving us a legal name or email. Adults 18+ only.
What you agree to
Starting a reflection records your adult confirmation through acceptance of product-v1, the consent version, start time, mode, optional nickname or relationship category, and a random hashed receipt. Completed responses are stored to calculate your reflection profile or contribute to the recipient’s private observer group view. An optional nickname appears to invitation holders; please avoid a legal name.
What stays on your device
Incomplete answers and randomized item order stay in browser storage and are saved when you change pages or choose Save & leave. Drafts expire after 30 days. Completed drafts are cleared after successful submission. Do not use a shared device if someone else can access its browser storage. Local expiry is checked when you return.
After completion, the browser that created your invitation link keeps a copy so you can copy it again, along with any pattern you choose for an experiment. Nothing extra is sent to the server. Both are removed when you sign out, recover a profile or delete your data; revoking the link also removes the stored copy.
Private access
Owner access uses a private recovery key and an HTTP-only session cookie. Save your key somewhere safe. We store only its hash. Sharing it gives someone access to your results and deletion controls. Your friend invitation uses a different random key; it allows ratings, never viewing your profile. You can replace your private key and revoke invitations.
Observer boundaries
We never show individual observer responses to a profile owner. A frozen group of three eligible responses is required before averages appear. A trait appears only if all three answered it. Relationship categories are stored separately and not shown to owners or included in research exports. Observers never see the target’s results. Anonymous invitations cannot guarantee unique people or eliminate collusion; share with people you trust.
Optional research contribution
Research consent is off by default and requested after completion. Choosing it permits a de-identified export of your own answers, coverage, mode, and content, algorithm and consent versions for future research or product validation. No nickname, email, profile ID, assessment ID, relationship, credential, raw IP or exact timestamp is included. Answer patterns can still carry re-identification risk.
Each person controls only their own contribution. Withdraw in your profile, or use your observer response key at Research consent. Withdrawal immediately removes the response from future research exports. Copies already downloaded cannot be automatically recalled. There is no formal study enrolment implied.
Optional background details
After completion, you may separately consent to sharing your country of current residence, adult age band, broad occupation or activity, and gender identity. Every question is optional, including an explicit “Prefer not to say” choice. We do not request an exact age, birth date, employer or address. These fields never affect scoring.
These details are linked to your own response under demographics-consent-v1 and included only in restricted research exports when both research and demographic consent are active. They can increase identification risk in combination. Existing research consent does not automatically cover them. Observer background details are never shown to the person rated. Remove them in your profile or observer research page; withdrawing research consent also removes stored background details. Previously downloaded copies cannot be automatically recalled.
Cookies and abuse prevention
Essential cookies hold sessions and a random observer browser credential for duplicate checks. No advertising, session replay, contact import or automatic invitations are used. Short-lived rate limits use a daily hash of an ingress-provided IP when securely configured; raw IPs are not stored by the application. A browser computation challenge may appear after repeated requests. Hosting providers may process network data; their logging configuration needs review before launch.
Retention, export and deletion
Completed data is retained until you delete the profile. Your export contains your answers and only privacy-thresholded group results. Deleting a profile removes dependent observer responses, consents, research contributions and credentials from the live database. Anonymous audit counts remain for operations. Approved production backups may retain deleted records for up to 30 days; deletion records must be replayed on restoration.
Incomplete server start metadata and expired sessions are removed by scheduled maintenance. Audit records have a proposed 90-day retention. Facet is operated by @not_qz. Contact the maker there with questions about this project; never send your recovery key or private answers in a public post. The app is hosted on Vercel, with application functions and the Neon database in Singapore. Hosting providers may process operational data in other regions. There is no third-party analytics or advertising service.
Your choices
Participation is optional. You can stop before submitting, decline research contribution, revoke invitations, replace your key, export your profile, or delete it. No open-text peer feedback is collected. This product is an exploratory reflection tool, not a clinical service.