Privacy Policy

Effective: June 8, 2026

HEX Profile ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, why, and your rights.

1. What We Collect

When you create an account (via Google or X login):

• Your name and email address (from your OAuth provider)
• Your HEX quiz results (archetype, axis scores, answers)

Optional profile information you may provide:

• Age range, gender, industry, country, known MBTI type
• All optional — skip or answer as you prefer

Automatically:

• Session cookies (required for login to function)
• Hashed IP addresses in consent logs

2. How We Use Your Data

• Save and display your HEX Profile results
• Email you your results when requested
• Improve the accuracy of our personality model (aggregated, anonymized)
• We do NOT sell your data, share it with advertisers, or use it for automated decision-making

3. Legal Basis (GDPR)

We process your data based on your explicit consent, given when you choose to save your results. You can withdraw consent at any time via your account settings.

4. Data Retention

Your data is retained while your account is active. If you delete your account, all personal data is removed immediately. Quiz results used for aggregate analytics are anonymized.

5. Your Rights

• Access: Request a copy of your data at any time
• Rectification: Correct inaccurate data through your profile
• Erasure: Delete your account and all associated data immediately
• Portability: Export your data in machine-readable JSON format
• Withdraw consent: Revoke consent at any time

6. Age Restriction (COPPA)

HEX Profile is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with data, contact us immediately.

7. Cookies

We use a single session cookie to maintain your login state. No tracking cookies. No third-party analytics cookies. The quiz works without any cookies at all.

8. Third-Party Services

• Google OAuth: Used only for login. Google's Privacy Policy
• X (Twitter) OAuth: Used only for login. X's Privacy Policy
• SendGrid: Used only to send result emails you request. SendGrid Privacy Policy

9. Contact

For privacy requests, account deletion, or questions: [email protected]