🔒 Privacy Policy
Last updated: June 2026
We care about your privacy. TBTI is designed around 'collect little, identify no one.' Here's what we do and don't handle.
1. No mandatory personal data
Using TBTI requires no sign-up or login. We don't ask for your name, phone number, or anything else that could directly identify you. Email is only collected if you explicitly opt in to subscribe — see section 7.
2. Your answers (anonymously uploaded)
When you finish the quiz, we upload your per-question selections to our database in fully anonymous form — used by our internal team to analyze question quality, discover new personas, and produce aggregate stats (kept strictly internal — not made public, not shared with third parties). How: at quiz start your browser generates a random UUID that only lives in this session; on completion it's uploaded with your answers. We do NOT store anything that could identify you (no IP, no email, no browser fingerprint, no user agent). The session UUID is never linked to subscriber records (section 7) — even after you subscribe, we can't tie this answer log back to you. To opt out: use incognito mode and close the tab before completing the quiz (no upload happens in that case).
3. Anonymous stats
When you see your result, we increment a counter for 'this type +1' in our database. That feeds the homepage count and the leaderboard. It's just a number total — it can't be tied back to any individual.
4. Browser local storage
We use your browser's localStorage to remember which type has already been counted for you, and your consent choice for analytics — purely to avoid double-counting and re-asking the same question. This data only stays on your device; clearing browser data removes it.
5. AI roast feature
When generating an AI roast, we send your type and a small summary of your answers to a third-party AI service (OpenAI) for text generation. The sent content includes nothing that identifies you personally.
6. Analytics (GA4) and cookies
We use Google Analytics 4 to observe overall traffic trends, popular types, and funnel conversion as anonymous aggregates. GA4 sets cookies in your browser. On your first visit we ask for consent — if you select 'Nope, opt out', GA4 is not loaded at all. You can revoke later by clearing browser data.
7. Newsletter subscription (opt-in)
If you voluntarily enter an email and tick the consent box to subscribe to our monthly travel-fate report, we store in our database: your email, chosen locale, your persona code, subscription source (e.g. result page / pair invite), and subscribe/unsubscribe timestamps. Usage: sending welcome emails, the monthly report, and pair notifications. An unsubscribe link sits at the bottom of every email and works instantly. After unsubscribing we mark your record as unsubscribed and don't email you again, while keeping the record to prevent accidental re-add (full deletion on request — see contact).
8. Pair notification email (transactional)
If you optionally leave an email at pair-invite time asking to be 'notified when they finish', we bind that email to the pair short code for 30 days and send a single notification when the other person completes. This is transactional, not part of the newsletter.
9. Google sign-in (optional)
You can choose to sign up with a Google account (Google OAuth 2.0 — we never see your Google password). At sign-in Google sends us: your Google profile name, email, avatar, and Google's stable per-account identifier (sub). We store these in our own user table to personalize your experience (My TBTI, pair history). A 60-day session cookie is issued for authentication only — no cross-site tracking.
10. Your persona data (logged-in only)
When a logged-in user finishes the quiz, we save your latest persona code, 8-dimension scores, and per-question answers to the user row. These are tied to your user.id and visible only to you (on /me). Retaking overwrites the previous record. You can permanently delete everything via the 'Delete my account' button on /me at any time.
11. Pair matching records
When you create or join a pair, we store on the pairs row: short code, both sides' persona, 8-dim profile, locale, and an optional display name. Logged-in users' display name comes from the Google profile name; guests' display name is whatever you type in the invite form. Pairs expire 30 days after creation. If you delete your account, the persona itself stays on the pair row (the other person's history depends on it), but the link back to you is removed.
12. Third-party services
The site is hosted on Vercel, the database is on Neon, AI is from OpenAI, email is sent via Resend, analytics via Google Analytics 4, and sign-in via Google OAuth. These providers may, per their own policies, log standard technical information (e.g., IP address, browser type) while delivering the service.
13. Ads
TBTI currently runs no ads.
14. Policy updates
This policy may be updated occasionally; significant changes will be reflected in the date at the top.
15. Contact
Any privacy questions, or to request full deletion of your data, please reach out through ChillOut Travel Planner's official channels. Logged-in users can simply click 'Delete my account' on /me.