Privacy & cookies

1. Who is responsible?

The controller responsible for this website’s processing of personal data is [S.C. Randy Myers Development S.R.L.].

• Address: [contact@iqt3st.com]
• Privacy contact: [contact@iqt3st.com]

This notice covers the reasoning-test website at fsi.iqt3st.com. PayPal’s own services are also covered by its separate privacy statement.

2. Information we process

• Accounts: the name and email address you supply, a password hash, account creation date and access permissions. The application stores a hash rather than your readable password.
• Test attempts: an account or guest-session identifier, selected answers, review flags, answer timestamps, start and finish times, attempt status, score and the question version used. Category performance is calculated from these records. Responses are saved even if you do not purchase the report.
• Payments: attempt reference, PayPal order and capture references, amount, currency, payment status and payment timestamps. The payment connection can also receive payer information returned by PayPal; the test’s payment table stores transaction references rather than a full payer profile.
• Technical information: session identifiers and security rate-limit records. The application uses IP-derived security identifiers; the hosting server may separately record IP addresses, requested pages, timestamps and browser information in its logs.
• Correspondence: information you choose to provide when contacting us about access, payments or your privacy rights.

Guest attempts are linked to a browser session and are not necessarily anonymous. Clearing session cookies may prevent you from reopening a guest report.

3. Purposes and lawful bases

• Providing the requested service — Article 6(1)(b) GDPR: creating your account, running and timing the test, saving responses, calculating results, processing a report purchase and providing access to it.
• Security and service quality — Article 6(1)(f): preventing abuse and unauthorised access, investigating technical faults, handling disputes and assessing question performance. Our legitimate interests are protecting participants, maintaining a functioning service and checking test quality. You may object to processing based on legitimate interests.
• Legal obligations — Article 6(1)(c): keeping records or responding to requests where applicable accounting, tax or other law requires it.

Providing the information needed for an account, an attempt or a payment is necessary to supply that feature. If you do not provide it, that feature may be unavailable. Reading this notice is not consent to unrelated processing.

4. Scoring and access to results

Your score is calculated automatically by comparing your selected answers with the stored answer key. Unanswered items do not earn points; category totals summarise performance in each category. This produces a raw reasoning-test score, not a clinical diagnosis or a normed IQ assessment.

The application uses scores to produce your report, not to make employment, education, credit or other decisions with legal or similarly significant effects. Report access is checked automatically against payment status. Contact us if you believe a score or payment-access decision is incorrect so it can be reviewed.

Participant reports do not display individual questions, correct answers or solutions. Authorised administrators can access test records and exports for service administration and question statistics.

5. PayPal and other recipients

A results report costs €13 per attempt. When you choose PayPal, we send the amount, currency, a report description and an attempt reference so the transaction can be matched to your report. We do not send the answer key, selected answers or test score in the checkout request.

You enter payment credentials on PayPal’s pages. This application does not collect your PayPal password or full card details. PayPal processes payment-related personal data for its own purposes, including payment delivery, security and legal obligations. See PayPal’s Privacy Statement for its recipients, retention, international processing and your rights.

Hosting and backup providers: [COMPLETE: hosting provider, storage country/countries and any backup providers]

Access may also be given to authorised service administrators, necessary technical support, professional advisers and authorities where legally required. Such access must be limited to its purpose.

International transfers

Website hosting/support: [COMPLETE: any website hosting/support transfers outside the EEA, applicable safeguard and how to obtain a copy; or confirm none]

PayPal may process data internationally under the arrangements described in its privacy statement. Contact us for information about safeguards applicable to transfers made by this website’s operator.

6. How long information is kept

• Accounts: [COMPLETE: account retention period or precise deletion criteria].
• Test responses, results and statistics: [COMPLETE: retention period for answers, unpaid attempts, paid reports and identifiable statistics].
• Payment/accounting records: [COMPLETE: payment/accounting retention period and applicable legal obligation].
• Technical logs and correspondence: [COMPLETE: server/security log and support correspondence retention periods].
• Backups: [COMPLETE: backup expiry period and deletion handling].

Some records may need to be retained when a legal obligation or an unresolved dispute requires it. Where an erasure request cannot be fully met, we will explain the reason and applicable retention criteria.

7. Cookies and browser storage

The test application uses the reasoning_session cookie to maintain login, associate guest attempts and protect requests. It is configured as a session cookie; browser session-restoration settings can affect when it is removed. Blocking it can prevent login, test continuity or access to a guest report.

The test page also uses browser session storage to keep pending answer updates while they are being saved. The application clears this pending-answer cache when it finishes the attempt; session storage normally ends when the tab’s session ends.

The test application itself includes no advertising or analytics trackers. Additional services installed by the operator or host: [COMPLETE: confirm whether hosting, analytics or other added services set additional cookies; disclose them here].

PayPal’s pages may use their own cookies and storage, as described in PayPal’s privacy and cookie information.

8. Your rights and how to contact us

Subject to the GDPR’s conditions, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. If a separate activity relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Send requests to the privacy contact in section 1. Include enough information to locate your account or attempt; do not send passwords or full card details. We may request proportionate information to verify your identity. We normally respond within one month. If a permitted extension is needed because of complexity or the number of requests, we will explain it within that month.

You may complain to a supervisory authority, particularly in the EU/EEA country where you live or work, or where the alleged infringement occurred. In Romania, this is ANSPDCP — the National Supervisory Authority for Personal Data Processing .

9. Younger users and changes

Age policy: [COMPLETE: intended minimum age and any arrangements for minors that you actually apply].

We will update this notice when our processing changes and show the revised date above. Material changes will be communicated as required before the relevant new processing takes place.