Privacy policy

While you are taking a test, nothing is sent anywhere

The scoring is not done on a server. The functions that turn your answers into a color season, a body type or a face shape are part of the JavaScript that came with the page, and they run on your own device. No request is made while you answer — not at the start, not per question, not when the result appears.

You can check this rather than take our word for it: open your browser's network panel before you start, or disconnect from the network after the page has loaded. The questionnaire still finishes and still produces a result.

Your answers are held in your browser's sessionStorage, under the key tld.answers.v1. That store belongs to one browser tab: your browser discards it when you close the tab, and it is never readable by another site. It is what lets you move between the three tests without answering the shared questions twice. If your browser blocks that store — private modes sometimes do — the test still works for that visit and simply forgets nothing, because it stored nothing.

If you buy a dossier

Pressing the checkout button is the first moment anything leaves your device, and it is the only one. Three things then happen, in this order — and the order is the point: nothing is kept until the payment actually goes through.

1. Your answers are sent to us and held briefly. They have to travel with you — the report is built from them — but at this stage they are only a draft, parked in temporary storage that deletes itself within 25 hours whether we do anything or not. The draft holds your answers and nothing else: no name, no email address, no payment details, nothing that says who you are.
2. You are handed over to Stripe. Payment happens on a page hosted by Stripe, not on this site. We have no payment form, we never receive your card number and we could not retrieve it. Stripe collects your card details and an email address, and handles that data as a controller in its own right, under Stripe's privacy policy.
3. Stripe tells us the payment succeeded, and only then is anything kept. The draft is copied into our database as your dossier and the draft is deleted. At the same moment we record the order: Stripe's identifiers for the checkout and the payment, the email address you gave Stripe, the amount, the currency, the status and the time. We keep the raw answers alongside the results so that an improvement to the scoring can be applied to a dossier you already own without asking you to retake anything. Your email address is attached to your dossier so we can send you its link and find your purchase when you write to us — there is no newsletter, no marketing list, and nothing else it is used for.

If you do not complete the payment, nothing is kept. The draft from step one expires on its own within 25 hours and is gone — we do not have to remember to delete it, and it never reaches the database that holds dossiers. There is nothing attached to it that identifies you in the meantime, so it cannot be connected back to you by us or by anyone else.

Your dossier link is the key to it

There are no accounts on this site, and no password to lose. Your dossier lives at an address containing a 22-character random string that cannot be guessed or listed, and holding that address is what grants access. The page is marked so that search engines do not index it.

The practical consequence: anyone you send the link to can read your dossier. That is deliberate — it is yours to share if you want to — but it means the link should be treated like a private document rather than posted in public.

What we never collect

• No photographs. There is nowhere on this site to upload an image, and no image of you is ever processed or stored.
• No account, no password. Nothing to register for.
• No cookies. This site sets none.
• No analytics or advertising. There is no tracking script, no advertising tag, no social widget and no third-party font or asset. Everything the page loads comes from this domain.
• No profiles beyond your own dossier. We do not build audience segments, we do not buy or sell data, and there is nobody to sell it to.

Hosting and logs

The site runs on Cloudflare Workers, with the database (Cloudflare D1) in the same account. Serving you a page necessarily means Cloudflare processes your IP address and the request itself, and request logging is switched on for the site's own operational monitoring. Those logs are Cloudflare's, are short-lived, and are not joined to your dossier or your email address by us.

How long we keep things

• Your dossier and its answers: indefinitely, because a permanent link is the thing you bought. Ask us and we delete it.
• Your order record: kept as a record of a payment, for as long as accounting and tax obligations require.
• Answers from a test you never took to checkout: we never had them. They were only ever in your own browser tab.
• An abandoned checkout: at most 25 hours, and then the draft expires by itself. It never enters the dossier database at all.

If you take a refund, your dossier link stops working — see the refund policy.

Getting a copy, or getting it deleted

Email support@thelookdossier.com from the address you used at checkout, or send us your dossier link, and ask. We will send you everything we hold about you or delete it, whichever you asked for, and we reply within two business days.

Deletion is deletion: the dossier and its answers go, and the link stops working. We keep the payment record, because a refund and a tax record both depend on it.

Children

This site is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has bought a dossier, email us and we will refund it and delete the record.

Changes to this policy

If what the site does changes, this page changes with it and the date at the top moves. The claims above are meant to be checkable against the code that is running, not aspirations.

Contact

Anything about privacy, including a deletion request: support@thelookdossier.com. More ways to reach us are on the contact page.