Privacy Policy

1. Introduction and scope

WildPrint is a self-discovery quiz website. This policy applies to the WildPrint website, quiz, account features, reports, and related email messages. The legal operator is not yet identified in the project materials: [Legal operator name and business details to be provided].

2. Information the website handles

When you register, WildPrint handles your email address, a securely hashed password, account creation time, and whether your email has been verified. The account system also uses session identifiers; session tokens are stored in the browser as HttpOnly cookies and stored as hashes in the account database.

When you take the quiz, your answer choices, quiz attempt, scoring result, and report information are processed and stored by the application. The quiz asks you to confirm that you are at least 18; it does not ask for or verify your date of birth.

The development checkout displays fictional card and billing fields for demonstration. Those field values stay in the browser and are discarded; they are not sent to or stored by the payment endpoint. Development mock purchase records may store the product, amount, currency, status, date, and related account or quiz-attempt identifiers.

3. How information is used

WildPrint uses account information to create and secure accounts, verify email addresses, support sign-in and password resets, and associate saved quiz attempts and reports with an account. Quiz answers are used to calculate the result and prepare the corresponding preview and report.

Technical records are also used to operate the service, protect sessions, enforce access to private reports, process account deletion, and maintain required purchase or audit records.

4. Registration and email verification

Registration requires an email address and password. The password is stored as a password hash rather than as readable text. Verification and password-reset links use single-use tokens; the database stores token hashes and expiry information. The configured SMTP email service sends verification, reset, and eligible transactional messages.

5. Quiz answers, results, and personalization

Quiz answers are submitted to WildPrint's server and stored with a quiz attempt. The result and report use those answers to identify an animal archetype and generate personalized material. A small browser-side navigation pointer stores the attempt identifier, a creation key, the current quiz step, and limited display state so the quiz can resume. It does not store quiz answers or authentication tokens. A short-lived session-storage value may preserve a post-verification continuation.

6. Payments and membership information

The checkout currently available in development is a simulation only. It does not charge money, connect to a live payment provider, or send the mock card or billing fields to the server. It can create clearly identified development mock records for the €9.99 Full Report or the one-time €14.99 40-Day Membership. Mock purchases are disabled in production.

The database contains order and entitlement records and provider integration points, but a live payment integration is not active in the current checkout implementation. If real payment processing is introduced, this policy and the purchase terms must be updated to explain the provider and relevant data handling.

7. Cookies, local storage, and similar technologies

WildPrint uses essential HttpOnly cookies for account and guest sessions. They are marked SameSite=Lax and are configured as Secure in production. These cookies support authentication and quiz-session continuity.

Local storage holds a quiz navigation pointer, not answers or authentication tokens. Session storage may hold a temporary continuation after email verification. The project search found no third-party advertising or analytics tags. Your browser may provide separate controls for cookies and local storage.

8. Sharing and service providers

The application sends verification and password-reset emails through the SMTP provider configured by the operator. The database and API are hosted using infrastructure selected for the deployment; the operator must add the provider names and relevant privacy terms here: [Hosting, database, and email service providers to be identified].

The application includes optional public preview-sharing records. If a share link is created, the public page is limited to preview-card information such as the animal name, title, description, and illustration; it does not return private quiz answers or the Full Report. A share grant can be revoked. Anyone who has an active share link may view that limited card.

WildPrint does not currently use a live payment provider in its checkout flow. This statement must be revisited if external analytics, advertising, payment, or other service providers are added.

9. Retention and account deletion

Quiz and account information is retained while needed to provide the service and maintain associated records. The Account Settings flow allows a user to request account deletion after confirming their password and entering the required confirmation text.

The current deletion process removes the account and report records, clears quiz answers, unlinks remaining quiz attempts from the account, removes entitlements and share grants, and detaches payment order records from the account. Some order, audit, or scoring records may remain unlinked or anonymized. Back-up and infrastructure retention periods depend on the deployment and must be specified by the operator: [Retention period and backup deletion schedule to be provided].

10. Security

The implementation hashes passwords and one-time email tokens, stores account and guest session tokens as hashes in the database, uses HttpOnly session cookies, and checks report ownership and entitlements on the server. Production session cookies are configured as Secure. No website can guarantee absolute security; the operator should document its hosting safeguards and incident process before publication.

11. Privacy rights and requests

Privacy rights vary by location. Depending on the law that applies, you may have rights to request access to, correction or deletion of, or limits on the use of your personal information. Use Account Settings to request deletion. For other requests, contact [Privacy contact email to be provided]. The project does not currently provide a working self-service data-export function.

The operator must identify the applicable response process and legal deadlines for the relevant jurisdiction before this draft is finalized.

12. Children's privacy

WildPrint is intended for adults aged 18 and over. The quiz asks users to confirm that they are at least 18 before continuing, but the website does not independently verify age. If you are under 18, do not use the quiz or create an account. If the operator learns that an account belongs to someone under 18, contact [Privacy contact email to be provided] about appropriate next steps.

13. Changes to this policy

The operator may update this policy as the website changes or to reflect legal requirements. The current version and its last-updated date will appear on this page. Material changes and any notice process should be determined by the operator and added here before launch.

14. Privacy contact

For privacy questions or requests, contact [Privacy contact email to be provided]. The responsible legal operator is [Legal operator name and business details to be provided]. Do not publish this draft until those details are completed.