Privacy Policy
Last updated:
The free 24-question quiz and optional 12 follow-up questions do not require an account. Basic results are scored in your browser; the optional personalized AI report uses a separate generation and purchase flow and is read online, without email delivery. The legacy Personal Connection Playbook is closed to new purchases; its separate privacy and delivery notice continues to apply to historical orders.
What we collect
Your answers stay in this browser tab and are not saved to our database unless you choose to generate a personalized report. Generating a personalized report sends your selected answers to our server and a third-party AI service for analysis; that provider processes and retains data under its own terms. Clearing this tab does not delete data already processed by the provider. Separately submitted Personal Connection Playbook answers follow the playbook notice below. If analytics is enabled, the site may collect usage events such as page views, button clicks, progress positions, quiz completions, or refinement completions. These custom events do not include the option you selected or your question-by-question answer sequence. Shared result links may include derived result summaries in the URL. The personalized report flow does not ask for your email address and does not send the report by email. If you contact support by email, we use your address only to reply.
How results work
Quiz results are calculated from your selected answers in the browser. When you open or share a result page, the site may use the derived result type, score summary, Energy Style, and refinement split in the query string to render metadata and social previews. That summary does not include your full answer history or each follow-up answer.
Historical Personal Connection Playbook orders
The legacy playbook is closed to new purchases. Historical orders were for adults 18+ and English-language content, with separate agreement to answer processing and essential email delivery. Existing orders retain their applicable delivery, access, and support provisions. The service sends selected answers, optional situation and result context, and report drafts to the third-party AI service for generation, automated review, and revisions. Delivery email is handled separately and is not included in AI prompts. Stored answers, reports, contact details, and generation drafts are encrypted by the application. Our managed private disaster-recovery archives have a rolling 14-day retention period; provider-held copies may follow different schedules. Paid-service WeCom operational alerts contain aggregate counts and technical status, without answers, reports, customer emails, or access links. The playbook privacy & delivery notice explains providers, cross-border processing, retention, deletion, and current availability.
Feedback data
If you submit result-page feedback, we collect a feedback ID, locale, 1–5 rating, reply preference, consent and processing timestamps, plus any optional suggestion. If you request a reply, an email address is required and a name is optional. We do not collect your result type, scores, result URL, or answer history with feedback. Your email is used only to reply, not for marketing.
Feedback delivery and service providers
Feedback records are stored with Neon/Postgres; suggestion, name, and email are encrypted with AES-256-GCM. Cloudflare Turnstile checks the token and IP address for abuse prevention, but we do not persist either in the main feedback database. Upstash Redis keeps only keyed HMAC rate-limit identifiers and counters for 10-minute and 1-day windows. Upstash QStash queues only the feedback ID, not the feedback text. To alert the team, the server briefly decrypts and sends the rating, locale, reply preference, suggestion, and any provided name or email as plain text to a Tencent WeCom (Enterprise WeChat) group bot. It does not send quiz results or result URLs. Tencent and group administrators control retention of that group history, which our database deletion cannot erase.
Feedback retention and deletion
By default, the encrypted suggestion, name, and email payload is erased from our database after 90 days. The remaining non-text feedback record and delivery metadata are erased after 365 days (about 12 months). Provider backups and Tencent WeCom group history may follow their own schedules. To request access or deletion, email support@toporbottom.me and include your Feedback ID when possible so we can locate the record.
Analytics and other third parties
If configured, Google Analytics and Vercel Analytics may receive usage data on the free site. Playbook questionnaire and report pages do not load those quiz analytics, although hosting request processing still applies. Separate first-party playbook counters keep only fixed stages, UTC days, and totals for up to 90 days; they exclude answers, result types, scores, emails, private links, and browsing metadata and use no analytics cookies or persistent browser identifiers. Stage-specific keyed markers deduplicate events, with details in the playbook privacy notice. Social sharing actions can also send you to third-party platforms such as X. Hosting, database, security, queue, payment, AI, and messaging providers receive the data needed for their respective functions and have their own applicable terms, privacy practices, and retention arrangements.
Policy updates
If this policy changes, we publish an updated date and provide any notice required by applicable law. When new processing requires consent, we request it before that processing. Continued browsing alone does not authorize sending playbook answers to AI.