Privacy Policy
Last updated:
TopOrBottom.me is designed to be a lightweight browser experience with no account requirement. Your raw quiz answers are scored in the browser, and we aim to keep data collection minimal.
What we collect
Your raw answer choices are not stored in a user account or quiz database. The core quiz and optional Energy Style refinement are scored in your browser. If analytics is enabled, the site may collect usage events such as page views, button clicks, progress positions, quiz completions, or refinement completions. These custom events do not include the option you selected or your question-by-question answer sequence. Shared result links may include derived result summaries in the URL.
How results work
Quiz results are calculated from your selected answers in the browser. When you open or share a result page, the site may use the derived result type, score summary, Energy Style, and refinement split in the query string to render metadata and social previews. That summary does not include your full answer history or each follow-up answer.
Feedback data
If you submit result-page feedback, we collect a feedback ID, locale, 1–5 rating, reply preference, consent and processing timestamps, plus any optional suggestion. If you request a reply, an email address is required and a name is optional. We do not collect your result type, scores, result URL, or answer history with feedback. Your email is used only to reply, not for marketing.
Delivery and service providers
Feedback records are stored with Neon/Postgres; suggestion, name, and email are encrypted with AES-256-GCM. Cloudflare Turnstile checks the token and IP address for abuse prevention, but we do not persist either in the main feedback database. Upstash Redis keeps only keyed HMAC rate-limit identifiers and counters for 10-minute and 1-day windows. Upstash QStash queues only the feedback ID, not the feedback text. To alert the team, the server briefly decrypts and sends the rating, locale, reply preference, suggestion, and any provided name or email as plain text to a Tencent WeCom (Enterprise WeChat) group bot. It does not send quiz results or result URLs. Tencent and group administrators control retention of that group history, which our database deletion cannot erase.
Retention and deletion
By default, the encrypted suggestion, name, and email payload is erased from our database after 90 days. The remaining non-text feedback record and delivery metadata are erased after 365 days (about 12 months). Provider backups and Tencent WeCom group history may follow their own schedules. To request access or deletion, email support@toporbottom.me and include your Feedback ID when possible so we can locate the record.
Analytics and other third parties
If configured, Google Analytics and Vercel Analytics may receive usage data. Social sharing actions can also send you to third-party platforms such as X. Hosting, database, security, queue, and messaging providers process data only to operate these functions and under their own terms and privacy practices.
Policy updates
If this policy changes, the updated version will appear on this page. By continuing to use the site after updates are posted, you agree to the current version.