Public preview · Policy draft

Privacy

Not approved for public sales. Do not enter real payment details in this preview.

Inner Atlas is for adults aged 18 or older. Questionnaire responses are used with predefined scoring rules to produce a self-exploration report. We process responses, versioned score snapshots, purchase records, payment email and access-verification records. These records are private, not anonymous.

Stripe processes card details; the application does not store complete card numbers or security codes. Payment email is encrypted, with a separate keyed lookup value. Resend receives the email address and message content to deliver private links and verification codes. Cloudflare supplies hosting and database infrastructure. Provider processing locations and backup retention remain under review.

Unfinished answers expire for access after 24 hours. Completion removes raw answers after score calculation. A scheduled server cleanup endpoint is implemented but its external schedule is not configured in this preview: physical deletion within 24 hours is not guaranteed yet. Paid score snapshots remain while purchased access is active. Retention for unpaid snapshots, orders, revoked access, outbox records and backups must be approved before launch.

Essential browser storage supports unfinished-test recovery and owner-bound access. New devices require payment-email verification. Codes expire after 10 minutes; device verification and report links last up to 30 days. They never extend the three-calendar-month purchase access period. Email recovery is available only for active purchases. Browser recovery data is removed on completion or expired-data checks; a closed browser is not remotely cleared.

First-party measurement stores daily aggregate event counts, language, product category and progress quartile, not individual visitor records. No answers, scores, result types, email, test topic, access tokens or payment identifiers enter these counters. Do Not Track is respected. Hosting and payment providers may separately receive network information.

Before public sales, this policy must specify operator details, regional rights, data request and deletion procedures, processing locations and retention obligations.

Operator: Pengfei Chen
Support and privacy contact: 2CNGEI@gmail.com
Operator jurisdiction: California, United States