Privacy policy

LEGAL

Privacy policy

Last updated: 2026-10-08

What we collect

mirror does not require an account. So you can find your result again after a refresh or a later visit, we store a random, signed visitor-ID cookie in your browser. When you finish the test, your answers to the 32- or 64-item questionnaire, the question IDs, questionnaire and scoring versions, report version and your calculated preferences are saved on our server with that visitor ID.

When you buy a full report, we record the order number, amount, currency, price type (list price, invite price or a covered report), the invite code used (if any), payment status and the payment reference from whichever checkout processed it. The owner of an invite code can’t see who used it. Card payments run on Waffo Pancake, the merchant of record: you enter your email, billing details and card on its checkout rather than here, so we never receive or store your card number, and it keeps its own records as the seller. For payments in USDT or USDC we also record the network, token and the blockchain transaction hash; for Ethereum we record the wallet address you connect and a signed message proving you control it; signing that message never moves funds. Blockchain transactions are public and permanent by design, and we cannot change or remove data on a public ledger. We will never ask for your private keys or recovery phrase.

We use Google Analytics to understand how the site is visited and used. It receives the type of page you view, button clicks, quiz progress milestones (such as 25% complete), payment steps and outcomes (including the price type), result page state (sample or not, unlocked or not, whether a clear preference emerged), device and browser information, and an approximate region Google derives from your network address. Before anything is sent, result IDs and order numbers in URLs are replaced with placeholders; we never send your answers, your calculated type or scores, order numbers, invite codes, wallet addresses or transaction hashes. Google signals and ad personalization are turned off.

Our own database also records redacted page paths, visit times, referring domains and phone/tablet/desktop categories linked to the signed browser identifier, to understand visit trends and anonymous browsing records. Private page identifiers and all query parameters are removed in both the browser and server; unknown routes are recorded only as other pages. These records contain no answers, personality types or scores, store no raw IP addresses, are available only to authorized administrators and are removed after 90 days. Measurement failures do not affect tests or payments.

Authorized administrators can use a Telegram management bot to query aggregate browsing data and redacted order summaries, and receive order-status notifications. Summaries sent to Telegram contain only a truncated order number, amount, currency, product, price type, payment channel, status and record time. They exclude full recovery order numbers, visitor identifiers, result IDs, answers, types, scores and private links. Telegram processes messages under its own service terms.

How we use it

What we don’t do

We don’t sell your answers or results, and we don’t use them for hiring, credit decisions or any automated decision-making. We don’t share them with third parties without your consent, except where the law requires it.

Cookies and local storage

The visitor-ID cookie lasts one year and only identifies your browser. When you open someone’s invite link, we store a cookie holding that invite code for 30 days, read only when a report is priced. Progress for each version, question order, your most recent result ID, the chapter you last read in a report and your seven-day practice check-ins are kept in your browser’s local storage; clearing browser data removes them. Results on our server are unaffected, but a browser without the cookie can’t find them automatically.

In “My reports” you can enter any full order number from this site to restore that visitor’s cookie and see all of that visitor’s tests. Unpaid tests show brief results only; unlocked tests show the full report. An order number works as a recovery credential, so keep it safe and don’t share it.

To limit abuse of order-number lookups, we briefly keep a keyed hash of the request’s source address, the number of attempts and their times. Raw IP addresses are not stored in these rate-limit records.

Google Analytics sets cookies beginning with _ga, lasting up to two years, to tell visitors and sessions apart. You can block or clear them in your browser or install Google’s opt-out browser add-on; the test and reports keep working. So one purchase isn’t counted twice, local storage also keeps one-way digests of your 20 most recent purchases, which can’t be turned back into order numbers.

Sharing, guides for two and referral measurement

A personal guide is free to create. It publishes only the three statements you confirm and any reference type or qualitative dimensions you enable. Anyone with the link can read them; answers, scores, order numbers and full reports are not published with the card. For a guide for two, both people must unlock the report they use. A report already unlocked needs no additional purchase. The host can also cover the other person’s report, which opens when they agree to join; the invitation only says it is covered, never who paid or how much. The host separately agrees to publish the relationship they choose, four qualitative categories, the questionnaire version and test date. The other person sees their normal result first, then separately agrees to join. Payment and restoring records do not count as consent; the host cannot see the other person’s payment activity. Generated guides are readable only by the two signed browsers. Close a card in My shares, or close an invitation or withdraw a guide in My guides for two. Independent invitations are unaffected by closing a card; invitations explicitly linked to a card close with it. Downloaded images and copies held by others cannot be recalled. Existing guides from the previous version remain readable and can be withdrawn; old invitations no longer accept new participants.

We use signed browser identifiers to associate the first valid card or invitation visit with the browser’s first test completion within seven days. The two sources are mutually exclusive; these are browsers, not people or causal impact. Our own database also records minimal events for viewing a result’s benefit, selecting an entry, opening payment, selecting a result and resuming a comparison. We associate an ownership-verified result ID with server-checked access status to understand use and purchases of that same result. These events contain no answers, scores or preference categories and are not sent to Google. Copying a link and requesting an image save do not prove a share was sent. Events are kept for 90 days and referral details for 180 days. Payment-return continuation records may be removed 30 days after expiry or completion; reports, orders, invitations and guides remain business records. Measurement failures do not block tests or payments. Sharing, invitation, comparison and sharing-management pages send no Google collection requests; full capability links and private content are not sent as analytics parameters.

Retention and deletion

Results and order information are kept while the service runs. To delete data related to you, email lakehu0x@gmail.com with a result ID or order number, and we will handle it after verifying ownership. Records held by the payment provider as seller of record, and on-chain payment records, are outside our systems and can’t be deleted by us.

About this test

The items are an independent, original questionnaire, not the official MBTI® instrument, and have not been psychometrically validated. Results are for self-exploration only and are not a psychological diagnosis or professional advice. MBTI and Myers-Briggs Type Indicator are trademarks of The Myers-Briggs Company. mirror is independent and not affiliated with or endorsed by it.