This policy explains what IQ Test — the website at iq-test.io — collects when you use it, why, and what you can do about it. It is written to be read, not to bury you.
Who runs this site
IQ Test is operated by ADVERTEX ADVERTISING RESEARCHES AND CONSULTANCIES LLC, License No. 1054701, P.O. Box 624937, Dubai, United Arab Emirates. That company is the data controller, and the name that appears on your card statement if you buy access. You can reach us at [email protected].
The short version
We do not sell or rent your information, and we run no advertising networks. We do use Google Analytics to see how the site is used in aggregate. To take the test you need no account; to see your full result you give us an email address and we create one for you. If you buy access, your card details go straight to Stripe and never touch our servers.
What we collect
Your email address, and an account. When you finish the test you enter an email to see your result. We send a six-digit code and a link to that address; confirming either one creates your account and signs you in. If you use Continue with Google instead, Google tells us your email address, your Google account identifier, and whether that address is verified.
Your answers and your score. These are worked out in your browser, and then sent to us and stored against your account: the individual answer to each question, your score, your percentile, and the breakdown by reasoning domain. We keep them because that is what makes the mistake review, your result history and any certificate possible. This is a change from an earlier version of this policy, which said answers stayed on your device.
Advanced tests and training. If you take one of the longer tests, we store the session, the answers you give, and the score. If you play the brain training games or the daily challenge, we store which exercise, when, your score, and your streak.
Payments. Card details are entered directly into a form served by Stripe and never reach our servers. From Stripe we receive and store a payment reference, a customer reference, the amount, the currency, and whether the payment succeeded, was refunded or failed. Stripe processes the card data as its own controller under its privacy policy, and may hold billing details such as your name, address and country.
Email delivery. Sign-in codes and result emails are delivered through Resend, which necessarily sees the recipient address and the message.
Sessions and referrals. Signing in sets a session cookie so you stay signed in. We record when a session was created, a hashed form of your IP address, your country, and your browser's user-agent string, so that a stolen session can be spotted. If you arrive through somebody's invite link, we record who invited you.
Usage and analytics. We record visits and a small set of events — test started, test finished, certificate downloaded, a game opened — against your account or an anonymous visit identifier. We also use Google Analytics, which sets its own cookies and reports on how the site is used. Our cookie policy names each cookie and what it is for.
Local storage on your device. The test keeps a few values in your browser so it can resume where you left off and avoid asking you the same thing twice. These stay on your device.
Server logs and security. Our hosting provider and Cloudflare, which sits in front of the site, record technical request data — IP address, browser type, the page requested, a timestamp — for security and basic operation. These are not used to build a profile of you.
Why we collect it
For visitors in the EU, the UK, and similar jurisdictions:
- To provide what you asked for. Your account, your stored results, your training history and any purchase are processed to perform the contract between us.
- Consent. Analytics cookies, and any optional email beyond what the service requires, rest on your consent, which you can withdraw.
- Legitimate interests. Server logs, session security records and abuse prevention rest on our interest in running a site that works and is not attacked.
- Legal obligation. Payment and tax records are kept because we are required to keep them.
Who processes it
Nobody buys this data from us, and nobody receives it for advertising. The parties involved in running the service are:
- Stripe — payments and card data
- Resend — delivery of sign-in and result emails
- Google — sign-in, if you choose it, and Analytics
- Cloudflare — content delivery, security, and forwarding mail sent to our address
- Our hosting provider — the servers this site runs on
We are based in the UAE, and these providers operate in the United States and the European Union, so your data is processed outside your own country. We would disclose information to anyone else only if the law genuinely required it.
How long we keep it
Your account and results are kept while your account exists. Ask us to delete it and we will remove your account, your results, your training history and your email address. Payment records are kept as long as tax and accounting rules require, which is longer than the rest and outside our discretion. Server logs rotate on our host's standard schedule.
Your rights
Depending on where you live, you can ask to access, correct, delete, or export the personal data we hold, and to object to or restrict how we use it. California residents have equivalent rights under the CCPA and CPRA, including the right to opt out of any “sale” — which is simple here, because we do not sell data. To exercise any of these, write to [email protected] from the address on your account, so we can match the record. If you are in the EU or the UK you also have the right to complain to your national data protection authority.
Children
The test is intended for adults and is not directed at children under 16, and we do not knowingly collect information from them. The age conditions are set out in our terms of use.
Security and changes
Everything travels over an encrypted (HTTPS) connection, sign-in links and codes expire, and card data never reaches us. No method of transmission is perfectly secure, but we keep what we hold to what the service actually needs. If this policy changes in a way that matters, we will update the date above.
For the bigger picture of who we are and why the test works as it does, see about and our methodology. The commercial terms are in our terms of use.