Cookie Policy

1. What This Cookie Policy Covers

This Cookie Policy explains how The Personality Project (operated by Scrawlr Development Inc.) uses cookies and similar technologies on its website at https://thepersonalityproject.com (the Service). It covers what cookies are, the categories we use and the specific entries in each, how to manage and change your consent, and the rules that apply to your jurisdiction. Section 5 sets out the European Union, Quebec, and US state rules in detail.

Read this Policy together with our Privacy Policy, which describes the personal information we collect, how we handle it, your rights, and how to contact us.

2. What Are Cookies and Similar Technologies?

A cookie is a small text file a website places on your device when you visit. Cookies let the website remember information about you (your login session, your language preference, what you have already clicked) between requests and between visits. Session cookies are deleted when you close your browser; persistent cookies last for a defined period and survive across visits.

Similar technologies include local and session storage (browser side storage that is not sent automatically with every request), pixel tags and web beacons, and device fingerprinting.

Our own code does not set cookies. It relies on browser local storage for the limited functions described in Section 3. The optional Analytics and Marketing providers in Sections 3.3 and 3.4 may set their own cookies, local storage entries, or pixel tags, but only after you opt in to that category. We describe both cookies and local storage in this Policy because the consent rules that apply to cookies apply equally to local storage. We do not use device fingerprinting.

3. Categories of Cookies We Use

We organize these technologies by purpose. The consent banner shown on your first visit lets you accept or decline the non essential categories. The entries below reflect our infrastructure as of the date at the top of this Policy.

3.1 Essential storage (required for the Service to work)

These entries are necessary for the Service to function and cannot be disabled through the banner, because the Service would not work without them. As deployed, they are held in your browser using local storage rather than cookies. You can clear them in your browser settings, but doing so will end your session and break account login and other core features. They do not require consent under the European Union ePrivacy Directive, Quebec Law 25, or applicable US state privacy laws, because they are strictly necessary to provide a service you have requested.

Swipe sideways to see every column

3.2 Functional storage (your preferences and interface state)

These remember your preferences and interface state so you do not reset them every visit. As deployed, they are held in your browser using local storage rather than cookies. You can accept or decline this category in the banner; the Service still works either way, but you lose preference persistence if you decline.

Swipe sideways to see every column

3.3 Analytics (with consent)

Analytics helps us see which features people use so we can improve the Service. Apart from the cookieless visit count below, it is off until you opt in to the Analytics category, and it never runs on test, scale, counselling, support, or crisis pages. We use PostHog. Before you choose, and if you decline, PostHog still counts the visit without cookies, using a one way daily hash it cannot reverse, with no cookies, no storage, no profile and no country. With your consent we also keep our own record of the visit (landing page, campaign tags, device type, browser, language, and the country taken from your connection, never your IP address). On our production site, Cloudflare Web Analytics also counts visits under the same Analytics choice.

Swipe sideways to see every column

3.4 Marketing (with consent)

Marketing lets our advertising partners count when someone who came from one of our ads signs up or finishes a test, so we can tell which ads work. It is a separate category from Analytics: opting in to Analytics does not turn on Marketing, and opting in to Marketing does not turn on Analytics. Marketing is off until you opt in, and its tags never load on test, scale, counselling, support, or crisis pages. The tags send only that a sign up or a finished test happened; they never receive your answers, scores, results, traits, mood logs, or user ID. Google Ads is configured with ad personalization denied.

Swipe sideways to see every column

We load only the providers we are running ad campaigns with, and the Marketing category appears in the banner only while Marketing measurement is switched on.

Display advertising via Google AdSense is non personalized (contextual) at launch: ads match the page content, not your interests or behavior. Any cookies AdSense sets in this mode (for example frequency capping or fraud prevention) do not build a profile of you and are not used for retargeting. Our sensitive inference firewall means your assessment results, mood logs, and other personality derived data are never used for advertising targeting.

4. Managing Your Consent

4.1 At first visit

The first time you visit from a given browser, you will see a banner with three options: Accept all (Essential, Functional, Analytics, and Marketing when shown), Reject all (Essential only), or Customize (choose Functional, Analytics, and Marketing independently). Essential cookies are not toggleable because they are required for the Service to work. Functional, Analytics, and Marketing default to off until you affirmatively consent, as required by the European Union ePrivacy Directive, Quebec Law 25, and other consent based laws. Your choices are recorded in your browser local storage under tpp-cookie-consent, with Essential always on and the other categories off until you opt in.

4.2 Changing your mind later

You can change your consent at any time with the button on this page, or in your privacy settings under Cookie consent. The banner reappears so you can adjust your choices, which take effect immediately.

4.3 Browser controls

Most browsers let you block or delete cookies in their settings. Blocking Essential cookies will break the Service (you cannot log in). Blocking Functional, Analytics, or Marketing only loses preference persistence and measurement. See the help pages for Chrome, Firefox, Safari, and Edge.

4.4 Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal and treat it as an opt out request under California, Colorado, and Connecticut privacy laws, even though (see Privacy Policy, Section 6) we do not sell or share personal information for cross context behavioral advertising in any case. Do Not Track is deprecated and has no consistent standard, so we do not act on it separately from GPC.

5. Jurisdiction Specific Consent Rules

5.1 European Union and United Kingdom (ePrivacy Directive)

If you access the Service from the European Union or the United Kingdom, the ePrivacy Directive and member state implementing laws require your prior consent before we place non essential cookies (Functional, Analytics, and Marketing). We obtain that consent via the banner in Section 4.1, and you may withdraw it at any time per Section 4.2.

5.2 Quebec (Law 25, express consent)

If you access the Service from Quebec, the Act respecting the protection of personal information in the private sector, as amended by Law 25, requires your express consent before we process personal information through technology that profiles or identifies you. Our Functional, Analytics, and Marketing cookies default to off in the banner for all users until you affirmatively consent. You may withdraw consent at any time via your privacy settings and exercise the other Law 25 rights described in the State and Provincial Privacy Rights Notice, Section 4.2 (access, correction, portability, and de indexing).

5.3 California, Colorado, Connecticut (GPC and opt out)

If you reside in California, Colorado, or Connecticut, you may opt out of the sale or share of personal information for cross context behavioral advertising. We do not sell or share personal information for this purpose (see Privacy Policy, Section 6). If your browser sends a Global Privacy Control signal, we treat it as confirmation of your opt out.

5.4 Other jurisdictions

Where other US states or jurisdictions provide consent based or opt out cookie rules, we apply the strictest reasonable interpretation that satisfies your local law.

6. Related Documents

Read this Policy alongside our Privacy Policy (what we collect, purposes, your rights, contact), Terms of Service (the agreement between you and Scrawlr), Data Retention Policy (how long we keep each data category), and Acceptable Use Policy (community conduct).

7. Changes to This Cookie Policy

We may update this Policy from time to time. When we do, we will update the version number and last updated date. For material changes (for example adding a cookie category or a tracking provider), we will give a prominent in product notice at least 30 days in advance and re prompt you for consent. For minor or clarifying changes, we post the updated Policy and it takes effect on posting.

8. Contact

For questions about cookies and similar technologies, contact us at:

Email: privacy@thepersonalityproject.com

Postal: Scrawlr Development Inc., 1820-999 W Hastings St, Vancouver, BC, Canada, V6C 2W2