Your choices, and how we handle them.

Free test and sharing

Your 18 free quiz choices and progress are stored in local browser storage. Downloaded cards are generated on your device. A public result or comparison link encodes the selected forms; anyone with that link can view them. The share-preview service receives those form codes to render the social image.

Plot Twist story quiz

Your nine story choices and quiz version are saved in this browser, separately from our other tests. Matching is done on your device. You can remove the draft using Start a fresh story and confirming the clear action. This quiz does not send your answers to AI or payment services.

A saved character image is generated locally. A character link includes a public character identifier and acquisition tags, but no question answers; visitors see a labeled preview. Anyone you give the image or link to can see the character association. Clearing your local draft does not remove copies you have shared. Story answers, character IDs and matching scores are not sent as analytics parameters.

Big Five questionnaire

Big Five responses and scores are calculated on your device. Your 50 answers, questionnaire version and save time are stored locally so you can continue in the same browser. You can clear them using “Clear saved answers” on the test page or by clearing this site’s browser storage. They are separate from handwriting progress and are not sent to the AI or checkout services.

Result images are created locally and include only the dimensions you select. Anyone you share the image with can read those scores. The copied test link contains no answers or scores. General events such as starting, resuming, completing and requesting an image download may be counted, without responses or trait scores in analytics parameters.

Friend invitations and browser reminders

Creating a tracked invitation stores your selected form code and a random browser identifier. Completing that invitation shares the friend’s selected forms with the inviter. A private browser cookie controls access to the reply list; it is separate from payment and analytics. Invitations, completed comparisons and optional push subscriptions expire after thirty days and expired records are removed during subsequent invitation requests.

If you choose browser reminders and grant permission, we store the browser’s push endpoint and use its push provider to request a notification when a friend finishes. The push message does not contain the selected shapes. You can turn reminders off in the invitation panel or your browser settings. We store a short-lived hash derived from the requesting IP and hour to limit abuse; it expires after two hours and is cleaned up with expired invitation data.

Paid AI interpretation

When you begin checkout, we store the 18 selected form codes, derived Detail, Flow and Flair values, playful profile, price version and order metadata needed to provide the interpretation. We do not receive a handwriting photo.

The interpretation focus is selected before payment, with an overall reading as the default. Age range, writing context and a short note can optionally be added after payment. If supplied, they are encrypted while checkout or generation is pending, used for that interpretation, and removed or expired under the generation cleanup process. Do not enter names, contact details, health information or other sensitive data in the note.

Payment and delivery

PayPal processes payment credentials. We may receive order and capture identifiers, payer email, currency, gross amount, fees and settlement information. Personality Play does not receive your card or bank-account number. For manual WeChat payments, we store an order reference, optional payer display name and approximate transfer time, and the review result so the transfer can be matched to the correct order.

An optional email entered before checkout, or the usable payer email returned by PayPal, is stored for private delivery and recovery. Recovery links are private, single-use and time-limited. Paid interpretations and order records are retained while needed for delivery, support, accounting, disputes, access revocation and legal obligations.

AI provider

The selected forms, derived visual dimensions and optional context are sent to the configured AI provider through OpenRouter or OpenAI after payment. Provider-side storage is disabled where supported. The generated interpretation and minimal model, version, status and token-usage metadata are stored so the purchase can be reopened.

Analytics and attribution

Pageview provides basic aggregate page counts and counts of actions such as starting or completing the test, sharing, opening an invitation, and starting checkout. Basic action events contain the event name and a sanitized page URL, without your selected shapes or personal details. With detailed analytics consent, Google Analytics records general page and game events. We do not intentionally send selected forms, result codes, optional context, report text, email or payment details as analytics parameters.

When detailed analytics is allowed, the first recorded session source, medium, campaign, referring domain, landing path and time may be attached to an order. Full referrer URLs and query strings are not stored in that attribution record. Missing sources remain unknown.

Administration and security

Commerce administration is protected by Cloudflare Access and an allowed administrator identity. Administrative changes and access actions may be audit logged. Hosting, email, payment and AI providers process the minimum connection and service data required to operate their parts of the product.

Younger users

Personality Play is not directed to children under 13. If you are not old enough to consent to data processing or make a digital purchase where you live, involve a parent or legal guardian before submitting an email, optional context or payment.