1. Information We Collect
We do not store test answer data on our servers; it is processed only temporarily within your browser.
We collect and process the following:
• Test answers — stored only in your browser's sessionStorage. Not stored on our servers.
• Email address — entered in the Paddle checkout when purchasing a paid report. Used to send the download link.
• Analytics data — Google Analytics 4 events (page views, etc.) collected only after consent. IP is anonymized by Google.
• IP and access logs — temporary logs by Cloudflare for infrastructure security.
2. How We Use the Information
• Provide the Service (compute and display test results)
• Send the paid report download link
• Process payments (delegated to Paddle)
• Service improvement via aggregate analytics (only with consent)
• Detect abuse and security threats
3. Third-Party Sub-Processors
Payments are processed by Paddle.com as the Merchant of Record (seller). We act as the digital content provider.
We rely on the following third parties:
• Paddle.com — payment processing, invoicing, VAT/refunds. Receives your email.
• Resend.com — sends the download link email. Receives your email.
• Google Analytics 4 — usage statistics (only with your consent).
• Cloudflare — web hosting, DNS, CDN.
We do not share your information with third parties for marketing purposes.
Cross-border transfers: We may transfer personal information abroad to provide the service. The data transferred, recipient country, timing, and method are as follows:
• Paddle.com (UK/US) — email address transferred at the time of payment
• Resend.com (US) — email address transferred when sending the download link
• Google Analytics (US) — analytics data transferred after user consent
• Cloudflare (global) — IP and access logs transferred for CDN and security
You have the right to refuse cross-border transfers. In that case, certain features (notably payment and report delivery) may be unavailable.
4. Retention
Payment records are retained by Paddle for 5 years (transaction record) and 3 years (consumer dispute records) as required by Korean e-commerce law. Other personal information is deleted as soon as the purpose of collection is fulfilled.
5. Your Rights
You may request access, correction, deletion, restriction of processing, or withdrawal of consent. Email [email protected] and we will respond promptly. Deletion of payment-related data is subject to Paddle's legal retention period.
6. Cookies and Tracking
Essential cookies (language preference, temporary test result cache) are used without consent. Analytics cookies (Google Analytics) are activated only after explicit consent via the cookie banner shown on first visit.
7. Children Under 14
We do not knowingly collect personal information from children under 14. If we discover that a child under 14 has made a purchase without parental consent, we will refund and delete the data immediately.
8. Privacy Officer
FLOWLAB (sole proprietorship) Contact: [email protected]
9. Policy Changes
Material changes to this policy will be announced on the website with prior notice when changes substantially affect your rights.