Privacy policy

Last updated: September 11, 2026.

This policy describes the Big 5 Test website at big5test.net. Contact contact@big5test.net with privacy questions or requests.

What you provide

When you start a test, the site creates an internal anonymous identity and a browser session. You do not need to choose a username or provide an email to answer the questions. “No login required” does not mean no server record exists: the session is what connects a completed test to its purchase.

Your in-progress answers are saved in browser storage when available. When you finish, we store your submitted answers, questionnaire version, and internal assessment identifier on the server to show your free result. If you purchase the detailed report, we generate and save it with preparation progress in private server storage. These records preserve access and prevent a different person from opening your result.

Avoid entering identifying information into a support message unless it is needed to resolve your request. The questionnaires themselves use fixed-choice answers and do not ask for free-text personal histories.

Payment information

Stripe processes checkout. We do not receive or store full card numbers or card security codes. We retain order identifiers, payment status, charged amount, currency, and the transaction and receipt information returned by Stripe. Stripe may collect the email or billing details needed for checkout even if you did not supply an email while taking the test.

We do not treat a checkout email as permission to send marketing. See Stripe's privacy policy for its handling of payment information.

Security checks

Cloudflare Turnstile helps protect the no-login test flow. Its widget and verification service process browser and network information for security. We also keep rate-limit counters and use a network identifier to limit repeated attempts. Counters use hashed keys and short expiry windows.

Cloudflare provides our intended hosting and private report storage infrastructure. Paid reports must use a private storage bucket, not a public image URL. See Cloudflare's privacy policy for information about its services.

Optional report email

After purchasing, you can request an email containing a private report link. That request is optional and is not a mailing-list signup. We send the destination address and message to our transactional email provider, Resend, when that service is configured.

Anyone who possesses a private link can open the paid report. Do not post it publicly. Private links expire after one year and stop working after a confirmed full refund. Sending a newer report email replaces the previous email link. Creating a saved private link separately replaces the previous saved link, without replacing the email link. We store hashes of these access credentials, not the original credentials. The email provider accepting a message is not a guarantee that it reaches the inbox.

Saving the report as an image renders the report in your browser. This export does not send the report to a screenshot service and excludes email input fields and private access links. The saved image still contains your full personality report; keep it private if you do not want others to read it.

Optional public sharing

Nothing is published automatically. If you create a share card, its public link shows only the test name, character illustration, nickname, and short quote. It does not expose your answers, numerical scores, payment details, or private report link.

You can revoke the public link from your report. Revocation prevents future access through this site; it cannot erase screenshots, downloads, or copies already made by other people. Social platforms apply their own policies when you choose to share content with them.

Cookies and browser storage

We use session cookies to preserve report access and browser storage to resume unfinished tests. These support the service you request. Clearing cookies may remove your access unless you saved an email link or can verify the purchase through support. A recovery cookie is set when you open a valid private email link.

The homepage also keeps a recent-results list in this browser: the test name, character label, completion date, report identifier and last known unlock status. It does not store your answers, detailed report or private recovery token in that list. Unlock status is checked with the server when you view the list; editing browser storage cannot unlock a report. Each entry disappears 30 days after the test was completed, whether paid or unpaid. Opening it again does not extend that period. Removing a local entry does not delete the server report or purchase record. Other people using the same browser may see your local list; it does not automatically transfer to another browser or device.

The first release does not require advertising or marketing cookies to take a test. We do not include personal reports or answer data in a public sitemap.

On public information pages, Google Analytics measures page visits using Advanced Consent Mode. Until you allow analytics cookies, or if you decline them, Google may receive limited cookie-free measurement signals. Allowing analytics enables analytics cookies; advertising consent remains denied. You can change or withdraw your choice using “Privacy choices” on public pages. Withdrawing clears accessible Google Analytics cookies.

Analytics is not loaded on questionnaires, personal reports, private-link recovery, public share cards or account pages. Public page addresses sent for measurement exclude queries and fragments; answers, scores, report identifiers and email addresses are not sent. Enhanced measurement and automatic form, outbound-link and history tracking are disabled. See Google's privacy policy for its processing of measurement data.

Retention and deletion

We keep submitted reports and their linked purchase records so that paid access and support remain possible. We have not promised indefinite access or an automatic deletion date for those records. You can request deletion through the contact address. We may need to retain limited payment records where required for accounting, dispute handling, or legal obligations.

Deleting browser storage only removes the copy on that device. It does not delete submitted server records. We may ask for enough information to verify ownership before changing or deleting a report.

Intended use

This site is intended for adults using the tests for personal reflection. It is not designed to collect children's data or to provide clinical assessments. If you believe information was submitted inappropriately, contact us so we can review it.