Skip to content

Do Not Sell or Share My Personal Information

Your data privacy

Effective Date: June 28, 2026 | Version: 1.5 | Last Updated: October 20, 2026

We Do Not Sell Your Personal Information; Limited Advertising Sharing You Can Turn Off at Any Time

TraitTune does not sell, rent, or trade your personal information or psychometric data for money or other valuable consideration. We do share a limited advertising signal, and where it starts depends on where you are: in the EU, EEA, UK, Switzerland and Brazil nothing runs until you opt in; in the United States and the rest of the world it is on by default from your first page view until you switch it off. While it is on, advertising partners (TikTok, Reddit; Meta if and when we enable it) receive conversion events — that a TraitTune page was viewed, an account was created, or a subscription or purchase was completed — together with their own cookie from your browser, and, for matching, a one-way SHA-256 hash of your email that cannot be reversed back into your address — so we can measure ad performance and show TraitTune ads to similar audiences. Under the California Consumer Privacy Act (CCPA / CPRA) this counts as "sharing" for cross-context behavioral advertising. There is no monetary sale to opt out of. To switch the advertising signal off, open "Cookie preferences" in the footer of any page and turn off Advertising & Attribution; and if your browser sends a Global Privacy Control signal, we treat that as an opt-out on its own, in every region.

1. We do not sell your data; we share a limited advertising signal you can switch off

Under the CCPA, "sale" and "sharing" are different things. "Sale" means disclosing personal information to a third party in exchange for monetary or other valuable consideration — we do none of that. "Sharing" means disclosing personal information for cross-context behavioral advertising — we do this only with TikTok and Reddit (and Meta if and when we enable it). Whether it starts on depends on where you are: in the EU, EEA, UK, Switzerland and Brazil it stays off until you opt in; in the United States and the rest of the world it is on by default until you switch it off in Cookie preferences, and a Global Privacy Control signal switches it off on its own. What they receive are conversion events (a page-view, sign-up, subscription, or purchase signal) plus their own cookie from your browser, and — only for matching — a one-way SHA-256 hash of your email that cannot be reversed back into your address. They never receive your readable email, name, free-text answers, or psychometric scores.

Reference: Cal. Civ. Code § 1798.140(ad) (sale) and § 1798.140(ah) (sharing).

  • No advertising sale: We never sell your data to ad networks, brokers, or marketing platforms.
  • Cross-context advertising sharing: Opt-in in the EU, EEA, UK, Switzerland and Brazil; on by default everywhere else, including the United States. Limited to TikTok and Reddit today (Meta if and when we enable it). You can switch it off at any time in our cookie preferences, and we honor Global Privacy Control.
  • No data brokering: Your name, email, assessment responses, and psychometric profile are never offered to data brokers.
  • No training-data sale: Your responses are not sold to AI vendors for model training.

2. We limit our use of sensitive personal information

We use your sensitive personal information solely to provide the service you have requested and for no other purpose; we do not use or disclose it to infer characteristics about you. Because our use is limited in this way under California Civil Code §1798.121(d), the CPRA right to limit the use of sensitive personal information does not apply, and we do not provide a separate “Limit the Use of My Sensitive Personal Information” link.

3. What we actually do with your data

We process your data only to deliver the service you signed up for: running adaptive psychometric assessments, generating personality interpretations, sending you transactional emails, and supporting your subscription.

We rely on a small number of vetted sub-processors (cloud hosting, payments, email delivery, error monitoring). Each is bound by a Data Processing Agreement and may not use your data for their own purposes. The full list is published in our Privacy Policy.

See full sub-processor list →

4. Delete or export your data — anytime

Even though we don't sell your data, you still have the right to control it. You can delete or export everything we have on you directly from your account, with no email exchange or waiting period:

  • Export: Download a complete copy of your account data, assessment responses, and personality profile in JSON format. Settings → Your data → Download all my data.
  • Delete: Permanently delete your account and all associated psychometric data. Settings → Account → Delete my account. Deletion is immediate and irreversible, so export your data first if you want a copy.
Go to Settings → Account

5. Global Privacy Control (GPC)

We honor Global Privacy Control signals in every region. If your browser sends a GPC signal, we treat it as a hard opt-out of cross-context behavioral advertising — our TikTok and Reddit pixels stay off, whether you had previously accepted marketing cookies or advertising was on by default for your region. We check for the signal before anything is written, so a browser broadcasting GPC never receives an advertising pixel. Sale of personal information is not affected because no sale takes place.

6. Contact us

Questions about this notice or California privacy rights:

Email: privacy@traittune.com

Subject line: “CCPA / Do Not Sell Request”

Phone: +1 (833) 785-2999

Response time: Within 45 days, per CCPA § 1798.130(a)(2).

Document Control:

  • Effective Date: June 28, 2026
  • Version: 1.5 — §4 now states that deleting your account is immediate and irreversible (it no longer says it completes within 30 days with written confirmation), so you export your data first; corrected the export and delete paths in Settings.
  • Version: 1.4 — Disclosed the jurisdiction-tiered consent regime: prior opt-in in the EU, EEA, UK, Switzerland and Brazil, and notice-with-opt-out everywhere else including the United States, where advertising and analytics are on by default from the first page view and can be switched off at any time in Cookie preferences; corrected the §1 heading and body and the intro callout, which still said advertising sharing happens only with prior consent; restated that Global Privacy Control is honored in every region and is checked before anything is written; aligned with Privacy Policy v5.0
  • Version: 1.3 — Disclosed that, with marketing consent, advertising partners (TikTok, Reddit; Meta when enabled) now receive server-side conversion events and, for matching, a one-way non-reversible SHA-256 hash of your email — never your readable email, name, free-text answers, or psychometric scores; aligned with Privacy Policy v4.8
  • Version: 1.1 — Added §2 CPRA §1798.121(d) statement limiting use of sensitive personal information to providing the requested service; renumbered subsequent sections
  • Version: 1.0 — Initial CCPA / CPRA conspicuous-link notice page
  • Document ID: DNS-2026-10-V1.5
  • Last Review: October 20, 2026