Privacy Policy

1. Overview

Soul Virtues Extractor ("we", "our", or "the website") is committed to protecting your privacy. This Privacy Policy explains our policies regarding data handling when you use our website (soulvirtues.org), including when you take the free quiz and when you purchase a premium report.

2. Client-Side Processing

Our 66-question test, scores, answer explanations, and image cards are calculated locally in your browser. Our Analytics events exclude individual answers, scores, and trait results. Microsoft Clarity is not loaded on the five homepages that host the quiz. Usage statistics, advertising, payments, and AI-assisted report generation are described separately below.

3. Local Storage

Browser local storage saves versioned answer progress, audio preferences, a submitted feature-vote choice, private report access credentials, and your practice notes. Notes stay on the device where you wrote them. V2 progress is shared across our five language pages in this browser, keyed by question ID. Older-bank progress is not applied to new questions. You can clear local records in your browser settings; doing so also removes the local report credential. Save the private link or PDF first. Paid-guide storage is described below.

4. Payments & Merchant of Record (Waffo Pancake)

If you purchase a premium report, the sale is made by Waffo Pancake acting as merchant of record (the legal seller). Waffo collects card details and the purchasing email at its checkout for payment, receipts, tax compliance, fraud prevention, and refunds. We never receive your full card number. Waffo shares the order status, order number, and purchasing email with us so we can grant access and assist with support.

When you choose checkout and accept the storage notice, your complete 66 answers are sent to our server to recalculate scores and save English and Spanish guide snapshots in a private Cloudflare D1 database. The saved guide includes scores and answer receipts. We link it to a report ID, a hashed access credential, and the verified Waffo order. Only the report ID and product-identification metadata go to Waffo; we do not send Waffo your quiz answers, scores, notes, or private access token. The token is stored in your browser and in the fragment of a private link; anyone holding that link can access the guide.

Online access ends 30 days after confirmed payment. Expired guide records and unpaid drafts older than 31 days are removed during checkout maintenance, rather than at a guaranteed exact deletion time. Payment-event identifiers are kept for retry deduplication until maintenance after 31 days. For checkout abuse prevention we retain a hashed hourly request bucket, not a raw IP address in the report database; old buckets are removed after a day during maintenance. To request deletion or a replacement link, contact us from the purchasing email with your order number. Waffo retains its own transaction records under its policies and legal obligations.

5. AI-Assisted Report Generation (Field Guide & Paid Report)

For new Paid Report purchases, the checkout notice asks you to agree to AI processing. After payment is verified, we automatically send the 66 quiz statements and your actual answers, their scoring directions, seven calculated scores, and report language to DeepSeek to produce the personalized readings, practice scenarios, and seven-day plan. We do not send your name, email, notes, private access token, order number, or payment details to AI. The provider processes the request under its own terms. Processing can continue after you close the browser. We save the validated text with your private guide, and reopening that report does not generate it again. Failed requests are retried a limited number of times and are not represented as a completed AI report. Earlier orders only send individual answers to AI if you separately agree on the report page.

6. Analytics and Performance Tools

To understand traffic patterns and optimize user experience, we utilize third-party analytics services:

• Google Analytics: Processes usage events such as test completion, card downloads, and a selected feature-vote category, as well as standard request metadata. These events exclude quiz answers, scores, trait results, and free-text suggestions.
• Microsoft Clarity: Runs on static information pages to provide usage recordings and heatmaps. It is not loaded on the five quiz homepages, so it does not record the quiz interaction or its dynamic result. Standard metadata may still be processed on pages where Clarity runs.
• Cloudflare Pages & Security Logs: Processes standard request metadata (including IP address and request timestamps) strictly for DDoS mitigation, edge performance, and abuse prevention on payment-related endpoints.

7. Cookies and Third-Party Advertising (Google AdSense)

We may serve advertisements through Google AdSense and affiliated certified ad networks on our website.

• Third-party vendors, including Google, use cookies, web beacons, and unique identifiers to serve ads based on a user's prior visits to this website or other websites on the Internet.
• Google's use of advertising cookies enables it and its partners to serve targeted ads based on your visits to our site and/or other sites across the Internet.
• Users may opt out of personalized advertising at any time by visiting Google Ads Settings or by visiting www.aboutads.info.

8. User Rights and Global Privacy Regulations

Depending on your location, you may have specific privacy rights under applicable regulations (such as GDPR for European Economic Area / UK residents, or CCPA/CPRA for California residents):

• EEA / UK Users (GDPR): You have the right to access, rectify, or erase your personal data, and to manage or withdraw your consent for non-essential cookies through your browser's cookie settings. Where we process data to perform a contract with you (processing payments and delivering reports you purchase) or for our legitimate interests (site security and abuse prevention), we rely on those legal bases; you may object to processing based on legitimate interests.
• California Residents (CCPA/CPRA): We do not sell or share personal information for monetary or other valuable consideration. Service providers we use include Cloudflare (hosting), Google (analytics and advertising), Microsoft Clarity (analytics), Waffo Pancake (payments, as merchant of record), and DeepSeek/OpenAI (report text generation on non-identifying scores).

To exercise your rights, contact us at the address below. Because purchase and invoice records are held by Waffo Pancake as the legal seller and retained as required by tax law, deletion requests relating to those records are subject to Waffo Pancake's policies; we will forward your request and assist where we can.

9. Children's Privacy

Our website is designed for general audiences and does not knowingly collect or solicit personal information from children under the age of 13. Purchases require the user to be at least 18 years old or to have the consent and supervision of a parent or legal guardian. If you believe a child has made an unauthorized purchase, contact us and we will assist with a refund via Waffo Pancake.

10. Voluntary Feedback

Preset feature votes may send the selected category and page language to Analytics. Free-text suggestions are not sent to Analytics. If you use our MakeThisBetter feedback link or widget, the feedback service receives the information you choose to submit. Please do not include sensitive personal information. Feedback is optional and does not affect your test result.

11. International Data Transfers

Our hosting, analytics, advertising, and payment providers operate globally, and the AI providers used for report generation process requests on servers located outside your country (including in the United States or, for DeepSeek, in China). The quiz data sent to AI providers consists of non-identifying numeric scores and trait labels. Buyer name, email, and payment details collected at checkout are processed by Waffo Pancake as the legal seller under its own global compliance program.

12. Contact Us

If you have any questions or comments about this Privacy Policy, please reach out via email at: contact@soulvirtues.org.