Your choices are personal. So is your privacy.

01

Scope

This Privacy Policy applies to WhichYou websites, account features, choice experiences, Monthly Results, Insight- and Guidance-related features, and other services that link to this policy (collectively, the "Service").

WhichYou is designed primarily for users in the United States. This policy does not govern the independent privacy practices of third-party websites or platforms such as Google, YouTube, Instagram, or other services that you may choose to connect or visit.

02

Information We Collect

Account information

When you create a WhichYou account, we may collect information such as:

• your name;
• your email address;
• account identifiers;
• authentication and session information; and
• information needed to maintain the security and status of your account.

Password-based authentication is designed so that plaintext passwords are not displayed to WhichYou staff. Authentication systems may store a cryptographic representation of your password as necessary to verify future sign-ins.

Choice information

When you participate in WhichYou, we may collect information about your choices, including:

• the WhichYou question or Choice presented to you;
• whether you selected X or Y;
• the date associated with the Choice;
• the source through which the Choice was recorded;
• updates you make to a Choice when editing is allowed; and
• identifiers used to associate the Choice with your account or anonymous browser identity.

Derived result information

WhichYou may derive information from your recorded choices in order to create the experience. This may include:

• internal choice tendencies or attribute scores;
• comparisons between those tendencies;
• Monthly Result scores;
• your Primary Result;
• nearby or secondary result patterns;
• historical Monthly Result snapshots; and
• Insight or Guidance analyses, if those features are available to you.

Official Tracking Source information

If you select an Official Tracking Source, we may store:

• the calendar month;
• the selected source, such as WhichYou.me, Instagram, or YouTube;
• the identity associated with that source; and
• connection information needed to maintain the source selection.

Connected social account information

If you choose to connect a supported third-party account, such as YouTube or Instagram, WhichYou may receive information permitted by that platform and by the authorization you provide.

Depending on the platform and feature, this may include:

• a platform account or channel identifier;
• a username, handle, or channel name;
• connection and verification status;
• authorization information required to complete or maintain the connection; and
• information necessary to associate supported WhichYou interactions with your account.

Connecting a social account does not require you to provide WhichYou with the password for that social platform.

Anonymous browser information

You may be able to begin making supported WhichYou.me choices before creating an account.

In that situation, WhichYou may use a month-specific anonymous browser identifier to keep those choices associated with the same browser or device.

If you later create or sign in to an account, supported anonymous choices may be associated with your account.

Technical and security information

When you use the Service, WhichYou and its infrastructure providers may process technical information such as:

• IP address;
• browser and device information;
• request and response information;
• timestamps;
• security events;
• error and diagnostic information; and
• information used to prevent abuse, fraud, or unauthorized access.

Communications

If you contact WhichYou, we may collect the information contained in your message and information needed to respond to your request.

Payment information

Paid WhichYou subscriptions are available through the Service.

When you purchase or manage a subscription, WhichYou may receive information such as your plan, subscription status, transaction identifier, billing status, and related payment metadata from our payment provider.

Payment processing is provided through Stripe Managed Payments and related Stripe services. WhichYou does not directly store full payment-card numbers.

03

Where Information Comes From

We may receive information:

• directly from you;
• automatically when you use WhichYou.me;
• from your browser through cookies and similar essential technologies;
• from a third-party service that you intentionally connect to WhichYou;
• from infrastructure and security providers that help operate the Service; and
• from our payment provider when you purchase or manage a paid subscription.

04

How We Use Information

WhichYou may use information to:

• create and maintain your account;
• authenticate you and maintain sessions;
• save and retrieve your X/Y choices;
• maintain your Official Tracking Source;
• associate supported social connections with your WhichYou account;
• calculate and display Monthly Results;
• preserve closed-month result history;
• provide Insight or Guidance features when available to you;
• provide customer support;
• troubleshoot errors and improve reliability;
• protect users and the Service from abuse, fraud, security threats, and unauthorized access;
• understand how the Service is used and improve WhichYou; and
• comply with applicable legal obligations and enforce our Terms.

05

Choices & Automated Results

WhichYou automatically processes recorded choices to create product results and insights.

For example, an X or Y choice may contribute to one or more internal tendencies. WhichYou may compare those tendencies with the Result Framework published for a particular month.

The system may then identify a Primary Result, nearby patterns, or other insights. During an open month, the result may change when additional official choices are recorded.

This automated processing is used to provide the WhichYou reflection and entertainment experience. WhichYou results are not validated psychological diagnoses.

06

Cookies & Similar Technologies

WhichYou may use cookies or similar browser technologies that are necessary to operate the Service.

These may include:

• authentication and session cookies;
• security-related cookies;
• a month-specific anonymous identifier for supported WhichYou.me choices; and
• other technologies needed to remember essential service state.

Removing cookies or browser storage may affect sign-in state or the ability to associate anonymous choices with the same browser.

If WhichYou later introduces non-essential analytics, advertising, or other technologies that require additional disclosures or consent, this policy and the appropriate user controls will be updated before those uses are enabled.

07

Connected Services

WhichYou may allow you to connect accounts from third-party platforms.

Google and YouTube

If you choose to connect YouTube, you may be redirected to Google to authorize the requested access.

Google and YouTube process information under their own terms and privacy policies. WhichYou receives only information made available through the authorized connection and used for the supported WhichYou feature.

Instagram and Meta

WhichYou may support Instagram account information or Instagram-based tracking features when the required platform connection is available.

Instagram and Meta operate independently under their own terms and privacy policies.

Disconnecting a platform

Where supported, disconnecting a third-party service stops future use of that connection by WhichYou. Information already incorporated into a closed Monthly Result or retained for legitimate legal, security, or recordkeeping reasons may not necessarily be removed automatically solely because a platform is disconnected.

08

How Information May Be Shared

WhichYou may disclose information in the following circumstances.

Service providers

We may use vendors and infrastructure providers to host, secure, operate, maintain, analyze, or support the Service.

For example, WhichYou currently uses Cloudflare infrastructure for website delivery, server-side computing, database functionality, and related technical operations.

Connected services

When you intentionally connect or interact with a third-party service, information may be exchanged with that service as necessary to perform the requested connection.

Legal and safety reasons

Information may be disclosed when reasonably necessary to comply with applicable law, legal process, enforceable government requests, protect the security or integrity of the Service, investigate abuse or fraud, or protect rights and safety.

Business changes

If WhichYou is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

09

Advertising, Sale & Sharing

As of the date of this policy, WhichYou does not operate a behavioral advertising program and does not intentionally sell personal information to third parties for money.

WhichYou also does not currently use personal information for cross-context behavioral advertising.

If our practices change in a way that creates additional opt-out rights under applicable law, we will update this Privacy Policy and provide the required controls before or when those practices are introduced.

10

Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including operating your account, maintaining your WhichYou history, providing requested features, protecting the Service, resolving disputes, and complying with legal obligations.

Different categories of information may have different retention periods.

For example, a closed Monthly Result may be retained as part of your WhichYou history, while temporary security or technical information may be kept for a shorter period.

When information is no longer reasonably needed, it may be deleted, de-identified, or otherwise handled in accordance with applicable requirements.

11

Security

WhichYou uses technical and organizational measures intended to protect information against unauthorized access, loss, misuse, or alteration.

These measures may include authenticated sessions, restricted access, encrypted network connections, platform security controls, and infrastructure security features.

No internet service, database, or security system can guarantee absolute security.

12

Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights regarding your personal information.

These rights may include the ability to request:

• access to certain personal information;
• information about how personal information is collected, used, or disclosed;
• correction of inaccurate information;
• deletion of certain information;
• a portable copy of certain information;
• restriction or limitation of certain processing, where applicable; and
• opt-out rights where required by applicable law.

We may need to verify your identity before completing certain requests. This helps prevent another person from accessing or deleting your information.

We will not discriminate against you for exercising privacy rights that applicable law gives you.

California users

California residents may have additional rights under California privacy law when those laws apply to WhichYou and the relevant processing activity.

These can include rights to know, access, correct, delete, and obtain information about certain disclosures, as well as opt-out or limitation rights for certain uses of personal information.

WhichYou does not currently use personal information for cross-context behavioral advertising or intentionally sell personal information for money.

Privacy preference signals

Where applicable law requires recognition of a valid browser-based opt-out preference signal, WhichYou will handle such signals in accordance with applicable requirements for the relevant processing activity.

Submitting a request

To submit a privacy request, emailcontact@whichyou.me.

Please identify the WhichYou account involved and clearly describe the access, correction, deletion, or other privacy request you are making.

13

Children's Privacy

WhichYou is not directed to children under 13.

Children under 13 should not create a WhichYou account or intentionally provide personal information through the Service.

If we learn that personal information from a child under 13 was collected in circumstances where parental consent was legally required but not obtained, we will take appropriate steps to delete or otherwise address that information.

A consistent age requirement will also be described in the WhichYou Terms of Service.

14

International Processing

WhichYou is designed primarily for the United States, but the internet infrastructure and service providers used to operate WhichYou may process information in more than one country.

This means information may be transferred to or processed in a country different from the country where you are located.

Where required, WhichYou will use appropriate measures for international data transfers under applicable law.

15

Changes to This Privacy Policy

WhichYou may update this Privacy Policy as the Service changes, new features are introduced, service providers change, or legal requirements evolve.

When the policy is updated, the "Last updated" date at the top of this page will be revised.

If a change is material and applicable law requires additional notice, we will provide that notice through an appropriate method.

16

Contact

Privacy questions or requests may be sent tocontact@whichyou.me. Additional operator information will be provided as required by applicable law.