Last updated: September 2026
The short version — The free assessment collects no data whatsoever. Paid products (the Specialist Briefing) require a brief 48-hour server-side window for technical delivery; this data is encrypted and permanently deleted automatically.
Your answers are processed entirely within your browser. Nothing is sent to any server at any point during or after your session. No name, email, age, or identifying information is requested or stored anywhere.
Your answers are held in your browser's localStorage, encrypted with AES-GCM; the key stays on the device and is never transmitted. The saved session expires automatically after 48 hours, and you can remove it at any time by discarding it when the assessment offers to resume, or by clearing your browser data. Two further entries record your theme and language preference and contain nothing personal.
When you purchase a paid product such as the Specialist Briefing, your assessment data is temporarily stored server-side to allow delivery of your report. Specifically:
The legal basis for this processing under GDPR is contract performance (Article 6(1)(b)) — the data is processed solely to fulfil the purchase you made.
You are informed of this 48-hour window and asked to confirm your consent before any paid product is generated. You may request deletion of your session data before the 48-hour window expires by contacting reports@omniprism.app with your order reference.
The pediatric editions (ages 7–10 and 11–13) are designed to be completed by a parent or guardian together with the child. Like the adult assessment, they run entirely in the browser: no answers, names, or identifying information about the child are sent to or stored on any server.
If a paid product is purchased for a pediatric assessment, the same 48-hour server-side storage window described above applies to the child's session data. The purchase — and the consent to this temporary processing — is given by the parent or guardian completing the checkout. The data is pseudonymous: it contains answers and scores identified only by an anonymous session token, never the child's name or identity. The email address collected at checkout is the parent's or guardian's, not the child's.
Parents and guardians may request early deletion of a child's session data at any time by writing to reports@omniprism.app with the order reference.
The professional edition page offers an optional early-access form. Your name, email address and chosen segment reach us only if you fill it in and tick the consent box; they travel by email through Resend, are never stored in a database, and are never linked to assessment answers — which we do not hold in the first place. Reply to our email asking us to delete your request and it disappears along with the message.
Omniprism sets no cookies. We use one privacy-friendly, cookieless analytics tool (Vercel Web Analytics) to count anonymous, aggregate visits — which pages are opened, roughly from where. It uses no cookies, builds no profile, and never receives your answers or any personal or medical data. No advertising network or cross-site tracking is ever loaded.
Omniprism contacts the following external services:
Typefaces and article images are served from omniprism.app itself. Rendering any page, the blog included, contacts no external host.
None of these services receive assessment data in the context of the free tool. Upstash, Gumroad, and Resend are only engaged when a paid product is purchased.
For the free assessment: no personal data is processed, so there is nothing to access, correct, export, or delete.
For paid products: you have the right to request deletion of your 48-hour session payload before it auto-expires. Contact reports@omniprism.app with your order reference. Requests for access, portability, or correction of data held by Gumroad or Resend should be directed to those services directly.
Privacy questions: reports@omniprism.app