Privacy Policy

Last updated: June 2026

The short version — The free assessment collects no data whatsoever. Paid products (the Specialist Briefing) require a brief 48-hour server-side window for technical delivery; this data is encrypted and permanently deleted automatically.

Free assessment — what happens when you use Omniprism

Your answers are processed entirely within your browser. Nothing is sent to any server at any point during or after your session. No name, email, age, or identifying information is requested or stored anywhere.

Your session is held temporarily in your browser's localStorage in encrypted form (AES-GCM) and is automatically deleted when your session ends. You can clear it manually at any time by clearing your browser data.

Paid products — server-side storage (48 hours)

When you purchase a paid product such as the Specialist Briefing, your assessment data is temporarily stored server-side to allow delivery of your report. Specifically:

The legal basis for this processing under GDPR is contract performance (Article 6(1)(b)) — the data is processed solely to fulfil the purchase you made.

You are informed of this 48-hour window and asked to confirm your consent before any paid product is generated. You may request deletion of your session data before the 48-hour window expires by contacting reports@omniprism.app with your order reference.

Children and the pediatric editions

The pediatric editions (ages 7–10 and 11–13) are designed to be completed by a parent or guardian together with the child. Like the adult assessment, they run entirely in the browser: no answers, names, or identifying information about the child are sent to or stored on any server.

If a paid product is purchased for a pediatric assessment, the same 48-hour server-side storage window described above applies to the child's session data. The purchase — and the consent to this temporary processing — is given by the parent or guardian completing the checkout. The data is pseudonymous: it contains answers and scores identified only by an anonymous session token, never the child's name or identity. The email address collected at checkout is the parent's or guardian's, not the child's.

Parents and guardians may request early deletion of a child's session data at any time by writing to reports@omniprism.app with the order reference.

Cookies and tracking

Omniprism sets no tracking cookies. No analytics platform, advertising network, or third-party tracking script is loaded at any point.

Third-party services

Omniprism contacts the following external services:

None of these services receive assessment data in the context of the free tool. Upstash, Gumroad, and Resend are only engaged when a paid product is purchased.

Your rights under GDPR

For the free assessment: no personal data is processed, so there is nothing to access, correct, export, or delete.

For paid products: you have the right to request deletion of your 48-hour session payload before it auto-expires. Contact reports@omniprism.app with your order reference. Requests for access, portability, or correction of data held by Gumroad or Resend should be directed to those services directly.

Contact

Privacy questions: reports@omniprism.app