Cookie Policy

Our Strictly Necessary Cookies

We use the following first-party cookies. None is used for advertising, profiling, or cross-site tracking, and each supports a core service or privacy function:

The authentication cookie is set only when you sign in. The iqcl_guest_test cookie is created when an anonymous full-IQ test session is established. Both are HttpOnly, are transmitted only over secure connections in production, and use same-site protections. The guest cookie contains a high-entropy random credential; the server stores only a one-way SHA-256 hash alongside the test session, not the raw token.

The iqcl_cr cookie stores a single character — 1 if your region requires consent before analytics, 0 if it does not. It contains no location data: your country, region, city and coordinates are never written to it, and it holds nothing that identifies you or could be used to recognise you. We set it because the choice of privacy default has to be made the instant a page opens, before any analytics can run; determining it any later would mean either delaying the decision or applying the wrong default. It is readable by JavaScript for that reason, and is not used for any other purpose.

What we don't use cookies for:

• Purchase history: Stored securely in our database and linked to the relevant account or guest test result
• Terms and purchase consent: Recorded server-side with the relevant account or guest purchase
• Promotional preferences: Handled via localStorage (see below)

Local Storage

For non-essential preferences that don't need to leave your device, we use your browser's localStorage instead of cookies. This data stays entirely on your device and is never sent to our servers.

Our analytics measurement does not require a cookie, we use your browser's localStorage. Most of this data stays entirely on your device. The one exception is the analytics device identifier described below, which our analytics provider sends to its servers through our own domain so we can measure aggregate usage.

What we store locally:

• Theme preferences: Your dark/light mode choice
• Analytics opt-out preference: Your privacy choices are respected
• Promotional banner dismissals: So you don't see the same offer repeatedly
• Marketing attribution: Session-only data for understanding how you found us
• Analytics device identifier: A randomly generated identifier used by our analytics provider to recognize a returning browser. It is stored in localStorage (not a cookie) and is sent to our analytics provider through our own domain.
• UI preferences: Other settings that don't require server-side persistence

You can clear localStorage at any time through your browser's developer tools or settings. Clearing it resets your analytics device identifier and your opt-out preference, but won't affect your account or authentication.

Managing Cookies

You can delete cookies at any time in your browser settings. Deleting iqjb_auth signs you out of your account. Deleting iqcl_guest_test removes this browser's ownership credential for anonymous IQ-test sessions and may prevent direct access to a guest result or paid guest report from that browser. Deleting iqcl_cr has no lasting effect — it is recalculated the next time you load a page, while your saved analytics choice remains stored separately in localStorage. If you need assistance, contact our support team.

Analytics

Our analytics tools allow us to monitor and improve our service. We do not use cookies for analytics purposes and do not track you across other websites. Our analytics implementation does, however, collect data about how you use our site, including, for signed-in users, identifying profile information (see the Privacy Policy):

• Mixpanel (EU residency) - Measures page views and custom events using localStorage instead of cookies. For signed-in users it builds an identified analytics profile (see below). The data is hosted in the European Union.

No cookies, but a localStorage device identifier. Mixpanel does not set any cookie. Instead, it generates a random device identifier the first time you visit and stores it in your browser's localStorage. Because it persists in localStorage, this identifier can recognize your browser across visits to our site. It is not shared with or used by any other website, so there is no cross-site tracking.

IP addresses are collected. Your IP address is sent to Mixpanel, which uses it to determine your approximate geographic location (for example, country, region, and city) and to enrich your analytics profile.

Identified profiles for signed-in users. When you are signed in, your analytics profile is identified and may include personally identifiable information including: your name, email address, profile information, plan, purchase and gift-code activity, and your use of our services. See the Privacy Policy for the full list and the lawful basis.

First-party delivery. The Mixpanel library and all analytics events load through our own domain (a first-party /api/mp endpoint) rather than from a third-party network, which improves reliability against ad-blockers and avoids exposing your activity to additional third-party domains.

Session replay. Mixpanel Session Replay reconstructs on-page interactions to help us diagnose usability issues, for up to 100% of eligible sessions. It captures the full on-screen content, including any text on the page. Replay data is buffered in your browser's IndexedDB before being sent. Replays are retained for 30 days. See the Privacy Policy for details and retention periods.

For more on how Mixpanel handles data, see Mixpanel's Privacy Policy and its Data Processing Agreement.

Third-Party Services

Stripe (Payment Processing)

When you make a purchase, Stripe sets cookies that are strictly necessary for payment security. These cannot be disabled as they protect both you and our platform from fraud:

Stripe also uses device fingerprinting for advanced fraud detection. This analyzes browser characteristics without storing additional cookies. These measures are industry-standard for secure payment processing and are governed by Stripe's Privacy Policy.

Questions

For questions about our cookie practices, please refer to our Privacy Policy or contact us at iqcareerlab@gmail.com.