Privacy policy

The short version

• Of personal data we collect only your email address — and only if you choose to create an account. We do not ask for phone, name or address.
• Sensitive results stay only in your browser by default. Wheel measurements, card spreads and daily ritual history are sent to the server only after separate explicit consent.
• There are no ad trackers or third-party counters on the site. There is one cookie — technical, for signing in to the account.
• You can ask to delete your account and data at any time — write to Telegram @Sunfaced.

1. General provisions

This Policy describes what information the Psy-Atlas site (hereinafter — the Site) collects, what it is used for and how it is protected. The Policy is drawn up in accordance with the Russian Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".

The data operator is the Site administrator, psychologist Alexander Klochkov (contact: Telegram @Sunfaced.

By registering on the Site and checking the consent box, you consent to the processing of personal data to the extent and for the purposes described in this Policy. You can use the Site without registration — in that case no personal data is collected at all.

2. What data we collect

2.1. When registering an account (only with your consent)

• Email address — used as the login and for contact about account matters;
• Password — stored only as a cryptographic hash; we don't see the password itself and cannot recover it;
• When signing in via Yandex — your account identifier at the provider and email, which the provider passes with your permission;
• Session service data — registration and sign-in dates, IP address and browser type at sign-in. Needed to protect the account from break-ins.
• Materials saved with your separate consent — Wheel of Balance ratings and MAK spread state, including technique results (card identifiers and positions, drawings and your notes). They are used only in your account, are accessible only to you and can be deleted at your request.
• Daily ritual history saved with your separate consent — only reveal dates and card identifiers used to calculate and sync your streak. Answers to the daily question and notes are not collected.
• Your favourites list saved with your separate consent — only the card identifier and date added. Reasons for choosing, answers and notes are not collected; only you can access the list in your account.
• A guest's pending save temporarily stays in the current browser tab after an explicit click on Save and is removed as soon as sign-in and account storage are complete. The server does not receive it before sign-in.
• Test results saved with separate consent — the method name, date, final scores, percentages, and level codes. Individual answers and interpretation text are not sent to the server.
• Emotion journal records saved with separate consent — date, emotion codes, and your free text about situations, thoughts, urges, and actions. Only you can access them; they are not sent to CRM or analytics and can be deleted at your request.

2.2. What we deliberately do NOT collect

• Phone number, full name, address, payment data — the Site has no such fields;
• Individual test answers and practice records stay in your browser storage (localStorage). Only an aggregated test result can be sent to your account with separate consent; card spreads and wheel measurements are also sent only with separate consent;
• Data from ad trackers and third-party analytics counters — the Site has none. If analytics ever appears, we will first update this Policy and give notice on the Site.

3. Why we need this data (processing purposes)

• Account operation: email and password are needed to sign in; separately saved measurements and card spreads can be reopened, while ritual dates sync your streak across devices;
• Security: session service data helps notice suspicious sign-ins and protect the account;
• Account communication: we may email you only about essentials — e.g. access recovery. There are no marketing mailings; if they ever appear — only with separate consent and an unsubscribe option.

Data is not sold and not shared with third parties for advertising.

4. Cookie

The Site uses one technical cookie — it holds your session so you don't enter the password on every page. It is required for sign-in to work, does not track you on other sites and is not used for advertising. If you don't sign in, no identifying cookies are set.

5. How data is stored and protected

• Passwords — only as a hash (scrypt algorithm), never stored in plain text;
• Session tokens are stored hashed in the database; the session cookie is inaccessible to scripts (HttpOnly);
• Only the Site administrator has access to the accounts database;
• Password-guessing attempts are limited automatically (rate limit).

Account data is kept while the account exists. When the account is deleted, its data is deleted too.

6. Your rights

At any time you can:

• find out what data about you is stored;
• correct inaccurate data;
• withdraw consent and ask to delete the account along with the data;
• receive your data in an understandable form.

To do so, write to Telegram @Sunfaced — this is the main contact channel. Requests are handled within up to 10 business days.

You control the data in your browser's localStorage yourself: it is deleted by clearing the site data in the browser settings.

7. User age

The Site is intended for persons over 18. We deliberately do not collect data of minors. If you believe a child's data was given to us — write, and we will delete it.

8. Changes to the Policy

If the Site starts collecting something new (e.g. traffic analytics or paid services appear), we will first update this Policy, change the revision date at the top of the page and give notice on the Site — and only then start collecting.

9. An important note about the Site's content

The Site is not a medical service. The techniques, tests and practices on the Site are intended for self-observation and are not diagnostics or treatment. Test results are not a diagnosis. If things are hard — turn to a specialist or a helpline (helpline 8-800-2000-122, emergency services 112).