Previous version. This is the Privacy Policy as it read from September 16, 2026 until it was replaced. It is kept so you can read the version that applied to you. The version in effect now (September 23, 2026) is at /legal/privacy-2026-09-23, and the version at /privacy takes effect on October 22, 2026; every version is listed on the policy history page.

Legal

Privacy Policy

Last updated: September 16, 2026

The short version. We store what we need to run your assessment, your reports, and your account. We never sell your data. We run no advertising trackers, and our own usage counts stay off unless you turn them on. You can download your data or delete your account yourself, at any time, from the Your data section of your account page. Took the assessment without an account? The Data Requests page can delete that record too.

Contents

  1. Who we are
  2. What we collect
  3. How we use it
  4. Who we share with
  5. Your rights
  6. Cookies and browser storage
  7. Data retention
  8. Security
  9. Children's privacy
  10. International users
  11. Changes to this policy
  12. Contact

1. Who we are

WiredType is run by a sole proprietor based in New Jersey, United States, who also does business under the name WellerDeveler. Throughout this policy, "we," "us," and "our" refer to WiredType. Our website is wiredtype.com.

We offer a free DISC assessment, paid reports, subscriptions with AI coaching features, and tools for teams. This policy explains what we collect when you use any of them and what we do with it.

2. What we collect

Assessment answers

When you take an assessment we store your answers, your scores and DISC type, a random session ID, your browser's user-agent string, the country our host detects from your connection, and, for the full assessment, your screen size. If you are signed out, the record carries no name or email address. When you sign in or create an account on the same browser, the assessments you took there are attached to your account.

Account information

If you create an account we store your email address and the first and last name you enter. Your password is handled by our sign-in provider, Supabase, which stores it only in hashed form. Your account also holds your DISC type, what you have bought, and your AI credit balance. You can use an email alias if you prefer.

Payment information

Payments are processed by Stripe. We never see or store your full card number, security code, or bank details. Stripe tells us the email used at checkout and whether the payment went through. We store the product you bought, the amount, the date, and Stripe's reference numbers for the payment, linked to your account. Stripe keeps its own record of every payment under its own privacy policy.

AI features

Three features send what you type to an AI model: the AI coach chat, the writing-sample analysis, and team pair reports. The text you enter and the DISC profile details the feature needs go to OpenAI, which writes the response. If OpenAI is unavailable, our code can send the same request to Anthropic instead. We do not keep coach chats or writing samples, unless you send an exchange to us yourself as a bug report from the chat or by email. Team pair reports are saved so your team can read them again. We also use the same AI providers to draft the wording of some emails and replies to match your type; those requests carry your first name, your DISC type and scores, and the facts of the message (a receipt, a result, a support reply), and are not saved by us. The AI Use page lists every AI feature and what it sends.

Email list

If you use Email me this result under a free result, we store the address, your DISC type, the page you were on and the page that linked you there, your browser's user-agent string, the country our host detects from your connection, and when we emailed you. We send that one email, with your type name, a short summary and a link to the free page for your type, and this form sends nothing else. Entries from an older signup form also record the date the person agreed to hear from us.

Two more emails exist only if you ask for them with an unchecked box: one link to finish a checkout you started and did not complete (sent once, after the Stripe checkout expires unpaid), and one reminder about your free result a week after you request it. Each is a single email with an unsubscribe link, and neither is sent before we publish a postal address. The record of your request is kept for 60 days and is the consent for that one email; the unsubscribe list applies to both.

Teams

If you join a team on WiredType, the people who run that team (the admins) can see your name, email address, DISC type, and your four scores, plus the team-facing tips built from them. Your answers to individual questions stay private. The invite email and the accept page say the same before you join.

Research program

Research participation is off unless you turn it on. What it records is described on our Research Privacy Policy page.

Server logs

Our hosting provider, Netlify, and our database provider, Supabase, keep standard request logs as part of running the service. Those logs include IP addresses. We run no advertising pixels or third-party affiliate tracking. Our own usage counts are described under Usage counts below and run only if you allow them.

Partner links. WiredType has a partner program: people who introduce others to WiredType and earn a commission when those people buy. If you arrive through a partner's link (a link with ?p= or a wiredtype.com/p/ page), we record that visit with the partner's handle, the page you landed on, and a one-way hash of your IP address made with a secret salt, kept for 90 days and used only to catch a partner crediting themselves. Partners see counts and amounts (visits, assessments, purchases, their commission). They never see your name, email, result, or account.

Usage counts (only if you allow them)

If you turn on Analytics in the cookie banner, we record which pages and steps you reach (for example start, finish, share, buy, retake), where you came from (the name of a search engine, the code on an invitation or shared link, a partner code, a campaign tag, or direct), which experiment version you saw, which share button or offer you chose, the amount of a purchase, and your DISC type. Each row carries a random visit ID, and your account ID once you sign in, including rows from the same visit made shortly before you signed in. We never record free text, your email, your name, your IP address, or your browser details in these rows. We use them to see what works and to test changes. This is off unless you turn it on.

Support email

Email sent to any wiredtype.com address is forwarded by ImprovMX to our inbox, which is hosted by Google Gmail. We keep those messages as a record of what was sent.

3. How we use it

  • Deliver the product. Show your DISC results and reports, fit content to your type, and open what you have paid for.
  • Process payments. Charge your card, issue receipts, handle refunds, and manage subscriptions through Stripe.
  • Send account email. Receipts, password resets, account notices, and, if you have a subscription, renewal reminders and billing notices.
  • Improve the product. Look at assessment results in aggregate to improve the questions, the scoring, and the reports.
  • Answer legal and privacy requests. Look up your account when you email us a legal or privacy request.
  • Protect the service. Our server functions use your IP address briefly to limit how many requests one connection can make, and Stripe checks payments for fraud.

We do not use your assessment answers, reports, or AI conversations to train AI models, and we do not sell your data to anyone.

4. Who we share with

We share data only with the service providers below, and only what each one needs to do its job. Each works under its own terms and privacy policy.

  • Stripe (payments). Receives your payment details and the email you use at checkout. Stripe privacy policy.
  • Supabase (database, sign-in, and file storage). Holds your account, assessments, purchases, and report files. Supabase privacy policy.
  • Netlify (website hosting and the server functions that run the site). Netlify privacy policy.
  • OpenAI (AI coach chat, writing-sample analysis, team pair reports, and the wording of some emails). Receives the text you enter and the profile details those features need. OpenAI states that it does not train its models on API data by default. OpenAI privacy policy.
  • Anthropic (backup AI provider). Receives the same kind of request as OpenAI, only if OpenAI is unavailable. Anthropic privacy policy.
  • Resend (email delivery). Receives your email address and the content of the receipts and account emails we send you. Resend privacy policy.
  • Browserless (a hosted browser that draws share images). Receives the DISC type and the name, if any, shown on a profile share image. Browserless privacy policy.
  • ImprovMX (email forwarding). Passes along email you send to any wiredtype.com address. ImprovMX privacy policy.
  • Google. Our support inbox is a Gmail account, so your emails to us are stored there. Our public pages serve their fonts from our own site; two admin-only pages load Google Fonts, which sends the admin's IP address and browser details to Google when those pages load. Google privacy policy.
  • jsDelivr (a public code library host). Team pages load a code library from it, which sends your IP address and browser details to jsDelivr when those pages load. jsDelivr privacy policy.

We may also disclose information if required by law, to respond to a valid legal process, to protect the safety of our users, or as part of a merger or acquisition (in which case we will notify you before your data is transferred).

We never sell your personal information to third parties.

5. Your rights

Regardless of where you live, you can:

  • Access the personal data we hold about you.
  • Export your data. Download my data on your account page gives you one JSON file with your account and profile, every assessment result, your purchases and report access, your cookie and consent records, your research participation, and links to the report PDFs your account includes.
  • Correct inaccurate information.
  • Delete your account. Delete my account on your account page asks you to type DELETE, cancels any active subscription with Stripe first, then deletes the data described under Data retention and emails you a receipt. Deletion is immediate and permanent.
  • Opt out of list email. Receipts and account notices continue for as long as you have an account.

Both buttons are in the Your data section of your account page and work the moment you use them. Retaking the assessment replaces your current result. Turning off research participation on the same page stops research use of your data.

If you took an assessment without an account, the record is stored under a random session ID that lives only in that browser. The Data Requests page shows you that ID and can delete the matching records at once, or you can email the ID to privacy@wiredtype.com. Unclaimed records are kept for no more than 12 months (section 7).

Appeals. If we decline or delay a request, you may appeal by replying to our response. We review the appeal and answer within 45 days with the reasons. If you are not satisfied, you may contact the New Jersey Division of Consumer Affairs, your state attorney general, or, in the EU or UK, your data protection authority. The Data Requests page has the details and how we verify a request.

EU, UK, and EEA users (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the GDPR and UK GDPR, including the right to object to processing, the right to restrict processing, the right to data portability, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is (a) performance of a contract when you buy a report or subscription, (b) your consent when you take the assessment, use the AI coach, or allow usage counts, and (c) our legitimate interest in operating and improving the service.

California residents (CCPA and CPRA)

California residents have the right to know what personal information we collect, the right to delete that information, the right to correct inaccuracies, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA. If you allow Analytics, we also collect internet or other electronic network activity information (the pages and steps you reach on this site). We do not sell or share it.

Export and deletion on the account page cover the rights to know, access, portability and deletion. Our legal contact for privacy matters is privacy@wiredtype.com.

6. Cookies and browser storage

WiredType sets two cookies of its own, and only when you arrive through a partner link: wt_p, which records which partner's link you used, and wt_pv, a random visitor ID. Both last 60 days and tell us which partner to credit if you create an account or buy. Nobody else reads them and they are not used for advertising. In the EEA, the UK and Switzerland they are set only if you allow the Marketing category in the cookie banner. Everything else the site needs lives in your browser's local storage instead: your sign-in session, your assessment answers and DISC type, your theme and reading progress, a random device ID used to match an assessment to your account, and your answer to the cookie banner. The site does not work without these.

Two outside services can place or read data in your browser. When you open checkout, Stripe's payment form sets its own cookies to help prevent fraud. Public pages serve their fonts from our own site, so Google Fonts receives nothing from you; only two admin-only pages load fonts from Google.

We run no advertising pixels or third-party affiliate tracking. The cookie banner lets you allow or refuse optional categories. Two optional categories are in use. Analytics is our own usage counts, described in section 2: if you allow it, the site keeps a random visit ID in your browser for 30 days so a visit is counted once and so we remember where you first came from; if you refuse it or turn it off later, nothing more is recorded, the visit ID is erased, the rows of that visit are deleted, and rows tied to your account are deleted. Marketing covers the partner-credit cookie described above; for visitors in the EEA, the UK and Switzerland it is set only with the Marketing category allowed. The Preferences category is not in use today. If we add an optional tool later, it will load only for people who allowed its category, and we will update this page first. You can change your answer at any time with the Cookie settings link in the footer.

We keep a record of each banner choice. It holds your choices, a random ID, a region guess from your browser's language and time zone, your browser's user-agent string, the country our host detects from your connection, and the time. It does not hold your IP address or your email address.

Global Privacy Control. Because we do not sell or share personal information for targeted advertising, browser signals such as Global Privacy Control have nothing to opt out of here. We honor them anyway: if your browser sends the signal, the site treats you as having chosen Essential only, records that choice with the source "gpc", and does not show the cookie banner. You can still open Cookie settings from the footer. Our declaration is published at /.well-known/gpc.json.

7. Data retention

  • Assessments attached to an account stay until the account is deleted. Deleting your account also deletes results you took while signed out in a browser that later saved a result to the account.
  • Assessments taken without an account (no name or email on the record) are kept for no more than 12 months. A nightly job that deletes records older than that is in place and is being switched from its count-only check to deletion; until it is switched on, you can delete your record at any time from the Data Requests page, and we update this line when the job is live.
  • Account data stays for as long as you have an account.
  • Usage counts (Analytics, only if allowed): raw rows for 400 days, then hourly totals only, which hold no visit or account IDs.
  • When you delete your account, these are deleted together, right away: your sign-in and profile, every assessment result, your purchase records and report access in our database, AI credit records, team memberships, a team you manage alone, referral codes, usage count rows tied to your account, cookie banner records tied to your assessments or email, your email list entry, and the link between your account and any research data (research events that remain can no longer be tied to you). Any active subscription is canceled with Stripe before anything is deleted. We keep no copy of your purchase records. Stripe keeps its own record of each payment under its privacy policy. Our database provider keeps daily backups for 7 days, so a copy can remain in a backup for up to 7 days. If you unsubscribed from our emails, your address stays on the do-not-email list. If you manage a team that still has other people on it, the account page asks you to remove them first, because deleting the team would remove their reports. If you were a partner, your partner records stay for six years under an anonymous id, as section 7 explains, and a customer you introduced stays credited to that anonymous id.
  • Email list entries stay until you delete your account or unsubscribe. When you unsubscribe, we keep your address marked as unsubscribed so we do not email you again.
  • Cookie banner records stay in our database. They are not linked to your account.
  • AI chat messages and writing samples are not saved on our servers.

Retention at a glance

  • Assessment with an account: until you delete the account.
  • Assessment without an account: no more than 12 months (deletion job being switched on); earlier on request from the Data Requests page.
  • Account, purchases, report access, AI credits, team membership: until you delete the account (Stripe keeps its own payment record).
  • AI chat messages and writing samples: not stored.
  • Team pair reports: until the team or the account is deleted.
  • Email list entry: until you unsubscribe or delete the account; the address then stays on the do-not-email list.
  • Cookie banner and consent records: kept, not linked to your account.
  • Support email: kept as a record of what was sent.
  • Database backups: 7 days.

If you are a partner: your partner agreement record (the version you accepted, its content hash, the time, your IP address and browser), your commission ledger, your payouts and any notices are kept for six years after you leave the program, because tax rules and New Jersey's six-year period for contract claims require it. When you delete your account, your name, handle and contact details are removed from those records and the records stay only under an anonymous partner id.

8. Security

Traffic to the site is encrypted with HTTPS. Supabase encrypts the database at rest and stores passwords only in hashed form. Every table in our database has row-level security switched on, so a signed-in person can reach only the rows the access rules allow. Only our server functions hold the key that bypasses those rules. No online service can guarantee absolute security. We will notify you promptly if we become aware of a breach affecting your personal data.

9. Children's privacy

WiredType is not intended for users under the age of 13. We do not ask for your age, and we do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, email privacy@wiredtype.com and we will delete it. Users between 13 and 18 should have a parent or guardian review this policy before using the service.

10. International users

We are based in the United States. Our database is hosted in the United States, and the providers listed above may process data in the United States and other countries. If you use the service from outside the U.S., your data will be transferred to the U.S., which may have different privacy laws than your country of residence.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes (such as new categories of data we collect or new third parties we share with) we will notify account holders by email at least 14 days before the changes take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.

Every previous version is published, exactly as it read, on the policy history page, with a one-line note of what changed in each.

12. Contact

Questions, requests, or concerns about this policy or your data:

  • Privacy email: privacy@wiredtype.com
  • General contact: hello@wiredtype.com
  • Mailing address: WiredType, New Jersey, United States. Our full mailing address is available on request at hello@wiredtype.com.

We respond to privacy inquiries within 30 days; a complex request may take up to 45 more days, and we tell you why. You can appeal our answer as described in section 5 and on the Data Requests page.