Who holds it
Sanava LTD, 26 Anthipolochagou Georgiou, Shop 1-2, Paphos 8201, Cyprus. Questions, or a request to delete everything: oliver@mail.patternweavermind.com.
What is collected
- If you take the quiz or subscribe: your email address, your first name if you give one, your archetype and your answers.
- If you buy a guide: your email address, what you bought, the amount, the tax and the country it was calculated from, and the fact that you ticked the immediate delivery box, with the time and a one way hash of your IP address. Card details never reach this site: they go to Stripe.
- If you start a checkout for a guide and do not finish it: the email address you typed into the payment page, what you were buying, and a link that reopens that same basket. Stripe passes the address on when the unfinished checkout expires. It is used for one thing: to offer you a discount on that guide over the following few days. Each of those emails carries a link that stops them, and that one click is the end of it. There is never more than one such run of offers per address.
- If you read an essay or listen to an episode: how many seconds the page was actually in front of you and how far down you got, tied to a random id that lasts for that one page view.
- Every visit to a page that asks for money: a counter, with a salted one way hash of your IP address and nothing else. The hash exists to stop one machine flooding the counter. It is not reversible and is never used to identify anyone.
- If you write in: your message and your address, so somebody can answer.
- If you use the Polymath AI: your account, and counts of how much you have used it. The content of your conversations is not recorded.
- If you play one of the games: which game, when you started, how many seconds you were actually playing, how it ended, your country, a one way hash of your IP address, and a random id this device made up the first time you started a game, so your streaks and play counts work. If you give a name, that too. A Border Crossing answer is published for other players to judge, with the name you gave if any; you can ask for it to be removed at any time. In a game with friends, what you type stays in the room and is deleted when the room closes.
How long
Emails you send us are deleted after 90 days, leaving a short factual note of what the exchange was about so a later conversation makes sense; that note is kept indefinitely. Operational alert records are pruned after 30 days. Game records are kept for two years and then deleted. An unfinished checkout and the discount offers it produced are kept for two years with the order record it belongs to. Order records are kept for seven years, because Cypriot accounting law requires it. Subscriber records are kept until you unsubscribe or ask for removal.
Who else processes it
Cloudflare hosts the site, the database and the files. Stripe takes payments and calculates tax. Resend sends and receives email. PayPal and Printify handle merch orders. Google provides the model behind the AI features. Amazon sees a click when you follow an affiliate link. Discord receives operational alerts; email addresses in those are masked to the first character and the domain unless we turn that off, and we have not.
Cookies and local storage
There are no advertising cookies and no third party trackers. What exists:
_pwm_auth, which remembers your quiz result so the result page will open;
pwm_ai, which keeps you signed in to the AI; and two values in your browser's
session storage, pwm_src, which remembers which link brought you here, and
pwm_r, which identifies you as a subscriber and is removed from the address bar
the moment it is read.
If you play a game, local storage also keeps pwm_player (the random id
above), pwm_name (a name, only if you give one), pwm_plays (how many
times you have played each game), pwm_rooms (which room you are seated in, for
twelve hours, so a dropped connection can rejoin) and pwm_g_ keys holding each
game's progress and streak. None of these are created by visiting; they appear when you
press start. The link at the bottom of the games page deletes them all.
Your rights
You can ask for a copy of everything held about you, have it corrected, have it deleted, object to how it is used, or take it elsewhere. Email oliver@mail.patternweavermind.com and it is done. To stop email immediately without asking anyone, use the unsubscribe page or the link at the bottom of any letter.
Why we are allowed to hold it
Contract, for orders and the download links that go with them. Consent, for marketing email, which you can withdraw at any time. Legitimate interest, for the hashed counters that keep the site from being flooded. Legal obligation, for accounting records.