Privacy notice

Test engines keep recent events and calculated results in browser memory or session storage so a result survives the ad transition. Closing the tab clears session data. InputAnalyzer does not intentionally transmit raw peripheral inputs to its servers, advertising partners or analytics.

The hosting provider may process standard request logs such as IP address, requested URL, browser information and timestamps for security and delivery. If you consent to analytics, InputAnalyzer may record aggregate events such as which test started, completed or encountered an unsupported browser.

Free access may use Google advertising products. Advertising providers can process identifiers and device or network information according to the choices presented by the consent platform. Once a tab confirms an authenticated account session, it starts no new third-party advertising or analytics requests. Code loaded earlier by an anonymous tab can remain until that page is reloaded, so account email and action capability are available only in the tab that consumed the sign-in link and are never returned by the session-status endpoint. An inactive account can sign out before using ad-supported access. A page that confirms Premium access makes no rewarded-ad request.

If you request a Premium sign-in link, InputAnalyzer stores your email address and secure session records in its own database. The token table retains only a cryptographic digest. The delivery outbox temporarily contains the one-time link and recipient until delivery, cancellation, expiry or terminal failure, then redacts both.

Stripe processes checkout, payment, fraud-prevention and any tax or billing details shown there. InputAnalyzer receives identifiers and payment status needed to grant or revoke Premium, but never receives full card details. The mail service processes the address only to deliver account messages.

Expired sign-in tokens, sessions, rate-limit records and mail-delivery data are removed on a rolling schedule. If a sign-in link is never used, its unverified email identity is automatically deleted after the configured two-day retention window. A verified account remains available for restoration until you delete it from the account panel or through the published privacy contact. Deletion from the panel requires a recent sign-in link. The financial ledger is then pseudonymised, but transaction records may be retained where required for accounting, fraud prevention, disputes or other legal duties.

You can decline optional advertising or analytics storage through the consent interface, clear local browser data, and request access, correction, portability or deletion where applicable.