Legal

Privacy Policy

Last changed October 1, 2026

On this page

Who is responsible for your data?
What do we store when you take the test?
What do we never store?
What happens if you say you are under 13?
Why do we store this data?
What is our legal basis?
How long do we keep data?
What about shared results?
What do we count anonymously?
What is stored in your browser?
How do ads and consent work?
Do we use analytics?
How do we protect the data?
Do we sell your data?
Where is data processed?
What are your rights?
How will we tell you about changes?
Related pages

This page describes how IQ Score Level works. It is not legal advice.

IQ Score Level is built to need as little data as possible. You need no account, email address or payment to take the test or see your result. Our database never stores your IP address. We store nothing at all if you say you are under 13.

Who is responsible for your data?

IQ Score Level is the name of this website and service. The person who runs it is responsible for the data described here. You can reach us at hello@iqscorelevel.com or through the contact page.

What do we store when you take the test?

When you finish the test, we store an anonymous record of the attempt. It contains:

your answers, the questions’ seeds, versions and features, and the time spent on each question and in total;
your estimated score, its margin of error (which gives your range) and the norm version used;
a quality note if the attempt was finished too fast to count, so it stays out of the norms;
whether a share link was made from it (the share itself has no link back to the attempt);
the day of the attempt, but not the time;
the kind of device (phone, tablet or desktop), from the screen size;
a two-letter country code, which our hosting provider supplies with each request;
your age band, if you choose one;
whether you took the test before, only if you answer that optional question after your result (an education question asked in earlier versions is no longer asked);
a random code made in your browser for that one test run, so the same run cannot be stored twice (for example after a double tap). It is new for every test and says nothing about you.

Each record gets a random number as its ID. It is not linked to you, your device or any other visit.

What do we never store?

Our database never stores your IP address, your browser’s user agent or a device fingerprint. We never store a cookie ID, your name or your email address, and we do not ask for them.

Our hosting provider, Cloudflare, processes network data such as your IP address to deliver the site and protect it from attacks, under its own privacy policy. Our code also guards the test’s server against a flood of requests. It turns the connecting address, mixed with the day’s date, into a one-way code. Only that code goes to Cloudflare’s rate limiter, which counts requests for about a minute. We never write your IP address or that code to our database or logs.

What happens if you say you are under 13?

If you choose the “under 13” age band, the test still works in your browser. But nothing is sent to our servers and nothing is stored there, not even a count. The progress kept in your browser is deleted when you finish.

The site is not directed to children. In the United States, the children’s privacy law COPPA covers sites aimed at children under 13 that collect personal information. It also covers general sites that know they collect it from such children. Our design avoids collecting anything in that case.

In the European Union, some services rely on consent and are offered directly to children. There the child must be at least 16, or a parent must consent. Member states may lower this age, but not below 13.

Why do we store this data?

We store this data for three reasons. We show your result, improve the test and publish honest statistics. Your age band does not change your score: adult age bands only decide which attempts can later be used to check the scoring, and the “taken before” answer keeps repeat attempts out of that check.

Your result. Our server computes your score from your answers, using the same method as your browser.
Improving the test. Real answers let us measure how hard each kind of question is. This is how our provisional norms will be replaced by real ones. See our methodology.
Statistics. We publish totals, such as completed tests or the share of results in broad score bands, only when they are large enough to mean something. Attempts finished too fast to be real are never counted.

What is our legal basis?

We designed the stored test data so that it does not identify you. Data protection law may still treat some of it as personal data. If so, our legal basis is our legitimate interest in running and improving a free test (GDPR Article 6). Your optional answers after the result are given by choice.

Advertising cookies, when ads are shown, need your consent where the law requires it. That consent is collected by the consent tool described below.

How long do we keep data?

We keep your raw answers for 24 months, and then delete them automatically. The attempt summary (score, day, device kind, country code and bands) is kept to compute norms and statistics.

We also keep a weekly backup copy of the database, so we can recover from a fault. Each copy is deleted automatically after 8 weeks.

What about shared results?

If you press the share button, we create a share link. It stores only your score, range, percentile, norm version and the day. It has no link back to your attempt or your answers. Anyone with the link can see that page, and search engines are told not to index it. If you want a share link removed, send us the link.

What do we count anonymously?

To learn how the site is used without any analytics service, the site adds 1 to a daily counter for a few fixed events. The events are: a test started, finished, resumed or quit; a result reviewed; a result image saved; a share link made; the optional question answered; and a brain game started or finished. Each count is stored as the day, the event name and a number. Nothing else goes with it: no ID, no cookie, no page address, no score, no device detail. Nothing is counted for anyone who chose the “under 13” age band.

When you finish a brain game, its score is also counted, as one number added to a histogram for that game and day. No single score is kept, and nothing links it to you. Once a game has enough plays, its result screen can show how your score compares with them. There are no leaderboards.

What is stored in your browser?

While you take the test, your progress (the questions, your answers, the time and where you are) is kept in your browser’s local storage. So a reload, or closing the page by accident, does not lose your test. It is deleted when you finish or quit the test, and ignored once the test’s time limit has passed. It is never sent to us as a cookie.

After a test, your browser keeps short fingerprints of the questions and kinds of question in your last two tests, with no answers and no scores. They make sure a new test right after gives you different questions. They are never sent to us.

If you pick a light or dark theme with the switch in the site header, your browser remembers that one choice in local storage. It is never sent to us.

If you play a brain game, your browser keeps your best score, number of plays and last few results for each game in local storage. You can clear them on the games page.

Our cookie policy lists every item that can be stored in your browser.

The site shows no ads at present. If we switch ads on later, they will be AdSense Auto ads on reading pages only. They will not appear on the page with the test, the result and the answer review, on share pages, on the games, on our guide for parents, or on legal and trust pages. They will be served by Google AdSense.

If ads are switched on, third-party vendors, including Google, will use cookies to serve ads. The ads may be based on your prior visits to this site or other websites. Google’s use of advertising cookies lets it and its partners serve ads based on those visits.

You can opt out of personalized advertising in Google’s Ads Settings. You can also opt out of some third-party vendors’ use of cookies at aboutads.info. In Europe, you can use Your Online Choices. Your browser settings can also block or delete cookies. Google explains its advertising cookies on its advertising technologies page.

If ads are switched on, visitors in the EEA, the UK and Switzerland will see a consent tool certified by Google. It asks for your choices before personalized ads are used. Visitors covered by US state privacy laws will see a “Do Not Sell or Share My Personal Information” link. It opens an opt-out choice. Once ads are active, a link in the site footer will let you change your choices at any time.

Do we use analytics?

We do not use any analytics service. The only usage data is the anonymous daily event counts described above, kept in our own database. If we ever add an analytics service, it will not need cookies, or it will run only after your consent. This page will be updated first.

How do we protect the data?

We protect the data mainly by not collecting what could identify you. The site is served over an encrypted connection. Only the site operator can reach the database. Our server rejects tampered answers and limits bursts of requests.

Because our database holds no names, emails or IP addresses, a breach of our database could not reveal them: they are not in it. That is the point of the design.

Do we sell your data?

No. We do not sell personal data, and we do not share test data with advertisers.

Where is data processed?

Our site and database run on Cloudflare’s network, which operates in many countries. If ads are switched on, Google will process data for advertising as described in its own policies. By design, the test data we store does not identify you.

What are your rights?

Depending on where you live, you may have rights to access, correct or delete personal data. You may also object to its use. Because our test records are anonymous and not linked to you, we usually cannot find “your” record. That limits what we can return or delete.

You can still ask. If you have a share link, send it, and we can remove it. For any other request, contact us at hello@iqscorelevel.com. We will explain what we can do.

How will we tell you about changes?

We update this page whenever we change what we store. When we change what we store, we change this page in the same update.