Privacy Policy

Controller and scope

Controller: Hua Qiao, trading as Mindelune, Am Volkspark 5, 22941 Bargteheide, Germany. Privacy enquiries: privacy@mindelune.com. General contact: contact@mindelune.com.

Mindelune offers free reflection experiences for people aged 16 and over. The personality test and its free results do not require an account or newsletter subscription. Optional membership, shared readings and email use the data described below.

Hosting and requests

Mindelune uses Cloudflare Workers to deliver the website and Cloudflare D1 for membership and Between Us records. Page delivery processes IP addresses, requested URLs, request times, browser headers and connection information. This is necessary to provide the requested website and protect it against abuse; the legal basis is Article 6(1)(f) GDPR.

Cloudflare is a hosting and infrastructure provider. It operates an international network; processing exclusively in Germany or the EU is not promised. Provider processing is governed by the applicable service and data-processing terms.

Logs and international processing

Application form handlers do not intentionally log submitted names, email addresses, messages, personality answers, scores or private access links. Worker application logs and traces are disabled. Cloudflare can process operational and security information independently of those application logs.

Cloudflare, Brevo and the Google Workspace mailbox provider receive only the data needed for their respective hosting, email-delivery or mailbox functions. Their service providers can process data internationally. Applicable transfer safeguards include adequacy decisions where their conditions are met and standard contractual clauses. Provider operational records are retained according to their service, security and legal requirements; the application does not promise immediate erasure of provider backups or security records.

Personality answers and browser storage

The public personality test saves the 50 responses in this browser and calculates five trait scores and a character interpretation locally. Taking the test does not send individual answers or results to a personality server or database. An optional result-email request sends the identifier and descriptive bands described below.

localStorage keys mindelune-personality-v2 and mindelune-personality-completion-v1 hold answers and a completion receipt containing the answer sequence and content versions. Associated expires-at keys record expiry. Answers expire seven days after the last answer save; reading a result does not extend that answer period. Expired answers and receipts are discarded on the next storage access. Browser storage cannot be remotely erased while the site is closed.

Existing saved journeys receive one seven-day transition window when first read by this version. Compatible old Mindtrap and Velvet Wonderlab keys are migrated. Restart clears the current personality answers and receipt, including compatible legacy keys. The deletion control below clears known Mindelune experience data from this browser.

If browser storage is blocked, progress may remain only in memory for the current page. Anyone with access to the same browser profile may be able to view retained answers and results. Use deletion on a shared device.

Other storage and cookies

Hidden Self stores its reflection choices in sessionStorage under mindelune-hidden-self-reflections so the linked article can display them. Explored-room history uses mindelune-explored in sessionStorage for this tab; old persistent history is moved to session storage when accessible. sessionStorage normally ends when the tab closes, but browser session restoration can preserve it.

Browser storage supports the requested experience, including returning to an unfinished personality journey. The seven-day personality saving period and deletion controls are described above. Anyone sharing the same browser profile may be able to access saved progress.

Premium Circle and Between Us use essential access cookies to keep a requested sign-in or participation session working. These are separate from personality answers. No analytics or advertising cookies are intentionally set by the application. Cloudflare may use security cookies to secure requests and protect private staging.

Newsletter and Brevo

The newsletter is optional and separate from tests, membership and contact enquiries. A selected newsletter checkbox requests a confirmation email through Brevo. Subscription requires double opt-in; submitting a form or receiving a sign-in email does not itself subscribe you. The legal basis is your consent under Article 6(1)(a) GDPR.

Brevo (Sendinblue SAS, France) processes the email address, confirmation and consent records, subscription preferences, and delivery events on our behalf. Each newsletter must provide an unsubscribe link. Membership also has a newsletter preference control. Withdrawal applies to future marketing without affecting the lawfulness of earlier processing.

A subscription is retained while it remains active. After withdrawal, a minimal suppression record can remain to prevent further marketing and demonstrate the withdrawal. You may request erasure; necessary consent evidence and legal obligations can justify keeping limited records. Brevo also retains delivery events under its retention settings and published policies. Transactional website emails explicitly decline individual open/click tracking; newsletter consent is not tracking consent.

Contact and suggestions

The contact form shows whether delivery is available. When available, it sends your optional name, required reply email and message through Brevo to our Google Workspace mailbox at contact@mindelune.com. This does not subscribe you to marketing. Please avoid health information or other sensitive personal information.

We use enquiries to answer you: Article 6(1)(b) GDPR for requests relating to a contract, or Article 6(1)(f) for other correspondence. Ordinary enquiries are kept for the conversation and generally up to six months afterwards, unless statutory retention or the establishment or defence of legal claims requires longer. This covers mailbox handling as well as delivery-provider records where deletion is within our control.

Abuse prevention includes validation, payload limits, a honeypot and a ten-minute in-memory limit that can use a Cloudflare-supplied IP address. Contact messages are not placed in an application message database. When delivery is unavailable, the application does not transmit or save the form fields; browser autofill follows your browser settings.

Requested personality result emails

When available, requesting a result email sends your address, character/profile identifier and five descriptive trait bands to our server. It reconstructs the approved full reading and sends it through Brevo. The email contains that reading and descriptive bands; raw answers, numeric scores and private session identifiers remain in your browser.

Sending acceptance reveals the four additional chapters in the current page view. It does not prove inbox delivery or persist an account entitlement. This request never subscribes you to the newsletter; the separate optional checkbox requires double opt-in.

The legal basis for the requested delivery is Article 6(1)(b) GDPR. Brevo receives the address and reading for delivery, and keeps delivery information under its retention settings and policies. The website does not create an account or a server-side archive of your raw answers from this request. Use an email address you control.

Premium Circle membership

Creating a free membership sends your email address to the server and Brevo so you can receive a one-use sign-in link. The link expires after 15 minutes. Confirming it creates or restores a membership, a private session and your chosen magical name in Cloudflare D1. The legal basis is Article 6(1)(b) GDPR for the service you request. No payment details are collected and no automatic charges occur.

Member sessions can last up to 30 days. Expired sign-in and session records are removed by cleanup. The membership, chosen name and any linked reading remain until account deletion or a valid erasure request, subject to necessary legal records. Signing out removes access from the current browser; it does not delete the account. Newsletter consent is separate.

Between Us shared readings

Starting or joining a shared reading records the information you choose to submit, participation state and the comparison in Cloudflare D1. Participation requires acknowledgement of sharing. Each participant can access the shared comparison; private access information must not be shared with anyone else. The legal basis is Article 6(1)(b) GDPR for the requested shared service.

Current-version sessions expire seven days after creation, first submission or completion, according to their stage; viewing a reading does not extend that deadline. Expired session records and their linked private-access records are removed by cleanup. Older sessions retain their saved deadlines. Participation cookies can last up to 21 days but do not extend the underlying data lifetime.

If you request email access or recovery, your address and a short-lived one-use access token are processed by the server and Brevo. Access emails contain a private link, not your answers or reading. Email tokens expire after 15 minutes. Request-protection records use source/address-derived keys with recorded expiry times. Email access does not create membership or newsletter consent; optional membership linking is a separate action.

Sharing and external resources

Sharing is voluntary. A downloaded archetype card contains the selected public character name, description and artwork, or the Between the Twelve profile card. It contains no raw answers, private trait scores, email or individual session identifier. The selected character itself is visible to the recipient.

Sharing links point to public discovery routes and exclude query strings and fragments. WhatsApp, Facebook, your email application or another chosen sharing app receives the selected link, any caption you write, and any image you choose to attach. Their own privacy policies apply. You can add identifying information yourself, so review your caption before sending.

Scientific references link to external websites. Following them sends a request to that provider. No third-party social embed, advertising pixel or external font is intentionally loaded in the inspected application. Site illustrations are served as local assets.

Analytics and unfinished features

No Google Analytics, Cloudflare Web Analytics beacon, advertising pixel or fingerprinting feature is installed by the application. Payments are not active. Private development previews are blocked in hosted builds.

Availability of membership, shared readings, contact and email depends on configured services; forms report unavailable services. Private staging requires Cloudflare Access and is separate from the public website.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interests, including on grounds relating to your particular situation. Consent can be withdrawn at any time with effect for the future.

You may complain to a data-protection supervisory authority, especially in your country of residence, workplace or the place of a suspected infringement. The supervisory authority for private organisations in Schleswig-Holstein is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), datenschutzzentrum.de.

For browser-only personality answers, we have no server copy to retrieve. Use Restart, the deletion control below or browser storage settings. For membership, shared-reading or provider-held data, contact privacy@mindelune.com; we may need to verify your identity before providing access or deletion. Necessary legal records and provider backups can be subject to different retention requirements.