Worldview.

//Legal — Privacy

Privacy notice.

Effective May 26, 2026.

Draft for review. This notice describes how the product actually works today. Before public launch, have counsel confirm it matches your operating practices and the regulations in your launch jurisdictions.

Worldview is operated by ITAG-USA. This notice explains what we collect when you use worldview.itag-usa.org, why we collect it, how long we keep it, and what choices you have.

The short version

  • The free quiz is anonymous by default. We never ask for your name, email, or anything that identifies you in order to take it.
  • We assign you a random session id, store your responses against it, and use them only to produce your reading.
  • If you choose to opt in to contact, we store only what you give us (name, email, optionally phone and organization), and only use it to follow up about your results and product updates.
  • If you sign in with Pi Network to unlock the full report, we store your Pi username and uid alongside your session so we can authenticate you on future visits and verify your payment.
  • We don't sell or share your information with marketers.
  • You can request deletion at any time at privacy@itag-usa.org.

1. Information we collect

Anonymous quiz data

When you take the quiz, we collect and store:

  • Your answers to each question (a 1–7 value per item)
  • The dimension scores and archetype we compute from those answers
  • An anonymous id generated by your browser and stored in your browser's local storage — this lets you return to your results without an account
  • A session id we generate on our server to link your quiz to its results
  • Timestamps for when you created the session and last updated it

None of this on its own identifies you to us. We don't store your raw IP address, a browser fingerprint, or device identifiers tied to your responses.

Approximate location

When you start the quiz, we record an approximate location — country, region, and (where available) the nearest city, timezone, and a city-level latitude/longitude. This is derived by our hosting provider from the network address of your request; it reflects roughly where you are connecting from, not a precise position.

  • We do not use your device's GPS. The precise browser location feature is disabled on this site.
  • We do not store the raw IP address — only the coarse location values derived from it.
  • We use this in aggregate to understand how worldviews are distributed around the world (for example, “how many respondents came from each country”).

This data is included in your data export and is removed if you delete your session.

Optional contact information

On your results page you can opt in to share contact information so we can reach you. If you choose to share it, we store what you give us:

  • Display name
  • Email address
  • Phone number (optional)
  • Organization or role (optional)

You can leave this entirely blank. The assessment works without it.

Accounts and sign-in

You can create an account three ways. In each case we store one account record (a username plus the sign-in identifiers below) so we can recognize you on return visits and link unlocks to you:

  • Username & password — we store your username, your optional email, and a one-way hash of your password (scrypt). We never store or see the password itself.
  • Google — Google sends us your Google account id, your verified email address, your name, and your profile picture URL. We don't receive your Google password or anything else in your Google account.
  • Pi Network — the Pi SDK sends us an access token, which we validate against Pi Network's own servers and receive back your Pi uid (an opaque identifier) and Pi username. We don't have access to your Pi wallet, Pi balance, or anything else in your Pi account.

Sessions are kept in a signed, HttpOnly cookie that expires after 14 days. Signing out clears it immediately.

Payment records

If you unlock the full report by paying in Pi, we keep a record of:

  • The Pi payment identifier returned by Pi Network
  • The blockchain transaction id (txid)
  • The amount paid and the date/time

We keep these records for accounting and dispute resolution. We do not see your wallet credentials at any point — Pi Network's app handles the payment.

Comparison reports

If you and another respondent pair your sessions to generate a comparison report, we store the comparison record (the two session ids and the computed similarity / alignment data). Either party can request deletion of the comparison.

Cookies and similar technologies

We use only first-party, strictly necessary cookies and storage:

  • wv_pi_session — HttpOnly, Secure, SameSite=Lax. Set after you sign in with Pi. Holds an HMAC-signed payload with your Pi uid and username so we can recognize you on return visits. Lifetime: 14 days.
  • wv_admin_session — HttpOnly, Secure, SameSite=Lax. Only present on admin staff devices after they sign in with the shared admin passcode. Lifetime: 8 hours.
  • localStorage: wv:anonymousId and wv:sessionId. These let your browser hold on to your assessment so you can return to your results. You can clear them from your browser's settings at any time.

We do not use third-party tracking cookies, advertising pixels, or cross-site analytics. We do not load Google Analytics or any equivalent. We do load the Pi Network SDK from sdk.minepi.com on pages where Pi sign-in is offered; the SDK is governed by Pi Network's privacy policy.

2. How we use what we collect

  • To run the assessment: compute your scores, match you to an archetype, render your report, generate PDFs, and produce comparison reports if you pair with someone.
  • To recognize you on return visits: the cookies and local storage values above let you come back to your results without re-taking the quiz.
  • To support you: if you've shared contact info or are signed in with Pi, we can respond to questions, fix problems, and manually unlock your account if a payment didn't process correctly.
  • To send you updates (only if you opted in): occasional emails about new features or content. You can opt out at any time by replying to any message or emailing privacy@itag-usa.org.
  • To improve the framework: we look at aggregate, de-identified response patterns to refine the question bank and archetype model over time. We do not look at individual responses tied to identifiable people unless we're responding to your support request.
  • To map worldviews geographically: we use the approximate, IP-derived location in aggregate to understand how results are distributed across countries and regions. We do not use it to identify or track individuals.

3. Who we share information with

We don't sell your data and we don't share it for marketing purposes. The only third parties that touch your information are the infrastructure providers that run the site:

  • Vercel — hosts the application. They see network requests (including IPs in their server logs) and the data we explicitly send through their infrastructure. See Vercel's privacy policy.
  • Neon — hosts our Postgres database. They store the data this notice describes. See Neon's privacy policy.
  • Pi Network — handles authentication and payment if you choose to use Pi. Pi Network never receives your assessment responses; we send them only your access token for validation and your payment confirmation requests. See Pi Network's privacy policy.

We may disclose information if required by law (subpoena, court order) or to protect against fraud or security threats. If that ever happens, we'll narrow the disclosure to what's strictly required.

4. How long we keep your information

  • Anonymous assessment data: retained indefinitely unless you request deletion. Because it's pseudonymous, the privacy risk is low; the data has continuing value for refining the framework.
  • Contact information: retained as long as you want to be reachable. You can request deletion at any time.
  • Pi authentication records: retained as long as you maintain a Pi-authenticated session, plus six months for support and accounting purposes.
  • Payment records: retained for at least seven years for accounting and tax purposes.
  • Cookie session tokens: deleted from your browser when they expire (14 days for Pi sessions, 8 hours for admin sessions).

5. Your rights and choices

Regardless of where you live, you can:

  • Ask what we have about you — email privacy@itag-usa.org with your session id or Pi username and we'll send back a copy of everything tied to it.
  • Ask us to delete your data — we'll delete your session, your answers, your scores, your contact info, and any comparison reports you're part of. Payment records may be retained as required by accounting law, but will be disconnected from the personal information.
  • Correct your contact info — re-submit the contact form on your results page, or email us.
  • Opt out of marketing emails — reply STOP, click unsubscribe, or email us. We'll still send service-related messages (e.g. payment confirmations) as long as your account is active.
  • Stop using cookies — clear your browser cookies and local storage, or use a private/incognito window.

Residents of the EU/EEA, UK, and California have additional rights under GDPR and CCPA respectively (access, portability, erasure, objection to processing, non-discrimination for exercising rights). Email privacy@itag-usa.org and we'll honor any valid request within 30 days.

6. How we protect your information

  • All traffic to and from the site is encrypted in transit via HTTPS (TLS).
  • Session cookies are HttpOnly (not readable by client-side JavaScript), Secure (only sent over HTTPS in production), and HMAC-signed against a server-side secret.
  • API endpoints have rate limiting and basic security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy).
  • The Pi access token is verified server-side against Pi Network before any session is issued — we never trust the client to claim an identity.
  • Admin access requires a shared passcode and is logged at the infrastructure layer.

No system is unhackable. If we have reason to believe your information was exposed, we'll notify affected users within 72 hours where required, and as soon as practical otherwise.

7. Children

The assessment is not intended for children under 16. We don't knowingly collect information from anyone under 16. If you believe a child has submitted information, email privacy@itag-usa.org and we'll delete it.

8. International users

Worldview is operated from the United States. Your information is processed and stored on servers in the United States. By using the site, you consent to this processing. If you're in the EU/EEA, UK, or any other jurisdiction with data-export rules, you can exercise your rights under those rules by contacting us.

9. Changes to this notice

When we make material changes, we'll update the effective date at the top and, where we have your contact information, send you a note. Continued use of the site after a change means you accept the updated notice.

10. Contact us

Privacy questions, requests, or concerns: privacy@itag-usa.org.

Postal: ITAG-USA, New Braunfels, Texas, United States.