Privacy Policy

77 Scenarios is operated by Webbitar, based in Sweden. We run a scenario-based personality test and related content at 77scenarios.com. As an operator based in the European Union, we are subject to the General Data Protection Regulation (GDPR).

For any privacy questions or data requests, contact us at 77scenarios@gmail.com.

We collect only what is necessary to operate the service. Here is what we may hold:

• Email address - only if you choose to save your test result. Optional. Never required to take the test.
• Test responses - your answers to the 77 scenarios. These are processed to generate your personality type. Anonymous unless you provide an email.
• Account data - if you register on the forum: username, email address, and avatar image if uploaded.
• Forum posts - content you submit publicly to the forum. This is visible to other users.
• Usage data - pages visited, time on site, general location (country level), device type. Collected via Google Analytics with IP anonymisation enabled.
• Cookies - we use cookies for analytics (Google Analytics) and advertising (Google AdSense). See the Cookies section below.

We do not sell personal data. We do not build profiles for advertising purposes beyond what Google AdSense does on its own infrastructure.

• To deliver your personality type result and, if requested, email it to you.
• To allow you to log in, post to the forum, and maintain your account.
• To understand how the site is used so we can improve it (analytics).
• To display advertising that helps fund the free service (Google AdSense).
• To respond to support requests or data deletion requests sent to us directly.

The legal basis for processing under GDPR is: legitimate interest for analytics, contract performance for account and result delivery, and consent for advertising cookies where required.

We use the following third-party services which may process your data:

• Supabase (supabase.com) - our backend database and authentication provider. Stores account data, test results, and forum posts. Data is hosted in the EU.
• Google Analytics (google.com/analytics) - website analytics with IP anonymisation. Google may process data in the US under Standard Contractual Clauses.
• Google AdSense (google.com/adsense) - advertising platform. May set cookies and process data for ad personalisation based on your consent settings.
• Resend (resend.com) - transactional email service used to send your test result if you request it. Your email is passed to Resend solely for delivery.
• Vercel (vercel.com) - hosting provider. Processes request logs including IP addresses for a limited retention period.

We use the following categories of cookies:

• Strictly necessary - session cookies required for login and core site function. No consent needed.
• Analytics - Google Analytics cookies (_ga, _gid) that help us understand site traffic. Set after consent where required by law.
• Advertising - Google AdSense cookies for ad delivery and measurement. Set after consent where required by law.
• Preferences - a small local storage entry (77s-theme) to remember your light/dark mode preference. Contains no personal data.

You can manage or withdraw cookie consent at any time through your browser settings or by clearing site cookies.

• Anonymous test responses with no email attached: retained indefinitely for aggregate statistics.
• Saved test results linked to an email: retained until you request deletion.
• Account data (forum): retained until you delete your account or request deletion.
• Forum posts: retained after account deletion unless you specifically request post removal.
• Analytics data: retained for 26 months per Google Analytics default settings.

If you are in the European Economic Area, you have the following rights regarding your personal data:

• Access - request a copy of the data we hold about you.
• Rectification - ask us to correct inaccurate data.
• Erasure - request deletion of your data ("right to be forgotten").
• Portability - receive your data in a machine-readable format.
• Objection - object to processing based on legitimate interest.
• Restriction - ask us to limit how we process your data while a dispute is resolved.

77 Scenarios is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us at 77scenarios@gmail.com and we will delete it.

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy. For significant changes, we will notify registered users by email where possible.