# Privacy Policy

> What Mentarium collects (very little), why, who processes it, and how to get a copy or have it deleted. No ads, cookieless analytics.

Canonical: https://mentarium.io/privacy

Legal

Last updated October 30, 2026

Mentarium collects as little as it can. Questions: [support@mentarium.io](mailto:support@mentarium.io).

## What we collect

- **Reading the site:** cookieless, aggregate analytics (page views, referrers, country, device type) through Indiehacker Studio. No advertising cookies, no cross-site tracking.
- **The IQ test and the tools** run in your browser. Your answers and inputs are never sent to us.
- **Buying:** Stripe processes the payment and gives us your email, the product, the amount and the country. We store your email (encrypted) and the order so we can send and resend your download link and handle refunds. We never see your card number.
- **Your library:** an account made of your email (encrypted), which we use to send your sign-in links. Signing in sets one cookie, used only to keep you signed in, for up to 30 days.
- **Decision Journal:** what you write is stored encrypted and only your account can open it. We use it to show it back to you and to work out your calibration. Review emails say how many decisions are due, never what they are. You can export or delete your entries at any time from the journal. After a refund you have 30 days to export them, then we delete them.
- **Contact form:** your email, subject and message, stored encrypted, so we can reply. Attachments are emailed to us and not stored.
- **Decision Coach:** requests to the connector pass through our server and appear in standard logs (time, IP address, tool name) kept for up to 30 days for security. We don’t store the decisions you describe.

## Who processes it

Stripe (payments), Mailgun (sending email), Indiehacker Studio (analytics) and our hosting provider. Each processes data only to provide its service to us.

## How long we keep it

Orders are kept as long as tax and accounting law requires. Contact messages are deleted within 24 months. You can ask for deletion sooner where the law allows.

## Your rights

You can ask for a copy of your data, a correction, or deletion at any time by emailing [support@mentarium.io](mailto:support@mentarium.io). If you are in the EU, UK or Brazil you also have the rights under the GDPR, UK GDPR or LGPD, including complaining to your data protection authority.

Questions? [Contact us](mailto:support@mentarium.io)