Politique de confidentialité

MOSAIC-48 is built so that there is no personal data to protect in the first place. There are no accounts, no sign-in, and no fields asking for your name or email address. The one exception: if you purchase the paid profile, you enter your email address on the checkout run by Polar, the merchant of record (see section 8).

This policy explains which personal data we do not collect, the small amount of aggregate information our analytics receives, and how to stop even that.

1. Personal data we collect: none

• No accounts, no registration, no sign-in.
• No name, email address, phone number, date of birth, or any other identifying information.
• Payments are handled by Polar Software Inc. as the merchant of record, on Polar’s own checkout. Nothing you enter there — email or payment details — reaches our servers (see section 8).

The assessment writes your item responses, response times, Composite Cognitive Index, eight domain scores, and thinking type to your browser’s local storage so it can display your result again. Scoring happens entirely inside your browser.

Clearing your browser storage or switching browsers removes the result saved in that browser permanently. The service cannot restore it for you.

2. Analytics

To understand which pages are actually read, we use Umami, a privacy-focused analytics tool operated by Umami Software, Inc. and processed in an EU region.

We do not use cookies or any persistent identifiers for analytics. No visitor ID is generated or stored, so return visits are not linked to earlier ones and you are not tracked across other websites.

What is sent when you open a page:

• The URL of the page being viewed
• The referring URL that brought you here
• Browser and operating system type
• Screen size
• Approximate country

What analytics never receives:

• Your answers to any item
• Your response times
• Your Composite Cognitive Index, domain scores, or thinking type

About IP addresses. Any internet request necessarily reaches the analytics server with an IP address attached. It is not stored. It is used only to derive an approximate country and is then discarded, never retained in a form that identifies you.

Purpose. We use these aggregate counts for one thing: deciding which pages to improve, rewrite, or remove, and checking that layouts hold up at the screen sizes people actually use. They are not used for advertising, profiling, or resale.

3. Other services involved in delivering this site

The personal-data relationships with these providers are limited to what the table describes.

4. Your rights — and the honest limits of them

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to lodge a complaint with a supervisory authority.

We want to be straightforward about how those rights apply here. We hold no identifier that could link any record to you. Analytics data arrives without a visitor ID and is stored only in aggregate form, so we cannot locate "your" data, produce a copy of it, correct it, or delete it selectively — not as a matter of policy, but because the information required to do so does not exist and we deliberately never created it. Under the GDPR this is the situation described in Article 11: where a controller cannot identify a data subject, the access, rectification, erasure, and portability rights do not apply. You may of course still demonstrate additional information that makes identification possible, but nothing in our system is designed to enable that.

The data you can control completely is the assessment data on your own device. Clearing this site’s data in your browser settings erases it immediately and irreversibly, with no request to us required.

For anything else, contact us at E-mail du développeur.

5. How to opt out of analytics

Because we set no cookies, blocking cookies alone will not stop analytics. These will:

1. Install a content or tracker blocker such as uBlock Origin. The analytics script is blocked and nothing is sent.
2. Turn on your browser’s built-in tracking protection (Safari Intelligent Tracking Prevention, Brave Shields, Firefox Enhanced Tracking Protection) at a strict setting.
3. Disable JavaScript for this site. Note that the assessment itself will not run in this case.

Options 1 and 2 have no effect on taking the assessment, scoring, or viewing your results.

6. Children

This service is not directed at children. We collect no personal data, so no parental consent mechanism exists. Separately, the items and the reference distribution assume adult respondents: results from a child are not meaningfully interpretable and should not be treated as a measure of a child’s ability. If a child uses the assessment, we recommend a guardian’s supervision.

7. Security

Not creating personal identifiers is the strongest protection we can offer. In addition:

• All traffic is served over HTTPS.
• Scoring and result generation happen in your browser.
• Analytics is limited to tools that create no personal identifier.

8. Payments

Purchases of the paid profile are processed by Polar Software Inc. ("Polar") as the merchant of record. You transact directly with Polar on its checkout; our servers never receive or store your payment details.

• Whatever you enter on Polar’s checkout (email address, payment method, billing details) is processed by Polar under its own privacy policy: polar.sh/legal/privacy-policy
• Card payments are processed through Polar’s payment processor, Stripe, Inc.
• To manage orders and refunds, the operator can view order records (order id, date, amount, buyer email address) in Polar’s dashboard, and uses them for no other purpose.
• Your unlocked status is stored only in your browser. We keep no account and no server-side purchase record, so clearing browser storage also clears the unlock.

If your payment fails or your results do not appear after purchase, email E-mail du développeur and we will refund you in full after verification. Refunds are returned via Polar to your original payment method.

9. Changes to this policy

Material changes will be posted on this page with an effective date. Changes that reduce your protections will be announced at least 30 days in advance.

• Operator: MOSAIC-48
• Effective date: 2026-07-25
• Contact: E-mail du développeur

10. If you are in the EEA, Switzerland, or the UK

The GDPR, the Swiss FADP, or the UK GDPR may apply to the limited processing described above. Legal basis: server logs and the aggregate analytics in section 2 rest on our legitimate interests (Art. 6(1)(f)) in serving the site and seeing which pages are read; the paid profile rests on performance of a contract (Art. 6(1)(b)). What tips the balancing test is that none of this carries an identifier, and none of it is used for advertising, profiling, or resale.

Retention and transfers. We hold no personal data ourselves, so nothing on our side has a retention period. The providers in section 3 keep what is listed against them — analytics counts while the site runs, server logs for a short operational window, order records for as long as tax law requires. Hosting, the merchant of record, and its payment processor are established in the United States; those transfers rely on each provider’s safeguards, whether EU–US Data Privacy Framework certification or the European Commission’s Standard Contractual Clauses (Art. 46(2)(c)).

You may object at any time to processing based on our legitimate interests, including the analytics in section 2 (Art. 21). You need no reason and you do not need us: section 5 lists three ways to stop analytics from your own browser, each effective immediately.

You may also lodge a complaint with a supervisory authority where you live, where you work, or where you think the problem arose. The European Data Protection Board publishes the list at edpb.europa.eu. You do not have to contact us first.

Automated decision-making. This is an assessment that builds a cognitive profile, so the question deserves a direct answer: scoring runs entirely in your browser, and the operator does not use anonymous response records to make decisions about a particular person. We make no automated decision about you and carry out no profiling within the meaning of Art. 22. There is no account for a result to attach to.

The controller is MOSAIC-48, reachable at E-mail du développeur. No data protection officer is designated; none of the conditions in Art. 37(1) applies.

No representative in the Union has been designated. The operator treats the processing described here — no identifier, no special categories of data, and limited processing — as covered by the exemption in Art. 27(2)(a). If that stops being true, a representative will be designated and named here.

Publicité Google AdSense et consentement

Nous utilisons Google AdSense (Google LLC) sur les pages de contenu général pour diffuser des annonces et vérifier la propriété et l’éligibilité publicitaire du site. Google et des fournisseurs tiers peuvent enregistrer ou lire des cookies et traiter des balises web, adresses IP, identifiants d’appareil ou publicitaires et informations similaires pour diffuser et limiter la fréquence des annonces, personnaliser les annonces (avec consentement), mesurer leur performance et prévenir la fraude ou les abus.

Consultez Comment Google utilise les informations provenant de sites ou d’applications qui utilisent ses services. Des fournisseurs tiers peuvent aussi placer ou lire des cookies et utiliser des balises web ou technologies similaires pour mesurer la diffusion des annonces.

Vos réponses, temps de réponse par question, indice cognitif composite, scores par domaine et type de pensée ne sont pas envoyés à Google ni aux fournisseurs publicitaires.

Le script AdSense n’est pas chargé et aucune annonce n’est diffusée sur /test, /test/mosaic96, /result, /report ni leurs versions localisées.

Consentement des utilisateurs européens

Dans l’EEE, au Royaume-Uni et en Suisse, nous affichons une plateforme de gestion du consentement (CMP) certifiée par Google. Vous pouvez accepter, refuser ou gérer vos choix. Les cookies et identifiants publicitaires ainsi que les annonces personnalisées nécessitant un consentement ne sont utilisés que selon votre choix, modifiable ensuite dans la CMP.

Réglages publicitaires et refus

Gérez les annonces personnalisées Google dans les Paramètres des annonces et refusez les cookies des fournisseurs tiers participants via AboutAds. Le blocage des cookies tiers peut laisser apparaître des annonces non personnalisées.

Toute autre mention indiquant que nous « n’utilisons pas de cookies ni d’identifiants publicitaires » vise uniquement l’analyse sans cookie Umami et nos propres traitements. Le présent article régit Google AdSense.

About the assessment itself

MOSAIC-48 is a non-clinical instrument intended for education and self-understanding. It is not a medical diagnosis. Scores are estimates computed against an internal reference distribution, not formally normed certified scores, and must not be used for medical or clinical diagnosis or for hiring and selection decisions. If you have concerns about your cognitive functioning, please consult a qualified professional.

Last reviewed: 2026-07