Privacy Policy

This Privacy Policy explains how Find the Real Me (“Find the Real Me,” “we,” “us,” or “our”) collects, uses, and shares information when you visit https://findthereal.me or buy anything on it (the “Service”). Find the Real Me is operated by Dylan Zhang, an individual based in California, USA, who is the party responsible for your information. If you have any questions, email [email protected].

The short version: we built the Service to collect as little as possible. There are no user accounts. Your quiz answers are sent to our server only to work out your result, and we don’t store them. If you use the compatibility invite, your answers travel sealed inside the invite link, and the score is kept for up to 60 days so you can see it. Payments are handled by Stripe, so we never see your full card number. We do not sell or share your personal information.

1. Information we collect

a) Information that stays on your device

• Quiz answers and results. In-progress answers are kept in your browser’s session storage, and your answers and latest result are kept in local storage so you can come back to your report. (How your answers are scored is explained in b) below.)
• Crush initials and invite records. The initial(s) you can type for the crush quiz stay on your device and are never sent to us. If you create or open a compatibility invite, your device also keeps the invite link, its ID, an owner key and the first name you entered, so you can see your invites later.
• Unlock status. After you buy, your browser stores a small record of what you unlocked, along with a signed unlock token issued by our server, in local storage. This is what keeps your purchase unlocked when you refresh or come back later.
• Preferences. Your language choice is stored in local storage.

You can delete all of this at any time by clearing your browser’s site data for findthereal.me. If you clear it after buying, you can get your purchase back with Restore purchase (when available) or by emailing us.

b) Quiz answers sent to our server

• Scoring. The scoring rules live on our server, not in your browser. When you finish a quiz, your browser sends your answers (just the option you picked for each question, with the quiz name) to our server so it can show your free hint, such as your crush signal or how many nights you’d survive. When you unlock a result, your browser sends your answers again together with your unlock token so the server can work out your result. We use the answers only to compute the response and do not store them.
• Compatibility invites (crush quiz). When you create an invite, your browser sends your answers and, if you type one, your first name to our server. The server seals them into the invite link with encryption, so the link itself carries them: the person you send it to can’t read your answers, only the first name you chose to show. We don’t keep a copy of your answers. When your invitee finishes the quiz, their answers (and their optional first name) are sent to our server together with your invite to compute your compatibility score. Neither of you ever sees the other’s answers or result type, only the score. The result link the invitee can send back to you contains the score and the first names.
• Stored invite results. So that you can see results without the invitee sending them back, our server stores, for each invite result: the score, a short “vibe” line number, the invitee’s first name (if they gave one), the time, and a scrambled fingerprint of their answers that is used only to avoid saving duplicates and can’t be turned back into answers. This is kept with Cloudflare for up to 60 days (it is deleted when the invite expires) and can only be read with the owner key stored on the inviter’s device.
• Rate limiting. To prevent abuse, our server keeps short-lived counters, for example how many compatibility scores an IP address or an invite has requested, and how many restore emails were requested for an email address. These counters expire automatically, within an hour for IP addresses and email addresses and within a day for invites.

c) Information we receive when you buy

• Checkout happens on Stripe’s secure payment page. Stripe collects your email address, payment details, billing country and postal code, and any other details its checkout form asks for. We never receive or store your full card number.
• From Stripe we receive the information needed to confirm and support your purchase: the Checkout Session ID, what you bought and what you paid, the payment status, the date, your email address, and limited payment details such as the card brand and last four digits as shown in Stripe’s dashboard. We also attach a short reference to the checkout that says which quiz and which plan you bought. It contains no personal information.
• When your browser loads your paid report, it sends our server your unlock token, the quiz name, your result type, and your language. We use these only to deliver the report and do not store them.

d) Information collected automatically

• Our website is hosted and delivered by Cloudflare. Like any web host, Cloudflare processes your IP address, browser and device information (user agent), the pages and files you request, and timestamps. It does this to deliver the site, keep it secure, and prevent abuse such as bots, DDoS attacks, and excessive restore requests. These logs are kept only for a short time.
• We do not use advertising cookies or cross-site tracking. If we add privacy-friendly analytics later to understand overall usage (for example, page views), we will update this policy first and describe what is collected.

e) Email

If you email us, we receive your email address and whatever you include in your message. When purchase-restore and receipt emails are turned on, we use your checkout email to send you a restore link or a receipt. These emails are sent through our email provider, Resend.

2. How we use information

• To provide the Service: run and score the quizzes, create compatibility invites and compute compatibility scores, verify payments, unlock and deliver your full reports, and restore purchases.
• To send transactional messages you need, such as receipts and restore links. We do not send marketing email.
• To provide support, restore access to purchases, handle payment disputes (and any refunds required by law), and reply to your messages.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To meet legal, tax, and accounting obligations.

We do not use your information for automated decisions that have legal or similarly significant effects on you. Your quiz result is entertainment and is never used to profile you.

3. How we share information

We share information only with service providers who process it for us under their own privacy and security terms:

• Stripe (payment processing, fraud prevention, receipts). Stripe acts as an independent controller for some processing, such as fraud prevention and meeting its legal obligations. See the Stripe Privacy Policy.
• Cloudflare (hosting, content delivery, security). See the Cloudflare Privacy Policy.
• Resend (transactional email, once enabled). See the Resend Privacy Policy.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or transfer of the Service. In a sale or transfer, the new owner would have to honor this policy. We do not sell your personal information. We do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months.

4. Data retention

• Data stored on your device stays there until you clear it.
• Quiz answers sent for scoring are not stored. Compatibility invite results are kept for up to 60 days; rate-limit counters expire within a day.
• Stripe keeps purchase and transaction records (including your email address) for as long as we need them to provide restores, handle disputes (and any refunds required by law), and meet tax and accounting rules. This is generally up to 7 years after the purchase. Stripe may keep records longer to meet its own legal obligations.
• Hosting and security logs are kept briefly, usually no more than 30 days, unless we need them to investigate abuse.
• Support emails are kept for as long as we need them to resolve your request, and then for up to 2 years.
• Restore links expire after 30 minutes.

5. Security

All traffic to the Service uses HTTPS. Unlock and restore tokens are cryptographically signed, and compatibility invites are encrypted (AES-256-GCM). Payment details are handled by Stripe, which is certified to PCI DSS Level 1. No system is perfectly secure, but we limit what we collect so there is very little that could be exposed.

6. Children’s privacy

The Service is intended for people aged 13 and older. Purchases must be made by adults aged 18 or older, or by minors with a parent’s or guardian’s permission. In keeping with the U.S. Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, for example through a purchase or an email, contact [email protected] and we will delete it.

7. Your California privacy rights (CCPA/CPRA)

If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you these rights:

• Right to know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
• Right to delete personal information we collected from you, subject to legal exceptions such as tax records.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell or share it, so there is nothing to opt out of. We also honor Global Privacy Control signals.
• Right to limit the use of sensitive personal information. We do not collect sensitive personal information for the purpose of inferring characteristics about you.
• Right to non-discrimination for using any of these rights.

In the past 12 months we have collected these categories of personal information: identifiers (email address, IP address, and the optional first name you enter for a compatibility invite); commercial information (purchase records); and internet or network activity (basic access logs). We collected them from you, from your device, and from Stripe, for the purposes in Section 2, and disclosed them only to the service providers in Section 3. To make a request, email [email protected] from the email address you used at checkout, or tell us that address. We will verify your request by matching it to our records. You may use an authorized agent. If you do, we may ask for proof that you gave them permission. We will respond within 45 days.

8. Rights for visitors in the EU, EEA, and UK (GDPR / UK GDPR)

Dylan Zhang is the controller of your personal information. We rely on these legal bases: performance of a contract (processing your purchase, delivering your report, and providing the quiz and compatibility features you ask for); legitimate interests (keeping the Service secure, preventing fraud, answering support requests); and legal obligation (tax and accounting records). You have the right to access, correct, delete, restrict, or object to our processing of your personal information, the right to data portability, and the right to withdraw consent where we rely on consent. Email [email protected] to use these rights. You also have the right to complain to your local data protection authority.

We are based in the United States, and our service providers may process your information in the United States and other countries. Where required, these transfers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as used by our providers.

9. Other U.S. state rights

If you live in another U.S. state with a consumer privacy law (for example Colorado, Connecticut, Virginia, or Texas), you may have similar rights to access, correct, delete, and opt out. Email [email protected] to use them. If we deny your request, you may appeal by replying to our decision.

10. Pricing reference

For clarity, the Service currently offers a one-time $0.99 unlock for a single quiz and a one-time $9.99 All-Access Pass. These are not subscriptions, and we store no recurring billing information. See our Terms of Service for details.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and change the effective date. If a change is material, we will give a clear notice on the Service before it takes effect.

12. Contact

Dylan Zhang, operator of Find the Real Me, California, USA. Email: [email protected].

Effective date: October 27, 2026. Last updated: October 30, 2026.