1. Who we are
Sabotype is run by Andry Hamida, 350 Fifth Avenue, Suite 6800, New York, NY 10118, United States ("we"). We decide how your quiz, email and purchase data is used, so we are responsible for it under data protection law, including the EU and UK GDPR and Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
Privacy questions and requests: [email protected]. A person reads every message.
2. What we collect
- Quiz answers and result: how much each of the 28 statements fits you, and the pattern scores that come from them.
- "About you" choices: the short answers after the quiz, such as the area of life you want to work on.
- Email address, and your first name if you give it.
- Your time zone, so program days unlock at your local midnight.
- Your choices: whether you asked for the profile emails, ticked "send me occasional tips", accepted or rejected ad measurement, and when.
- Optional free text: what you write in the optional box, only if you tick its consent box (section 4).
- A safety marker: a yes/no note set when something you write suggests you may need support (section 5).
- Campaign tags from the link you arrived through (for example
utm_campaign), kept with your quiz record and order. - Purchase details from our payment partner: your email, what you bought, the amount, and whether it was refunded or disputed. It may also share your name and country. We never see your card number.
- Email activity: whether an email was delivered, bounced, marked as spam or unsubscribed, and for the profile and tips emails, opens and clicks.
- Messages you send us, by email or by Instagram message.
- Technical data: our server does not keep an access log of visitors. It sees your IP address briefly to block abuse, and short error logs can contain it.
3. Why we use it, and our legal basis
Data protection law asks for a legal basis for each use. Ours:
| What we do | Data used | Legal basis |
|---|---|---|
| Score the quiz, show your result, email the profile you asked for | Answers, "About you" choices, email, first name, time zone | Providing the service you asked for (contract) |
| Deliver a program you bought, unlock its days, tailor it to your pattern | Answers, choices, email, time zone, purchase details | Contract |
| Send tips and offers by email | Email, first name, pattern | Your consent (a separate, unticked box). Unsubscribe anytime. |
| Tailor your emails with what you wrote in the optional box | Free text | Your explicit consent (the box's own consent checkbox) |
| Pause marketing and send support resources when you may need support; a person checks within 24 hours | Free text, messages, safety marker | Your explicit consent for free text; for messages you send us, protecting your vital interests and our legitimate interest in running a safe service |
| Measure which ads bring people here (Meta pixel) | Visit, quiz start, sign-up and purchase events (section 7) | Your consent (Accept on the banner) |
| Count which page design works better | A one-letter design choice (a or b), counted as plain totals | Legitimate interests (improving the site); nothing personal is stored |
| Keep purchase and tax records | Purchase details | Legal obligation |
| Keep the service secure, prevent fraud and refund abuse, answer support | Technical data, purchase details, messages | Legitimate interests (running a safe, working service) |
4. The optional free-text box
The quiz is a self-reflection tool, not a health test, and it isn't designed to collect health information. The optional box is different: you might choose to write about your health or other sensitive matters, which the law classes as special or health data.
- The box is optional. Skip it and you still get your full result.
- Nothing you write leaves your browser unless you tick the box's consent checkbox. That checkbox is your explicit consent.
- We use it to tailor your emails and, with your name removed, to improve our content. We quote it anonymously only if you tick "You may quote this anonymously".
- Please don't include anything you wouldn't want stored, such as medical details or details about other people.
- It is checked on our own server against a fixed list of phrases (section 5). It is never sent to an AI service, an ad platform or our email provider.
- We delete it 12 months after you save it, or sooner if you ask. Withdraw your consent anytime at [email protected]; we then delete the text.
- More detail for US readers: Consumer Health Data Privacy Policy.
5. If something suggests you may need support
- If your free text or a message to us contains words that suggest you may be in crisis, our server sets a yes/no safety marker on your record.
- From then on you get no offers or marketing from us, only the profile you asked for and support resources. A person reviews it within 24 hours.
- Our email provider only gets a neutral "paused" setting so the pause works. It never gets the reason or your words.
- The marker stays with your record so the pause keeps working, and it is deleted with your record.
- Sabotype isn't a crisis or counseling service. If you need help now, in the US call or text 988; elsewhere, visit findahelpline.com.
7. Ad measurement (Meta pixel)
We ask before we use any advertising tool. A banner offers Accept and Reject, with equal weight. Until you accept, the Meta pixel does not load and no advertising cookies are set. If your browser sends a Global Privacy Control signal, we count it as Reject.
If you accept, Meta Platforms learns that you visited this self-reflection site, and receives only these events: that you visited, started the quiz, gave your email and, if you buy, that you bought and the order value. For the last two we also send Meta a scrambled (SHA-256 hashed) copy of your email from our server, plus Meta's own cookie IDs and your browser type, so Meta can match the event to an ad you saw. Meta can use its cookies to recognize you on other sites over time. We never send your answers, your pattern, anything you write, or anything about your wellbeing. Meta's use of this data is covered by Meta's Privacy Policy.
You can change your choice anytime with "Ad privacy choices" at the bottom of the quiz page. Rejecting later stops new events and deletes Meta's cookies on our site. The browser details we keep for matching are deleted after 30 days.
8. Cookies and browser storage
- Essential: your browser tab keeps your quiz progress (so a refresh doesn't lose your answers), the campaign tags you arrived with, and your banner choice. These stay on your device and need no consent.
- Page design test: one small value (
sbt_v, "a" or "b") so you keep seeing the same design. It holds nothing personal and is never shared with advertisers. - Advertising: Meta's cookies, only after you click Accept (section 7).
- Checkout: the checkout runs on our payment partner's own site with its own essential cookies. If you arrive through an affiliate's link, the payment partner records the referral with its own cookie so the affiliate can be credited if you buy.
9. International transfers
We are based in Indonesia, and our providers operate in the EU, the US and elsewhere. So your data may be handled outside your country, including in countries without an EU or UK "adequacy" decision. When that happens we rely on recognized safeguards, such as the European Commission's Standard Contractual Clauses and the UK's transfer addendum, or the provider's own approved transfer mechanism. Email us for a copy.
10. How long we keep it
| Data | How long |
|---|---|
| Optional free text | 12 months after you save it, or sooner if you withdraw consent |
| Quiz record, choices, email and safety marker | While you use Sabotype, until you ask us to delete it. If you didn't tick "tips", your email leaves our marketing email tool 30 days after your profile emails |
| Do-not-email list (after you unsubscribe) | Kept, so we never email you again by mistake |
| Purchase records | 10 years, because tax law requires it. On a deletion request we replace your email in them with a scrambled code |
| Ad matching details (Meta cookie IDs, browser type) | 30 days, only with your Accept |
| Copies of sent emails and queued ad events | 30 days |
| Instagram name and ID on a support follow-up | 30 days |
| Error logs | Up to one month |
| Nightly backups | 14 days, so a deletion reaches the backups within 14 days |
11. Your rights
Everyone can ask us to see, correct or delete their data, and can unsubscribe from any email with one click.
EU and UK: you can also restrict or object to our use of your data, get it in a portable format, and withdraw consent at any time. Withdrawing doesn't affect what we did before. You can complain to your data protection authority; in the UK that is the Information Commissioner's Office (ico.org.uk).
US states with privacy laws, including California: you can ask what we collect and why, and ask us to delete or correct it. You can opt out of "sale" or "sharing" for advertising, and limit the use of sensitive information. We don't sell your data, and we use sensitive information only to provide the service you asked for. If ad measurement counts as "sharing", Reject on the banner, Global Privacy Control, or an email to us opts you out. We won't discriminate against you for using these rights.
Washington, Nevada and other consumer health data laws: see our Consumer Health Data Privacy Policy.
Australia, Canada and Indonesia: you can access and correct your data, withdraw consent and complain to your privacy regulator.
How to ask: email [email protected] from the address you used with us. We may ask you to confirm it's you. We reply within one month (GDPR), 45 days (US state laws), or sooner where your law requires. You may use an authorized agent. There is no fee.
12. Adults only
Sabotype is for adults 18 and over. If you tell us you are under 18, the quiz stops and we don't keep your answers. If we learn that we hold data from someone under 18, we delete it.
13. Security and changes
We use encrypted connections (HTTPS), restricted access to the database, and providers with strong security records. No system is perfect; if a breach affects you, we will tell you and the authorities as the law requires.
If we change this policy in a meaningful way, we will email you before the change takes effect.
14. Contact
Andry Hamida, 350 Fifth Avenue, Suite 6800, New York, NY 10118, United States. Email: [email protected].