Who runs Forma
Forma is run by [TODO-OPERATOR: operator legal name and type], [TODO-OPERATOR: postal address and country]. Questions about your data: [TODO-OPERATOR: privacy contact email]. This notice is written for use in [TODO-OPERATOR: jurisdiction and the privacy law(s) that apply, and a named data-protection contact if one is required].
What we collect, and why
- Your answers to the questions, including skipped ones, to score the session and show your results.
- Response times for each question (how long it was on screen, and whether the tab was hidden), to show total time and to catch unusual timing.
- The age band you pick (adult, 13–17 or 8–12) and the consent you gave, with the date and the version of the consent wording, so we can show what was agreed.
- Account email, display name and a password hash, if you register an adult account. Email addresses are not verified in this version. A recovery code is stored only as a hash.
- A guest cookie (
forma_visitor, a random ID) that links free sessions to this browser. It is needed for the free snapshot to work, and a sign-in cookie is set when you sign in. - Technical request data such as IP address, used briefly to limit abuse (sign-in and start-rate limits) and in hosting logs.
We do not ask for a student’s name, school, exact date of birth, or payment card details. We do not use advertising or tracking cookies, and we do not sell personal data.
Who can see your results
The server checks your account or browser cookie before returning a session. Reports you download are files you control; take care when sharing them. Results are descriptive and exploratory; they are not intelligence scores, norms, percentiles, diagnoses or career recommendations, and they should not be used for placement or hiring decisions.
Children and students (ages 8–17)
Student sessions need a signed-in adult account. The adult confirms they are the student’s parent or guardian, consents to storing the student’s responses, and supervises the session. This is a self-declared confirmation: we do not independently verify it. A parent or guardian can download or delete everything stored about a student’s sessions from the account that created them, or contact us at the address above. [TODO-OPERATOR: confirm any additional parental-consent or children’s-privacy requirements for your jurisdiction before inviting under-13s]
How long we keep it
- Unfinished guest sessions that were never completed are deleted automatically after 90 days by default (the operator can configure 30 to 3650 days). Completed guest results stay until you clear them.
- Account sessions and results are kept until you delete them or delete the account.
- Expired sign-in sessions and rate-limit records are removed by the scheduled cleanup once they expire.
- Hosting and database backups and logs may keep copies for a short time after deletion. [TODO-OPERATOR: state the actual backup and log retention periods]
Your choices and rights
Download: signed-in users can download a JSON file of their account details, sessions, answers, response times and research choices from the account page. Delete: you can permanently delete your account and everything linked to it, or clear the free results linked to this browser. Other requests (correction, objection, questions) go to the contact above. [TODO-OPERATOR: describe how requests are verified and the response time you commit to] Depending on where you live, you may also have the right to complain to a data-protection authority.
Research use (optional, off by default)
Separately from your results, you can choose to allow your de-identified answers to be used to improve these questions, for example to find items that are too easy, too hard or unclear. It is a separate tick box at setup; nothing changes in your results whether you tick it or not. For a student, both the student’s box and a parent or guardian’s box must be ticked. If you opt in, the answers and response times for that session may be analysed without your name, email or account details. You can withdraw on the results page; a withdrawn session is left out of all later analysis. Analysis already completed on combined data cannot be undone. Research use is never a condition of taking the assessment.
Who processes data for us
- Vercel, which hosts the application and handles web requests.
- Neon, which hosts the Postgres database where sessions and accounts are stored.
These providers act on our instructions to run the service. [TODO-OPERATOR: list the regions where data is stored and any international-transfer safeguards that apply] Checkout is a demonstration and does not collect money or card details.
Changes to this notice
If we change what we collect or how we use it, we will update this page and the consent wording shown before a session. Each session records which consent version it was started under (currently assessment-1). Last updated: [TODO-OPERATOR: date of publication]