Privacy Policy

Last updated: August 2026

Information We Collect

Your email address. Asked for on the test page before the screening begins. We use it to send you a link to your saved report and, if you do not finish the test or do not unlock the full report, a small number of follow-up emails. Every email carries an unsubscribe link.

Your test responses and scores. Visual contrast sensitivity results, symptom questionnaire answers, the age you enter, and screen calibration settings. These are held in your browser and, once you complete the test, saved to our server so the emailed link opens on any device.

Payment information. Handled entirely by our payment processor. Your card details are sent from your browser to them and never reach our servers. We receive only a payment reference confirming the charge succeeded.

Files you upload to the report interpreter. A PDF or image of a lab report is sent to our AI provider for processing and returned as an explanation. We do not store the file or the text extracted from it. Once your result is returned, nothing about the document remains on our systems.

Your IP address. Used to limit the free interpreter to one use per address per 24 hours. It is held for 24 hours purely as a rate-limit counter and is not linked to your test results or your email.

Your Saved Report and the Link We Email You

When you finish the test we save your results to our server and email you a link to them. The record contains your responses and scores, your email address, and, if you have paid, a token confirming access. Your email address is stored on the server only and is never returned by the page or its API.

Treat your report link as private. Anyone you forward it to will be able to read your results.

Reports are deleted automatically after 90 days. We recommend downloading yours if you want to compare against a future retest. After 90 days the link stops working and we cannot recover the report.

Who Processes Your Data

We do not sell your data, and we do not use advertising networks, behavioural tracking, or data brokers. Running the service does mean a small number of specialist providers handle parts of it for us:

An email delivery platform stores your email address and the link to your report, and sends the emails described above.

A payment processor handles payments and holds the card details we never see.

An AI provider processes documents you upload to the report interpreter and produces the explanation.

A cloud hosting provider runs the site and stores saved reports and the interpreter rate-limit counter.

An analytics provider receives page views and the events described above. It does not receive your email address, your test answers, or your report link.

If you would like to know which specific companies these are, email us at the address below and we will tell you.

How Long We Keep Things

Saved reports and the email address attached to them: 90 days, then deleted automatically.

Interpreter rate-limit record: 24 hours.

Uploaded documents: not stored.

Your email address with our email provider: until you unsubscribe or ask us to delete it.

Your Choices

You can take the test without paying and without opening the emailed link. You can unsubscribe from any email using the link at the bottom of it, which stops all further messages.

To delete the copy held in your browser, clear your browser data for this site. To have your saved report and your email address deleted before the 90 days elapse, email us and we will remove them.

Depending on where you live you may have rights to access, correct, export, or erase the data we hold about you. Write to the address below and we will action it.

Analytics and Cookies

We use a third-party analytics service to understand how the site is used, which records pages visited, browser type, approximate location from your IP address, and actions such as starting the test or completing a purchase. It sets its own cookies to recognise a returning browser. We do not use advertising cookies and we do not run retargeting. Analytics is not linked to your test results, and it is switched off entirely on saved report pages, so a report link is never sent to the analytics provider.

Children

The Site is not intended for use by anyone under 16, and we do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it.

Changes

If we change how we handle your data we will update this page and the date at the top. Material changes to how we use your email will be notified by email.

Contact

For any privacy-related question, including deletion requests, contact reports [@] moldtoxintest (dot) com. See also our Terms of Use.