Privacy

Cold Sore Confessions is a small operation. This page describes exactly what we collect and what happens to it, in plain language.

What we collect

Your quiz answers. The six answers you give during the quiz, so we can build the plan page you see at the end and improve the questions over time.

Your email address, if you give us one, plus your confirmation that you would like email from us.

Basic visit information. Which step of the quiz you reached, when, the ad or link that brought you here, your browser type, and your IP address. We use this to see where people leave the quiz.

Purchase information, if you buy. Payments are handled entirely by Stripe — we never see or store your card number. We keep the email address on the order, the amount, and a download link.

What we never do with your answers

We do not sell your quiz answers, and we do not share them with advertising platforms. Your answers are stored in our own database and are not sent to Meta, TikTok, our email provider, or any analytics vendor. When we report a conversion to an ad platform, the only personal data included is your email address in a scrambled (hashed) form, along with the ad-click identifier from the link you arrived on.

We do not sell your email address either. It is used to send you your purchase and, if you opted in, occasional email from us.

Who processes data for us

We use a small number of service providers, each only for the job named: Stripe (payments), SendGrid (purchase and account email), Google (the spreadsheet holding our email list, if you opted in), Neon (database hosting), Cloudflare R2 (file storage), Google Analytics (page and step counts), Microsoft Clarity (anonymised recordings of how pages are used), and Vercel and Render (website hosting).

Cookies and tracking

We use a session identifier stored in your browser for the length of your visit, so that the steps you take through the quiz can be counted as one person rather than several. It disappears when you close the tab.

We also run advertising pixels from Meta and TikTok, which set their own cookies and let us measure whether an ad led to a purchase. You can limit these through your browser settings or your device’s ad tracking controls.

We use Google Analytics to count page views and see which step of the quiz people stop at. It receives the name of the step you reached — never your answers, your email address, or anything that identifies you personally.

We use Microsoft Clarity to see how pages are actually used — where people tap, how far they scroll, and where a page seems to get stuck. It records a playback of the page layout and your taps. The quiz screens are masked in those recordings: your answers and anything you type are hidden before the recording leaves your browser. Clarity sets its own cookies, which you can limit through your browser settings.

How long we keep things

Quiz answers and visit information are kept for up to two years. Order records are kept for seven years because we have to for tax purposes. If you unsubscribe or ask for deletion, we act on it sooner — see below.

How to have your data deleted

Email hello@coldsoreconfessions.com from the address you used, and say you would like your data deleted. We will delete your quiz answers, your email address, and your visit records within 30 days and confirm when it is done. We may have to keep a minimal record of a purchase for tax and refund purposes; if so, we will tell you exactly what remains.

You can also unsubscribe from any email we send using the link at the bottom of it, or ask us for a copy of the data we hold about you at the same address.

Children

This site is intended for adults, and we do not knowingly collect information from children.

Changes

If this policy changes we will update the date at the top of this page.

Contact

Questions about any of this go to hello@coldsoreconfessions.com.