Last updated: 10 November 2026
This policy explains what personal data IQ Atlas (iqatlastest.com) collects, why, how long we keep it and what your rights are. We collect only what the test needs. There are no adverts and no analytics or tracking tools, and we never sell your data.
Who is responsible
IQ Atlas is run by Kris, a private individual based in Bulgaria, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to [email protected].
What we collect
- Account details: your name, email address, password (stored only as a one-way hash, so we can't read it), age, country and language, when you accepted the Terms, how many times you have logged in and when you last did.
- Your test: for every question, your answer, whether it was right, how long you took and whether the time ran out; your section scores and your result (IQ estimate, percentile and classification).
- Technical data: your IP address, browser details and the pages you request, recorded in our server's logs. Our network provider, Cloudflare, also tells us which country you are connecting from, so we can suggest it when you register.
- Notifications: the messages we have sent you and whether you have seen or opened them.
- Password resets: a one-time reset code, stored hashed, which expires after one hour.
Why we use it, and on what legal basis
- To run your account and the test, score it and show you your result, including using your age for age-adjusted scoring. This is necessary to provide the service you sign up for (Article 6(1)(b) GDPR).
- To create your shareable result page and count your score in your country's average. This is part of the service described in our Terms (Article 6(1)(b) GDPR).
- To send emails about your account, such as a welcome message, password resets and a note that your result is ready (Article 6(1)(b) GDPR). We don't send marketing emails.
- To keep the site secure and working, prevent cheating and abuse, and fix problems, using server logs and limits on repeated requests. This is our legitimate interest in a safe, reliable service (Article 6(1)(f) GDPR).
- To make the test more accurate. We study answers and response times across all users to work out how hard each question really is and to make the scoring fairer. This is our legitimate interest in a reliable test (Article 6(1)(f) GDPR). What we take from this are statistics that don't identify anyone.
Your result is an estimate made by software. We don't use it to make decisions that have legal or similarly significant effects on you.
What other people can see
When you finish all six sections, we create a result page with its own link, which you can share. Anyone with the link can see the name on your account at the time you finished, your IQ estimate, percentile, classification, section scores, Genius Test result (if any), your country and the date. Your email address and age are never shown. Result pages are kept out of search engines. Your score is also included, without your name, in your country's average on the world map; a country appears there only once at least five people from it have finished the test.
Cookies and storage on your device
- Session cookie: keeps you logged in. It expires 7 days after you log in, or when you log out.
- Page view note: your browser's local storage remembers which of our information pages you have opened, so the same visit isn't counted twice.
- Security cookie: Cloudflare may set a cookie to tell people from automated traffic.
All of these are strictly necessary for the site to work and to protect it, so we don't ask for consent. We don't use advertising or analytics cookies.
Who else handles your data
- DigitalOcean hosts our server and database, in a data centre in Frankfurt, Germany.
- Cloudflare delivers the site to you and protects it from attacks. All visits pass through its global network, so your IP address may be processed outside the European Union.
- An email delivery service sends our emails to you.
They handle data only on our instructions, under data processing agreements. Where data leaves the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or, for US companies certified under it, the EU-US Data Privacy Framework. We don't share personal data with advertisers or sell it to anyone. We disclose it to authorities only when the law requires us to.
How long we keep it
- Your account, answers and result: until your account is deleted.
- Server logs: up to 30 days.
- Login sessions: up to 7 days.
- Password reset codes: until used, and for at most one hour.
When your account is deleted, your answers, scores, result page and notifications are deleted with it, and your score drops out of your country's average.
Your rights
Under the GDPR you have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected (you can change your name, email and password yourself on your profile page);
- have your data deleted, including your whole account;
- restrict how we use your data;
- receive your data in a machine-readable format;
- object to our use of your data based on our legitimate interests.
To use any of these rights, write to [email protected] from the email address of your account. We will reply within one month. If you think we have handled your data wrongly, you can complain to the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg) or to the data protection authority of the EU country where you live.
Children
IQ Atlas is not meant for children under 13, and they can't register. If you are under 18, please use it with the permission of a parent or guardian. If you believe a child under 13 has registered, contact us and we will delete the account.
Security
The site is only served over encrypted connections (HTTPS). Passwords and reset codes are stored hashed, the database can't be reached from the internet, and only the operator has access to the server.
Changes to this policy
If we change this policy, we will update the date at the top. We will tell you about significant changes on the site or by email.