Privacy Policy
Last updated: October 16, 2026
We collect what it takes to produce your result, nothing more. We never sell it.
Who we are
Threshold is operated by [legal name of the operator], [registered address] (“Threshold”, “we”). We are responsible for the personal data described here. Contact: [contact email].
What we collect
| Data | When | Why |
|---|---|---|
| First name and email | Last step of the assessment | To identify your result and contact you about it, including your Crossing reservation |
| Business type, goal and your 90-day sentence | Before the questions | To frame your result |
| Your 40 answers and the time taken | During the assessment | To calculate your result and improve the assessment |
| Your result (scores, pattern) | Calculated on our server | To show your result page |
| “Does this fit?” answer and comment | If you answer | To check and improve the accuracy of our patterns |
| Crossing reservation and payment preference | If you reserve | To hold your founding place. No payment is taken. |
| Usage events (page viewed, assessment started) with a random visit ID | As you use the site | To measure how many people start and finish |
We do not collect payment details, and we do not ask for health information. Please don't include sensitive information in the free-text fields.
Legal basis
We process your answers and contact details with your consent, given when you tick the box before seeing your result. You can withdraw it at any time by asking us to delete your data. Usage measurement relies on our legitimate interest in understanding whether the assessment works, using the minimum data needed. [To confirm with legal counsel, including requirements under the Mauritius Data Protection Act 2017 and the laws of the countries we serve.]
Your browser
We set no cookies on public pages and use no advertising trackers. The assessment stores two items in your browser’s local storage: your progress, so you can resume if you close the tab (deleted once you submit), and a random visit ID used for the usage events above. You can clear both from your browser settings at any time.
We use Cloudflare Web Analytics, which counts page views without cookies and without identifying you.
Who processes it
- Cloudflare, Inc. hosts the website, runs our server code and provides page analytics.
- Supabase, Inc. hosts our database, located in the United States (East).
- Google Fonts delivers the typefaces, which shares your IP address with Google when a page loads.
These providers act on our instructions. Your data may therefore be stored and processed in the United States and other countries where they operate.
How long we keep it
Assessment data, feedback and reservations: [24 months after your last activity — to confirm], unless you ask us to delete it sooner. Usage events: [13 months — to confirm].
Deletion and your rights
Email [contact email] from the address you used, and we will delete your first name, email, 90-day sentence and comments. We keep your anonymous scores to improve the assessment; they can no longer be linked to you. You can also ask for a copy of your data or for a correction. We answer within [30 days]. If you are unhappy with our answer, you can complain to your local data protection authority.
Security
Your result is reached only through a private, unguessable link. Your answers and email are never sent back to the browser, the database refuses all public access, and only our server can read or write it.
Who it’s for
Threshold is for adults running a business. It is not meant for anyone under 18.
Changes
If we change this policy, we will update this page and its date. Material changes will be announced on the site.