Privacy Policy

1. Who operates Percy

Percy is operated as a public utility for recording human moral judgment. It is not a commercial product and does not serve advertising. For data enquiries, contact hello@percy.live.

2. What Percy collects

When you complete The Human Measure, Percy records the following:

• Your responses to each question — the choice made (A or B), the moral axis, and which value was preserved and which was surrendered
• The time taken to answer each question, measured in milliseconds between page load and submission
• An anonymous session identifier — a randomly generated UUID created in your browser and stored in localStorage. Percy has no copy of this identifier. It exists solely to link your answers into a single record.
• Timestamps indicating when each response was submitted
• Whether your session was completed in full

None of this data is linked to your name, email address, IP address, or any other identifying information.

3. What Percy does not collect

• Your name, email address, phone number, or contact details
• Accounts, user profiles, or login credentials
• IP addresses or precise location data
• Device fingerprints or cross-site tracking identifiers
• Any information that could identify you as an individual

4. Session identifiers and your record

Your session identifier is stored only in your browser's localStorage. Percy does not hold a server-side copy. This means:

• If you clear your browser data, the link between your browser and your recorded responses is permanently severed
• If you use the 'Start fresh' option, the same applies — your responses remain in the aggregate record but cannot be retrieved or displayed to you again
• This cannot be reversed. Percy cannot recover orphaned sessions.

5. Analytics

Percy uses Plausible Analytics to measure site performance. Plausible is a privacy-first analytics platform that does not use cookies, does not track individuals across sites, and does not collect personal data. It is fully compliant with GDPR, CCPA, and PECR.

Percy records three custom events in Plausible:

• Instrument Started — fired when a participant submits their first answer
• Instrument Completed — fired when all 22 questions have been answered
• Session Reset — fired when a participant chooses to start fresh

These events are aggregate counts only. They are not linked to individuals or session identifiers. You can review Plausible's data policy at plausible.io/privacy.

6. Bot protection

Percy uses Cloudflare Turnstile at the entry point to verify that participants are human. Turnstile operates without cookies and without behavioural tracking. It does not collect personally identifiable information. Verification tokens are short-lived and discarded after use. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

7. Data storage and retention

Response data is stored in a secured PostgreSQL database hosted by Supabase. Data is retained indefinitely as part of a long-term public record of human moral judgment. Because responses are fully anonymous, Percy cannot identify or delete individual submissions unless the exact session identifier is provided.

8. Cookies

Percy does not use cookies for tracking, advertising, or personalisation. No cookie consent banner is shown because no tracking cookies are set.

9. Third-party services

Percy uses the following third-party infrastructure:

• Vercel — hosting and deployment
• Supabase — database storage
• Cloudflare — DNS, CDN, and bot protection
• Plausible Analytics — privacy-first analytics

None of these services receive personally identifiable information from Percy.

10. Your rights

Because Percy collects no personal data, most data protection rights — such as the right to access, correct, or delete personal data — do not apply in the conventional sense. If you believe Percy has unintentionally stored data that could identify you, contact hello@percy.live with the approximate date and time of your session.

11. Changes to this policy

If this policy changes materially, the updated date at the top of this page will reflect that. Percy does not have a mechanism to notify participants directly, as no contact information is held.