Privacy & data

Who we are

InnerCodex (“we”) is a brand operated by the data controller below. We run innercodex.app.

For the purposes of EU/UK GDPR, the entity above is the data controller for personal data processed through this site.

What we collect

• Email when you ask us to send your full profile — to deliver what you requested and related service messages.
• First name (optional) — only if you enter it, for personalization. We do not require a full legal name.
• Gender — to match illustration variants in the experience.
• Birth date, birth time, and birth place — solely to compute your archetype outcome in the tool.

Purpose & legal basis

We use this information to run the archetype experience and to send materials you explicitly request. Where the EU/UK GDPR applies, we rely on your request and our steps to fulfil it. If we ever send optional marketing, we will only do so where you have clearly agreed.

Service providers (processors)

We don't sell your data and we don't share it with third parties for their own purposes. We do use a small set of trusted providers to actually run the service. Each one only sees the data it needs:

• MailerLite Limited (Lithuania, EEA) — email delivery and list management. Receives: email, first name, gender, archetype identifiers, link to your PDF.
• Hetzner Online GmbH (Germany, EEA) — hosting for the API, automation workflow, and the CDN that serves your PDF.
• Vercel Inc. (United States, with global edge locations) — hosting for the website you are reading. Sees standard request metadata (IP, user agent) at the edge.
• OpenStreetMap / Nominatim (United Kingdom & Germany) — converts the city you type into coordinates for the chart calculation. We send the city name only; no email or identity is attached.

International processing

Most of our infrastructure sits in the EEA (Germany and Lithuania, see above). The website itself is delivered through Vercel Inc., a US company with global edge locations, which means routing data may briefly leave the EEA. Where personal data is transferred outside the EEA we rely on the safeguards required by law (such as the European Commission's Standard Contractual Clauses) put in place by the providers above.

Retention

We keep personal data only as long as needed for these purposes or as required by law.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to certain processing, and to complain to a supervisory authority. Write to contact@innercodex.app to exercise your rights.