Privacy Policy

This Privacy Policy describes how Pathr ("we", "us", or "Pathr") collects, uses, and shares information when you use the website at pathr.id (the "Service").

1. Information we collect

Information you provide directly

• Quiz answers. The choices you make on our 9-question identity quiz.
• Optional profile details. First name, date of birth, and free-text input you enter on the optional pre-card screen. All optional — you can skip every field.
• Email address. If you choose to save your card and create an account, we collect your email for magic-link authentication and notifications.
• Compatibility / connection data. If you share your Pathr link with someone and they take the quiz, we record the relationship-tag you assigned (e.g., "friend", "crush") to generate compatibility readings. The tag is private to you — invitees don't see it.

Information we collect automatically

• Cookies and similar technologies. Used for session authentication, product analytics, and advertising attribution. Specifically: a TikTok Pixel cookie (for measuring how visitors arrive from TikTok ads), a Meta Pixel cookie (for measuring traffic from Meta / Facebook / Instagram ads), and our own session cookies for sign-in state and theme preference.
• Device and usage data. Browser type, operating system, approximate region (derived from IP address — we do not store full IP addresses), pages viewed, and timestamps.
• Advertising identifiers (Automatic Advanced Matching). When you submit your email to our quiz form, our advertising-platform pixels (TikTok, Meta) may receive a hashed (SHA-256) version of your email so the platform can match your session to a known account and improve ad measurement. The pixel platforms do not receive your raw email — only an irreversible hash.

2. How we use information

• To generate your personalized Vibe Card and any subsequent cards (Shadow / Element / Mission / Codex).
• To run compatibility readings between you and people you invite.
• To authenticate you and protect your account.
• To send transactional emails (magic links, match notifications, card unlock confirmations).
• To improve the product — we may review aggregate, anonymized patterns in quiz answers and card outputs.
• To comply with legal obligations and prevent abuse.

3. Third-party services we use

To provide the Service, we share necessary data with the following processors:

• Anthropic — to generate Vibe Card descriptions via Claude. We send your psychometric vector, family anchor metadata, and optional name/DOB. We do not send your email address or full identity.
• Supabase — database, authentication, and file storage.
• Vercel — application hosting and edge delivery.
• Resend — transactional email delivery (magic links, notifications).
• Stripe — payment processing if you purchase a paid card or subscription. Payment-card data is handled directly by Stripe and never touches our servers.
• Google — if you choose "Continue with Google", we receive your Google account email and basic profile from Google's OAuth flow.
• PostHog — product analytics for understanding how users move through the quiz and cabinet.
• Microsoft Clarity — anonymized session recordings and heatmaps for usability research. Recordings auto-mask form input by default.
• TikTok — advertising measurement and audience matching (TikTok Pixel + Events API). When you visit the site or submit a form, TikTok receives anonymized event data plus, where you provided an email, a hashed (SHA-256) email so TikTok can match the visit to a known account. Used solely for ad attribution and audience optimization.
• Meta (Facebook / Instagram) — advertising measurement when traffic arrives from Meta-platform ads. Same hashing protections apply as for TikTok.

We sign Data Processing Agreements with these processors where applicable.

You can opt out of advertising-platform tracking at any time by enabling your browser's "Do Not Track" setting, blocking third-party cookies, or installing an ad-blocker. Opting out does not affect product functionality.

4. Sharing with other users

When you share your Pathr link, the recipient sees a teaser landing page that does not disclose your name or archetype unless you have explicitly enabled mutual reveal. Compatibility scores between you and an invitee are visible to both of you after the invitee completes the quiz. Relationship-tags you assign (e.g., "crush", "friend") are private to you and never disclosed to the invitee.

5. Your rights

You have the right to:

• Access a copy of your data.
• Correct inaccurate data.
• Delete your account and all associated data.
• Export your data in a portable format.
• Object to specific processing.

Email fedor.e@x-founders.com with your request and we will respond within 30 days.

6. Data retention

Quiz sessions and Vibe Cards are retained for as long as your account is active. If you delete your account, all personal data is removed within 30 days, except where we are legally required to retain certain records (for example, payment records for tax purposes).

7. Data security

We use industry-standard encryption for data in transit (TLS 1.2+) and at rest. We restrict access to personal data to authorized personnel only. No system is perfectly secure — if we ever experience a breach affecting your data, we will notify you in accordance with applicable law.

8. International transfers

Pathr is operated from outside the European Economic Area. By using the Service, you consent to your data being processed in the United States and other jurisdictions where our processors operate.

9. Children

Pathr is intended for users aged 16 and older. We do not knowingly collect data from anyone under 16. If you believe we have collected such data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top will reflect the latest revision. Material changes will be communicated via email to registered users.

11. Contact

Questions about this policy: fedor.e@x-founders.com

Home · Terms of Service