This policy covers the KryptoHead.com home page, the published map and reference pages, and the applications that link to it — currently the Subscriptions Tracker, the MBTI-Style 16 Personality Types quiz and the 8-baLLMagic Magic 8 Ball (together, the “Site”). The Retirement Planner runs on the same infrastructure but publishes its own privacy policy, because it stores saved scenarios and its own activity records that this policy does not describe.
Most of the Site needs no account and asks you for nothing. In the Subscriptions Tracker and the MBTI-Style 16 Personality Types quiz you sign in with Google, and we store your name, email address and profile picture so the App knows who you are, plus whatever you choose to save. A question you ask 8-baLLMagic is sent to our scoring provider, TypeSafe, to be answered, and is not stored by us. If you send a message through the feedback form, we keep what you wrote. Every page counts visits with a cookieless, first-party analytics script that stores no IP address. Your IP address is never stored anywhere on the Site; the feedback form keeps a one-way fingerprint of it for 24 hours, purely so one sender cannot flood the form. We do not sell your data, we do not run advertising, and we do not share your information with anyone beyond the infrastructure providers that run the service. Email kryptosubs@gmail.com to get a copy of your data or have it deleted.
The Site is operated by the owner of KryptoHead.com (“we”, “us”). For any privacy question, request or complaint, contact kryptosubs@gmail.com. We are the controller of the personal data described below.
We collect four categories of information, and nothing else. Only the first two involve signing in; the rest apply to any visitor.
| Category | What it is | Why we have it |
|---|---|---|
| Account | Your name, email address, profile picture URL and Google account identifier, received from Google when you sign in. | To identify your account, show who is signed in, and keep your records separated from everyone else's. |
| Content you create | Whatever you enter in the Apps. In the Subscriptions Tracker that is the subscription name, category, cost, currency, billing cycle, renewal date, status, notes, and any card-credit amount, cycle and source you record. In the MBTI-Style 16 Personality Types quiz it is each result you choose to save (the four-letter type, the four axis scores, which scenarios you saw and which options you picked, plus any answer you wrote in your own words before 12 October 2026, when that option was removed), and each party you choose to save: the nicknames or initials you typed for the players and their answers. Use nicknames or initials for other people, not their full names. | It is the service. Without it the Apps have nothing to show you. |
| Feedback you send | If you use the feedback form on the home page: the message you write, the category you pick, the email address you optionally supply, which language the page was in, your browser user-agent string, the two-letter country our host reports for your connection, and the time you sent it. Also a salted one-way fingerprint of your IP address — not the address itself, which is never stored, and not something that can be turned back into it. It is deleted after 24 hours. | So the message can be read and, if you left an address, answered. The fingerprint exists only to stop one sender flooding the form and shutting it for everybody else. |
| Usage | Two things. Every page on the Site loads a first-party analytics script that records the page visited, the referring page, and coarse details of your browser, device and country — aggregate counts only, with no cookie and no stored IP address. Separately, while you are signed in to the Subscriptions Tracker, it keeps a page-view record against your account: timestamp, page path, referring page and user-agent. | To understand basic usage and spot problems. There is no advertising and no cross-site tracking of any kind. |
The MBTI-Style 16 Personality Types quiz scores your answers in your browser from scores computed in advance. Your answers are not sent to any scoring or AI service.
8-baLLMagic sends the text of the question you type, and nothing else, to TypeSafe, whose model returns probabilities that pick the ball's answer. It needs no account, and we do not send your name, email address or any identifier with the question. We do not store your questions or the answers; our hosting provider may keep routine request logs for a short time.
We ask Google only for your basic profile — name, email address and picture. We do not request access to your Gmail, Drive, Calendar, contacts or any other Google service, and we could not read them if we wanted to.
Where the GDPR or UK GDPR applies, our lawful bases are performance of a contract (we cannot provide the Apps without your account and your content) and legitimate interests (aggregate usage counts, feedback messages, and the anti-abuse fingerprint, to keep the service working, secure and improving). Where consent is the applicable basis, you give it by choosing to sign in or by choosing to send a message, and you can withdraw it at any time by asking us to delete your account or your message.
The Site runs on Vercel and stores data in Neon
PostgreSQL databases hosted in the United States (AWS us-east-2). Sign-in is
handled through Google. Aggregate page-view counts are held by Vercel's Web
Analytics. Questions asked in 8-baLLMagic are answered by TypeSafe, as
described above. These four companies process data on our
behalf as service providers; they are not permitted to use it for their own purposes.
If you are located outside the United States, using the Site means your information is transferred to and stored in the United States.
Nobody. We do not sell, rent, trade or otherwise disclose your personal information, and we do not share it with advertisers, data brokers or analytics networks. The only parties that touch your data are the four service providers named above.
The single exception is a legal one: if we were served with a valid court order, subpoena or equivalent legal demand, we would comply. We would tell you first unless legally prohibited from doing so.
The Site sets two cookies, and both do a job you asked for. The bilingual pages set a
language preference cookie (kh-lang) when you pick a language
with the EN / 繁中 switch: it holds only the word en or zh-Hant,
is shared across kryptohead.com pages so your choice follows you between them, and neither
identifies you nor records anything about you. The Apps set an encrypted session
cookie that keeps you signed in between page loads — it is essential, as sign-in
cannot work without it. Google may set its own cookies on Google's pages during the sign-in
step, governed by
Google's privacy policy.
Every page also loads Vercel Web Analytics. It is served from the same domain as the page rather than from a third party, it sets no cookie and stores no IP address, and it does not build a profile of you or follow you to other sites. It produces counts — how many people opened a page, roughly where from, on what kind of browser. There are no advertising cookies and no tracking pixels anywhere on the Site.
Whatever jurisdiction you are in, you can ask us to:
Email kryptosubs@gmail.com and we will respond within 30 days. There is no charge. If you are in the EEA or UK you also have the right to complain to your local data protection authority; if you are in California, we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we will not discriminate against you for exercising any right above.
You can also revoke the Apps' access to your Google account at any time from your Google account permissions page. That stops future sign-ins but does not delete data already stored — email us for that.
All traffic is encrypted in transit over HTTPS. Data is encrypted at rest by our database provider. Every database query is scoped to the signed-in account on the server, so one account cannot read or modify another's records. Administrative pages — including the page where feedback messages are read — are restricted to a single named account, checked on the server on every request.
No system is perfectly secure. If we ever discover a breach affecting your personal data, we will notify affected users and any required regulator without undue delay.
The Site is not directed at children and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal data, email us and we will delete it.
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will make a reasonable effort to notify you by email before it takes effect.
Questions, requests or complaints: kryptosubs@gmail.com.