Privacy Policy

Summary

MentalCraft is designed with privacy as a core principle. We do not require an account and we do not collect names, emails, or payment details. Assessment result history and anonymous product analytics are optional. You can use the screening tools without enabling either. Paid checkout is separate from assessment answers.

What We Collect

Conversation Brief Drafts

Text you enter in the conversation-brief builder stays in the current browser session. MentalCraft does not send or store that draft. Copying or downloading the brief happens only when you choose that action, and you control the resulting text file.

Assessment Score History You Choose to Save

New saved history stores the assessment type, score, severity level, and submission time with a random browser-generated identifier. The current flow does not add item answers to new history. If you do not choose this option, the result is calculated for the current session and is not written to result history. Records saved before this privacy-minimized format may contain item answers from the earlier format and can be removed with the in-product delete control.

Optional Anonymous Product Analytics

If you opt in, Google Analytics 4 receives only allowlisted categorical product events, and Microsoft Clarity receives masked interaction diagnostics. MentalCraft does not send either provider assessment answers, scores, severity labels, free text, payment references, a user ID, or a raw referrer. Advertising storage and signals are disabled, and Clarity is masked before its loader starts. The providers may process technical request data and set analytics storage under their own policies. If you select essential-only, neither analytics loader starts.

Checkout Attribution

If you arrive with allowlisted UTM campaign labels, MentalCraft may keep those labels in session storage and append them to the direct Stripe checkout link. Assessment answers, scores, severity, free text, browser analytics IDs, and payment details are never added to checkout attribution.

Server Logs

Our hosting provider (Cloudflare) may collect standard server logs including IP addresses for security and performance purposes. We do not access or process these logs for analytics or identification purposes.

Advertising

Google AdSense display ads may appear after assessment results. They are not part of the first-screen Take a Free Self-Check action. Publisher id pub-9323379473925398. Google may set cookies to serve ads. Ads are display-only after you see a score. Assessment answers and scores are not sold. Optional analytics stay consent-gated.

How We Use Optional Data

Optional anonymous data may be used in aggregate to:

• Improve the quality and accuracy of our screening tools
• Understand which pages and assessment flows need improvement
• Generate anonymous aggregate statistics only when they cannot identify a person

We will never attempt to identify individual users from aggregate data.

Annual Index and Aggregate Reporting

MentalCraft may publish aggregate reports about AI use and mental health, including the planned World AI & Mental Health Index. Ordinary screening does not create individual public claims. Optional analytics used for aggregate reporting must follow this privacy notice, consent where required, and data minimization. Saved score history is for the user's own trend view and is not used for the annual index without separate consent.

GDPR-Oriented Controls

Health-related screening answers can be sensitive. MentalCraft therefore uses data minimization, optional consent controls, no account profiles, and display ads only after results. For users in the European Economic Area, optional saved result history and optional analytics are based on your choice. You can withdraw future participation by selecting essential-only analytics and by not saving result history.

Data Storage

Optional score history is stored on Cloudflare's global infrastructure. Your anonymous respondent ID and analytics consent choice are stored in your browser's local storage. Google and Microsoft may set analytics storage only after opt-in. Clearing browser data removes local choices but does not itself delete server history; use the in-product delete control first if you want the matching history removed.

Third Parties

We do not sell your data. Cloudflare provides hosting infrastructure and security services. After analytics opt-in, Google provides aggregate product analytics and Microsoft provides masked interaction diagnostics. Stripe directly processes paid checkout. Google AdSense may serve display ads after results and may set ad cookies. MentalCraft does not transfer your assessment answers, score, severity, or authored private content to any of these providers.

Children

MentalCraft is intended for adults (18+). We do not knowingly collect data from children under 13. If you believe a child has used our services, please contact us.

Your Rights

You may request access, deletion, restriction, or portability where applicable. The result screen provides a self-service control that deletes all history under the current anonymous browser ID and turns off future history saving. Because we do not collect names, emails, or accounts, we may need that browser ID to locate history for any separate request.

Contact

If you have questions about this privacy policy, contact us at privacy@mentalcraft.org.