Privacy Policy
Last updated: 12 November 2026
This policy explains what personal data Geniuses.Club processes, why, and the rights you have.
1. Who is responsible
The controller is Adir Trabelsi (Geniuses Club), Rua Gonçalo Cristóvão 128, 12th floor, 4000-252 Porto, Portugal, tax number PT299350720. Contact: [email protected].
2. Browsing the site
We process technical data such as pages visited, language, device type, approximate country and IP address to run, secure and improve the site (legitimate interests). Analytics and advertising cookies are used only as allowed by your choices in the consent banner where the law requires consent.
3. Advertising
Ads are served by Google AdSense and Ezoic. With your consent where required, they may use cookies to personalise ads. Some links to shops may be converted into affiliate links by Skimlinks. Children's puzzle pages and private IQ results carry no ads and no affiliate tracking. You can change your choices at any time with the "Privacy and cookie settings" link in the footer.
4. IQ tests
When you take a test we store your answers, timing, section scores, language and device type under a random identifier, without your name or email. We use them to score your test, to build the population norms behind every result and to improve the tests (legitimate interests). Free tests are anonymous. The score is calculated automatically from your answers; it has no legal or similarly significant effect on you, and you can ask us to review it.
5. Purchases
If you buy a result we process your email address, billing country and postal address, payment status, year of birth (to confirm you are an adult) and a record of your consent. Card details go directly to Stripe; we never see them. The name you type on your certificate stays in your browser and is not sent to us. Legal bases: performing the contract and our legal obligations, including keeping tax records.
6. Accounts, newsletters and messages
If you create an account, subscribe or contact us, we process your name, email and messages to provide the service or answer you, and to send newsletters only with your consent. You can unsubscribe at any time.
7. Conversations with historical figures
Messages you write in a conversation are sent to an artificial-intelligence provider to generate the reply. Do not include sensitive personal information.
8. Who receives data
Service providers acting for us: Base44 (application hosting and database), Cloudflare (delivery and security), Stripe (payments), Google (analytics, advertising and consent management), Ezoic (advertising), Skimlinks (affiliate links), Resend (email delivery) and artificial-intelligence providers. We do not sell personal data for money. Under some United States state laws, advertising cookies can count as "selling" or "sharing"; you can opt out through the footer link.
9. International transfers
Some providers process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU-US Data Privacy Framework, the European Commission's Standard Contractual Clauses or an adequacy decision.
10. How long we keep data
Anonymous test records: kept to maintain the norms. Orders, invoices and consent records: 10 years, as Portuguese tax law requires. Account data: until you delete the account. Messages: up to 2 years. Cookies: as described in the consent banner.
11. Your rights
In the European Union and the United Kingdom you may ask for access, correction, deletion, restriction, portability and object to processing, and withdraw consent at any time. You may complain to the Portuguese data protection authority (CNPD, www.cnpd.pt) or to the authority where you live. Residents of California and other United States states may ask to know, delete and correct their data and to opt out of the sale or sharing of data and of targeted advertising, without discrimination. Write to [email protected]; we answer within one month.
12. Gifted check, child profiles and the formal-result study
(1) What we store for a gifted check: the child's first name or nickname, age group, the parent's answers, the child's puzzle answers and results, and the version and time of the parent's consent. We never store the child's surname, date of birth, photo, contact details or sex. The child's name is never sent to Stripe. (2) Who sees it: gifted check records are seen only by Geniuses Club administrators; a child profile is seen only by the signed-in parent. Assessment providers never receive families' data. (3) Legal basis: the parent's consent, which can be withdrawn at any time. (4) Formal-result study (optional): only with the parent's consent, we store the result of a formal assessment (test name, full-scale score, month of testing and the psychologist's country) with the child's earlier gifted check. It is used only in group statistics covering at least 50 children, is never shown outside Geniuses Club, is never sold or used for advertising, and is deleted if consent is withdrawn. (5) Anonymous statistics: the age-group statistics on /gifted-statistics use only aggregated results, never names. (6) How long we keep it: gifted check records until the parent asks us to delete them at [email protected]; child profiles until the parent deletes them, or automatically after 24 months without being opened and without an active subscription; formal results until consent is withdrawn. (7) Report emails are sent through our email provider, Resend. (8) The profile pages carry no advertising and no analytics.
13. Children
The site is not directed at children under 16, except the children's puzzles, which are meant for use with a parent, ask for no personal information and carry no ads or affiliate tracking. The parent gifted check is completed by the parent, who gives the child's first name or nickname only after ticking an explicit consent box; section 12 explains what we store and why. Apart from what a parent provides in this way, we do not knowingly collect personal information from children under 13. Purchases and subscriptions are for adults only. If you believe a child has given us personal data, write to us and we will delete it.
14. Security and changes
We use encryption in transit, access controls and private links that cannot be guessed. No system is perfectly secure. We may update this policy; the date at the top shows the latest version.