Privacy Policy
What Sapiens Bench stores about you, why, and how to get rid of it.
The short version
Sapiens Bench stores your task results so it can show you your own history and trends. That is the whole purpose. There are no adverts, no analytics or tracking scripts, no third-party embeds, and nothing is sold or shared for marketing. Fonts and scripts are served from this domain, so if you are not signed in, loading a page tells no other company that you were here. The one exception is described under signing in, below.
Who is responsible
This site is run by an individual, not a company. For the purposes of the UK and EU General Data Protection Regulation, that individual is the data controller for everything described here. Data-protection questions and requests go to privacy@sapiens-bench.athecoder.com.
What is stored
When you play without an account
The first time you complete a task, your browser is given a cookie called cb_sid containing a randomly generated identifier. It is not derived from anything about you or your device — it is a random number whose only job is to let the site recognise the same browser next time so your history accumulates instead of starting over. It is httpOnly (no script on the page can read it) and lasts one year.
Alongside it, each completed run is stored as a row containing:
- which task you played, and when
- how long the run took
- the result itself — per-trial reaction times, hits, misses, false starts, and the summary scores computed from them
That identifier is the key to that history. Anyone with the cookie sees the results behind it, and nobody without it does; clearing your cookies makes the past runs unreachable, including to you.
When you sign in with Google
Signing in is optional — everything works without it. If you do sign in, Google tells this site your account’s stable identifier, your name, your email address and your profile picture.
Only the identifier is written to the database, as the owner of your rows. Your name, email address and picture are kept in the signed session cookie in your own browser, purely so the navigation bar can greet you; they are never stored server-side. Signing in also moves anything that browser had already played anonymously onto your account, so the earlier runs are not lost.
One consequence worth stating plainly: the profile picture shown in the navigation bar is loaded from Google’s servers rather than copied here, so while you are signed in, your browser requests that image — and therefore reveals your IP address to Google — on each page you visit. Nothing else on the page does this, and it stops entirely when you sign out.
Trackers
If you use the daily trackers, the site stores the labels you chose (for example medication, sleep, caffeine) and the values you log against them. Some of that is information about your health, which the GDPR treats as a special category. It is stored only because you typed it in, it is used only to draw your own charts, and it is never used for anything else. You can remove a tracker, and its entries go with it.
Shared results
When a result page renders, the site mints a link of the form /s/<token> for it, so that sharing is one click away if you want it. The token is a long unguessable string, the page is excluded from search engines, and no account details appear on it. Nothing is published by the link existing — but anyone you send the link to, and anyone they forward it to, can see that one result.
Server logs
Like any web server, the machine hosting this site records requests, which includes IP addresses. These logs exist to keep the service running and to spot abuse, are not joined to your task results, and are not used to build a profile of you.
Cookies
There are no advertising or analytics cookies here, which is why you are not being asked to dismiss a consent banner. The only cookies set are the ones the site cannot work without:
cb_sid— the anonymous play identifier described above. One year.- the sign-in session cookie and its accompanying CSRF token, set only if you sign in with Google, and cleared when you sign out.
Why it is allowed to be stored
- Your task results and account identifier — Article 6(1)(b): storing them is the service you asked for. Without them there is no history to show.
- Tracker entries touching on health — Article 9(2)(a): your explicit consent, given by entering them. Withdraw it at any time by deleting the tracker or writing to the address above.
- Server logs — Article 6(1)(f): the legitimate interest in keeping the site available and secure.
Who else touches it
- Google— only if you choose to sign in, and only for the sign-in itself. Google’s own privacy policy governs what happens on their side of that. If you never sign in, no request from this site reaches Google at all.
- The database host (Neon) and the server host— they hold the data on the operator’s behalf, under contract, and may not use it for their own purposes.
Data is not sold, rented, or handed to advertisers or data brokers. It would only ever be disclosed otherwise if the law required it.
How long it is kept
Results and tracker entries are kept until you delete them or ask for them to be deleted — the point of the site is the long view, so nothing expires on a timer. An anonymous browser identifier that has gone a year without a visit stops working when its cookie expires; the rows behind it become unreachable and can be cleared on request. Server logs are kept only as long as they are useful for operations.
Your rights
You can ask for a copy of what is stored about you, have it corrected, have it erased, restrict or object to its use, receive it in a portable format, or withdraw consent for anything based on consent. Exercising any of these costs nothing and does not require an account.
Two of them need no request at all: any single run can be deleted from your history, and a tracker can be removed along with everything logged against it. For anything broader — including “delete all of it” — write to privacy@sapiens-bench.athecoder.com. If you are signed in, say so from your account’s email address; if you play anonymously, the identifier in your cb_sid cookie is the only thing that ties the rows to you, so a request will need it.
If you think your data has been handled improperly, you are entitled to complain to your national data-protection supervisory authority.
Children
This site is not directed at children and accounts are not knowingly created for them. If you believe a child’s data has ended up here, write to the address above and it will be removed.
Not a medical service
The tasks are educational instruments for self-tracking. They are not medical or diagnostic devices, the scores are not a diagnosis of ADHD or anything else, and no clinical decision should rest on them. See the terms of use.
Changes
If this policy changes, the date at the bottom of the page changes with it. Material changes to what is collected or why will be flagged in the app rather than made quietly.
Last updated 6 August 2026.