Privacy information

Synaptic Four, Stuttgart, Germany. Email: contact@synapticfour.com. Full postal address and proprietor details: https://synapticfour.com/en/impressum (English) or https://synapticfour.com/de/impressum (German).

We primarily process anonymous or pseudonymous session data: random session identifiers, cognitive routing features (vectors), response patterns, timestamps, reaction times, and derived statistical metrics for cognitive-science research. The assessment flow does not ask for names, email addresses, or postal addresses. If you email us, that communication is a separate processing activity from the anonymous session.

Processing is based on your consent under Article 6(1)(a) GDPR, given in the multi-step consent flow before the questionnaire. Viewing results may require separate assent where implemented.

The web application is hosted with Vercel Inc. (United States) as an edge/hosting platform. When you access the site, technically necessary data are processed (for example IP address, time, requested resource), as is usual for operating a website.

Because Vercel is headquartered in the United States, data may be transferred to a third country. Such transfers rely on EU Standard Contractual Clauses and/or other safeguards under Article 46 GDPR and, where applicable, supplementary measures. See Vercel’s documentation for current contractual terms.

When a cloud database (Supabase) is enabled for this instance, anonymous session data are stored in the region chosen for the project. The public production deployment is intended to use the EU region Frankfurt (eu-central-1) — verify in your Supabase project dashboard.

Without a configured Supabase connection, data remain only on your device (for example browser localStorage and offline precache).

Operators should periodically verify project region, backups, and replication in the Supabase dashboard and update this notice if configuration changes.

Data are stored in the browser for core functionality (session, language, offline use). We do not use advertising or marketing analytics cookies. Consent obtained after this information covers processing where consent is required; strictly necessary technical storage may be justified separately.

Anonymous session data are kept until you trigger deletion from the results page or until they are no longer needed for the stated research purpose. Without your deletion request, data may remain on the server; backup and log copies may exist for limited periods. Operators should document any maximum retention without user-initiated deletion internally and add it here once fixed.

You can remove data linked to your session via “Delete my data” on the results page; where the server endpoint is enabled, a deletion is requested and local browser data are cleared: Open results page

You may withdraw consent with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal. In practice, use the deletion control on the results page or contact contact@synapticfour.com.

We do not sell data. Processors used to operate the service may include Vercel Inc. (application hosting) and, when enabled, Supabase (managed database). Article 28 GDPR processor agreements are used where required. Data are not shared for advertising.

Subject to GDPR, you may have rights including access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21). Because sessions are designed to be anonymous or pseudonymous, linking a request to a specific record without extra information you provide (e.g. session ID) may be impossible. Requests: contact@synapticfour.com.

We do not perform solely automated decision-making within the meaning of Article 22 GDPR that produces legal effects or similarly significant effects based on your use of PCMS.

PCMS is not a medical device under the MDR, not a diagnostic instrument, and not a substitute for professional advice or care. Outputs are for research and self-understanding.

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For Synaptic Four in Stuttgart, the Baden-Württemberg Commissioner for Data Protection and Freedom of Information may be competent: https://www.baden-wuerttemberg.datenschutz.de/

Questions about processing or exercising your rights: contact@synapticfour.com.