CareerHex

Privacy policy

Last updated: November 1, 2026

This page explains what CareerHex collects when you use it, why we collect it, and what you can do about it. CareerHex is run by Monolen, a sole proprietorship in Ontario, Canada. On this page, “we”, “us” and “our” mean Monolen.

If you are under 18, please ask a parent or guardian to read this policy with you.

The short version

  • There are no accounts and no sign-up. We never ask for your name. (If someone buys the report, Stripe’s checkout may ask for the name on their card.)
  • We save your 30 quiz answers and your scores so we can show you your report.
  • If you buy the full report, Stripe handles the payment. We never see your card number. Stripe sends us the email address you type in at checkout.
  • We do not sell your data. We do not use advertising trackers or tracking cookies.
  • We delete your results after 12 months, or sooner if you ask.
  • Anyone with your report link can see your report, so keep the link private.

What we collect

When you finish the quiz, our server saves:

  • your 30 quiz answers (each one is a number from 1 to 5)
  • six scores worked out from your answers, one for each Holland (RIASEC) type
  • your three-letter career code, like “SAE”
  • the date and time you finished
  • a random result ID, which is the long code at the end of your report link
  • whether you have bought the full report, and whether it was refunded

If you buy the full report, we also save:

  • the email address you typed into Stripe Checkout (Stripe collects it and sends it to us)
  • the Stripe Checkout session ID, which is a reference number for your payment
  • a note that you paid through Stripe

We also use your IP address (a number that identifies your internet connection) for a short time to stop abuse. See “Your IP address” below.

We do not ask for your name, age, school, home address or phone number. Only Stripe’s checkout may ask the person paying for the name on their card (see “Payments” below).

Why we collect it

  • Answers, scores and career code: to work out your result, match you with careers, and build your report.
  • Result ID: to give your report its own link, so you can come back to it.
  • Payment status and Stripe session ID: to unlock the full report after you pay, and to handle refunds.
  • Email address: to find your report if you lose the link, and to answer questions about your payment or a refund. We do not send marketing emails. If you email us, see “If you email us” below.
  • IP address: to stop people from flooding the site with fake quiz results or payment attempts.

We only use your information for these reasons. If we ever want to use it for something new, we will update this policy first.

Your report link

Your report has its own web address. It ends with /report/ and then your result ID. Anyone who has this link can open your report. There is no password. The full report shows your scores and some of the activities you said you would like most.

  • Keep your link private. Only share it with people you trust, like a family member, a friend or a counsellor.
  • The result ID is long and random, so nobody can guess it.
  • If you shared your link by mistake, email us and we will delete your result.

Your IP address

When you submit the quiz, start a payment, or come back from paying, our server checks your IP address to stop abuse. Each IP address can save up to 30 results in five minutes and about 300 in an hour, enough for whole classes on one school connection. It can also start up to 30 payments an hour, and check up to 20 payments with Stripe in five minutes. We keep your IP address only in our server’s temporary memory, usually for about an hour after your last visit, and it is cleared whenever the server restarts. We never save it in our database.

Our hosting provider, Cloudflare, may also keep basic technical logs, such as IP addresses, for a short time to run and protect its service.

To count tries across all of our servers, we may use a rate-limiting service called Upstash. It never receives your IP address itself, only a scrambled code made from it with a secret key that Upstash never sees, so Upstash can’t work out your address. That counter is deleted automatically within about two hours. Upstash may store it outside Canada.

Visitor counts

We may use a privacy-friendly visitor counter, such as Plausible or Umami, to see how many people visit each page. It works without cookies and does not build a profile of you. It never receives your report link: every report page is counted under one shared address. We will never use Google Analytics, and we do not use any advertising trackers.

Payments

Payments are handled by Stripe. You can pay by card, or with Apple Pay or Google Pay on devices that support them. You enter your payment details on Stripe’s secure checkout page, not on our site. We never see or store your card number.

Stripe emails a receipt to the address you enter at checkout. The receipt includes the link to the report, so whoever pays can open it too. After you pay, Stripe sends us the email address you entered and a payment reference number. In our Stripe account, we can also see a basic record of the payment, such as the amount, the date, the type of card and its last four digits. If Stripe asks for them at checkout, we can also see the name on the card and the country and postal code you entered.

Stripe’s own privacy policy covers the information Stripe collects: stripe.com/privacy.

If you email us

If you write to us, we get your email address, your message and anything you attach. We use them only to answer you and, for refunds and privacy requests, to keep a record of what we did. We never add you to a mailing list. Please do not send card numbers or other details we do not need.

Your email passes through and is stored by the company that provides our email service, which may store it outside Canada.

Cookies and browser storage

We do not use advertising cookies or tracking cookies.

We use up to three small pieces of browser storage (local storage), and all of them stay on your device:

  • Your answers so far, while you take the quiz, so you can close the tab and finish later on the same device. They are removed as soon as you finish the quiz. If you never finish, they are deleted the next time you open the quiz after 7 days.
  • Your result ID, saved when you finish, so you can find your result again for 7 days. After that it is deleted the next time you visit. Save your report link if you want to keep it longer.
  • Your display settings, only if you change them with the Accessibility button (text size, contrast, animations, link underlines and text spacing), so the site looks the way you chose next time. They say nothing about you or your answers, and they stay until you press Reset or clear your browser’s data.

None of them is used for anything else. On a shared computer, like one at a school or a library, press “Forget in this browser” on your result page when you are done. It removes your answers and result ID from that browser, and your link still works if you saved it. The address of your result page can also stay in the browser’s history, so clear the history too, or use a private window. You can also remove all of them by clearing your browser’s data for our site.

When you pay, Stripe’s checkout page (checkout.stripe.com) sets its own cookies to help prevent fraud. Those cookies belong to Stripe and are covered by Stripe’s privacy policy.

Because we do not use tracking cookies, there is no cookie banner on our site. There is nothing to accept or reject.

Where your information is stored

Our website runs on Cloudflare, which serves it from data centres around the world, usually one close to you, so it may be processed in the United States or other countries. Our database is hosted by Supabase in the Canada (Central) region. Stripe may process payment information in Canada, the United States and other countries. If we use Upstash for rate limiting, its scrambled counters may be stored outside Canada.

This means your information may be stored or processed outside Canada. When it is, the laws of that country apply to it, and courts, police or government agencies there may be able to access it.

How long we keep it

We keep your quiz results for 12 months after you take the quiz. Then we delete them. After that, your report link stops working, so save or print your report if you want to keep it.

You can ask us to delete your results sooner at any time. See “Seeing, fixing or deleting your information” below.

Payment records stay in our Stripe account, including the email address entered at checkout, for at least six years, as Canada’s tax rules require. This is true even after we delete your results. Stripe also keeps its own records of payments for as long as the law requires.

We keep emails you send us only as long as we need them to answer you and to keep records of refunds and privacy requests.

How we keep it safe

  • Our site uses HTTPS, so information sent between your device and our server is encrypted.
  • Only our server can reach the database. Your browser never connects to it directly.
  • We never handle card numbers. Stripe does.
  • We collect as little as we can. No names, no accounts, no passwords.

No website is perfectly secure, but we take reasonable steps to protect your information. If a data breach ever puts you at real risk of harm, we will report it to the Privacy Commissioner of Canada as the law requires, and we will post a notice on this site.

Who we share it with

We do not sell, rent or trade your information. We do not share it with anyone for marketing or advertising.

We only share it with the services that run CareerHex, and only so they can do that job:

  • Cloudflare, which hosts the website
  • Supabase, which hosts our database
  • Stripe, which handles payments
  • Upstash, which counts tries to stop abuse, using only a scrambled version of your IP address
  • our email provider, which delivers and stores the emails you send us
  • a privacy-friendly visitor counter, if we start using one

We may also share information if the law requires it, for example because of a court order.

Young people

CareerHex is for people of any age, including teenagers. If you are under 18, please have a parent or guardian read this policy with you. If you are under 13, please use CareerHex together with a parent or guardian. We do not ask for your name or your age.

Adults pay for themselves. If you are under 18 (19 in some provinces), you need a parent or guardian’s permission to buy the report, and you must use a card or account you’re allowed to use. Our terms of use explain this.

Seeing, fixing or deleting your information

You have the right to:

  • ask what information we hold about you
  • ask us to correct it
  • ask us to delete it

To make a request, email OWNER_EMAIL and include your result ID. Your result ID is the code at the end of your report link, after /report/. If you bought the full report and lost your link, send us the email address you used at checkout instead, and we will look it up.

Because we never ask who you are, we can only find your result with your result ID or your checkout email. Anyone who has your result ID can make a request about that result, which is one more reason to keep your link private.

We will reply within 30 days.

About corrections: your quiz answers are a record of how you answered on that day, so we do not edit them. If your interests have changed, you can take the free quiz again to get a new result, and ask us to delete the old one.

Who is responsible for your privacy

Monolen’s privacy officer is responsible for privacy at CareerHex and for following Canada’s private-sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA). If you have a question or concern about your privacy, email the privacy officer at OWNER_EMAIL.

Making a complaint

Please contact us first so we can try to fix the problem. You also have the right to complain to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If we make a big change, such as collecting a new kind of information, we will explain it on this page before the change takes effect.

See also our terms of use, refund policy and contact page.