This page explains what data we collect, why, how long we keep it and what you can ask for. It covers sorafate.com and the Lume test at lume.sorafate.com.
SoraFate Publisher is SoraFate's app connected to TikTok. It is used only by SoraFate, to publish its own videos on its own TikTok account (@sorafate7). It uses only the permissions TikTok grants for this: signing in to our account and publishing videos to it. It does not collect data about other people, does not read messages and does not access any account other than ours. The access token TikTok issues to it stays on our server and is never shared.
Martina Clemenzi, Göteborg (Sweden).
Contact: [email protected]
There is no data protection officer: for any question, write to the address above.
When you open a page we record the date, the requested path and the IP address. This keeps the site running and lets us notice unauthorised access attempts.
Legal basis: legitimate interest in security.
Retention: 30 days, then automatic deletion.
We use no analytics and no advertising, and there are no tracking cookies. That is why you will not see a cookie banner: we use none that would require one.
| Data | Why | How long |
|---|---|---|
| A random session code | So you can resume where you left off | 30 days |
| Your name, if you enter one | It appears in your portrait. Optional | 30 days |
| Your answers to the 41 questions | To calculate the profile | 30 days |
| The calculated portrait | It is what you purchased | 30 days from the link |
| Licence key and purchase identifier | To verify payment | 30 days |
Lume describes a style: how you read events, how you react to setbacks, what you put first. It does not measure wellbeing and is not a clinical or psychological instrument.
The questions were written to stay out of that territory: they do not ask about mood, sleep or how you are feeling. For this reason we do not process health data.
The answers are still personal information, which is why they are deleted after thirty days.
Contract: you asked for a portrait, and calculating it requires your answers. Without them the service cannot exist.
Answers and name are deleted automatically, every night. What remains is one statistical row that cannot be traced to anyone: the month, the six axis scores and how many questions were completed, with no session code, no precise date and no individual answers.
The sale happens on Gumroad, which is the seller towards you and handles payment, receipt and taxes. We do not receive your card details and we do not store your email address.
For the data Gumroad processes, their own privacy policy applies.
| Who | What they see | Why |
|---|---|---|
| Cloudflare | The IP address of visitors | Protects and routes traffic to the site |
| Gumroad | Your purchase data | Sells on its own account and collects payment |
We do not sell data, do not pass it on for advertising and do not build commercial profiles.
On a server in Sweden, inside the European Union. Cloudflare is based in the United States and operates under the European data protection framework.
At any time you can ask to:
Write to [email protected]. We answer within one month. For the test we need the link to your portrait, because it is the only way we can find your session: we do not know who you are.
If you believe your data is handled badly, you can contact the Swedish data protection authority (IMY, imy.se) or the one in the country where you live.
The server is not reachable from outside except through the public pages. Credentials are kept in a protected file, not in the code. Backups are encrypted.
The date at the top changes with the text. Changes apply from when they appear here.