Last updated October 7, 2026.
This page says, in plain words, what we collect when you use Constitution Map, why, who else touches it, how long we keep it, and how to have it deleted. It is also our Consumer Health Data Privacy Policy under Washington's My Health My Data Act, and it covers the same ground for Nevada's consumer health data law.
The short version. Your questionnaire answers stay in your browser. We never sell anything about you, and we never use it for advertising. The things that could say something about your health (the body type your answers point to, and anything in a plan you buy) only leave your browser when you ask us to send them: to you, or, if you came through a partner clinic's link, to that clinic when you tick the box asking us to. Beyond that clinic, we pass them on only to the services that host this site, send the email, or take the payment.
The questionnaire asks about how your body feels, and the result is a body type worked out from those answers. We treat both the answers and the body type as consumer health data. So is the 28-day plan, because it is built around that body type, and the scores you write on its sheet.
While you browse. Two kinds of record. First, a plain page count for every visit: which kind of page was opened, the site's language, and whether the visit looks like a bot. It has no number for you and nothing that identifies you. Second, a record of how the site is used: which pages are opened, how far people get in the questionnaire, which links and buttons are pressed, the site that sent you, whether you are on a phone or a computer, and your country and city as worked out by our hosting provider from the connection. Each browser tab gets a random number for this, replaced each day and gone when the tab closes. We use both only to see whether the site works for the people using it. Neither ever includes your answers. Both are kept for three months. Visitors in the European Union are asked first, and the second kind is not recorded unless they agree.
To stop abuse. When codes are sent, results or plans are opened, clinic passes are claimed, results are sent to a clinic or checkouts are started, we keep short-lived counters with a one-way, keyed fingerprint of the connection a request came from, never the connection itself. They expire within a day.
Your answers. They stay in your browser and your result is worked out there. We do not receive them. The Simplified and Traditional Chinese versions keep the last result in this browser’s local storage so you can return after closing the page. On a shared computer another person can see it; clear this site’s data in your browser settings to remove it. Other language versions keep their current tab-only storage.
If you ask us to email your report. We keep your email address and the date you confirmed it, until you ask us to delete them. The report is made in your browser and passes through our server once so it can be emailed to you; our server does not store it. Chinese report emails for an identified type include a link that reopens that type’s description and conditioning advice in Chinese. Its fragment contains only the type code and result date, with no answers or scores; the fragment is not sent to our server. Reports with no identified type retain general lifestyle upkeep advice without a type link.
If you are a practitioner and leave your email. We keep the address, the city you gave, and the date, until you ask us to delete them.
If you pay to see your result. Payment is taken by Creem, the same way as for the plan below: Creem collects your name, email address, billing address and card details under its own privacy policy, and we never see your card. On our side we keep the order number and how many times your result has been opened. Your answers and your body type are not in that record, and we do not send them to Creem. The record is kept until you ask us to delete it.
If you came through a clinic's link. The clinic's link gives you a free pass for your result. We keep a small record for it: which clinic, the date, how many times your result has been opened with it, and whether you asked us to send your result to the clinic. Your answers and your body type are not in that record. We also count how many passes each clinic has given out in a month. The record is kept until you ask us to delete it.
If you ask us to send your result to your clinic. Only if you came through a partner clinic's link, and only when you tick the box naming that clinic, which is never ticked for you. We email that clinic the report on your result page (your body type, your scores for all nine types and the suggestions), with the name and the contact you type next to the box. The clinic's address comes from our own records of the clinics we work with; you never type it. We ask for this separately from anything else, and we keep a note that you asked: the date, the clinic and a one-way fingerprint of your pass, not the report, your name or your contact. The clinic is a separate practice, not us, and keeps what it receives under its own privacy practices; email is not encrypted. You can withdraw this for the future by writing to us; we cannot recall a copy the clinic already has.
If you buy the 28-day plan. Payment is taken by Creem, which acts as the merchant of record: Creem collects your name, email address, billing address and card details under its own privacy policy, and we never see your card. Creem tells us whether the payment went through, and we use the email address on the order to send you a link to your plan; we do not store the other order details it shows us. On our side we keep a small record for your order: the order number, how many times the plan has been opened, the date it starts from, and whether the email went out. Your body type and city are not in that record. They are written into the link to your plan, so that it opens on any of your devices, and into the email that carries that link. The order record is kept until you ask us to delete it; deleting it also stops your link from working.
Copies of the emails we send. Every email we send you (the six-digit code, your report, the link to your plan), and every report we send to a clinic for you, stays in our mailbox's sent folder, so we can help if you write to us about it: resend a report, find your plan, sort out a refund. That means your email address is kept there too, along with the report you asked for (the result and advice shown on that page), including the type code and result date in Chinese reopening links, or, for the plan link, your body type and city; a copy sent to a clinic also holds the name and contact you gave. We keep them until you ask us to delete them.
That is the full list. We do not sell consumer health data, we share it only as listed here, and we do not use it for advertising.
You can ask us to show you what we hold about you, to delete it, or to stop using it, and you can withdraw any consent you gave. Write to [email protected] from the address involved. We will answer within 45 days. If we turn a request down, you can appeal by replying with the word "appeal", and we will answer the appeal within 45 days and explain why. If you are still not satisfied, you can contact your state's attorney general; in Washington that is the Attorney General's Office at https://www.atg.wa.gov/file-complaint.
Deleting your email address from our list does not reach Creem's payment records, which Creem keeps under its own obligations; we will tell you how to reach them if you ask.
The site and the plan are meant for adults. We do not knowingly collect anything from anyone under 18.
We will change the date at the top, and if a change affects how consumer health data is collected or shared, we will say so on this page before it applies.
May we record how you use this site? We log which pages you open, how far you get in the questionnaire and which buttons you press, along with your country and city. Never your answers. Saying no changes nothing else on the site.
You can switch this off at any time with the link at the bottom of every page. What we record