Conscious

Privacy notice

This notice covers consciousgrc.com: the public pages and the free assessment on them. Each statement describes what the site does today and can be checked against the behaviour of the page in front of you.

Last reviewed 17 October 2026.

In brief

The free assessment

The assessment loads a question set into your browser and scores your answers there. While you are answering, the only copy is in your own browser's storage: your answers and profile under conscious.assess.v1, so that a refresh does not lose them; the record under conscious.record when you open or print it; and a copy of what was sent under conscious.lastResult when you send it. A work address typed on the home page is handed to the assessment through the browser's session storage and is not placed in the page address. None of this leaves your device, and clearing your browser data removes it.

When you press Email the record, and only then, the following is sent to Conscious and stored:

The record is not stored as a document. When the link in the email is opened, the record is drawn again from the fields above. The link works for 30 days.

The purpose is to send you the record and to respond to what is plainly an enquiry about Conscious. The basis is your own request: you asked for it, and you can ask for it to be erased at any time.

Where it is held, and who else sees it

WhereWhatNote
This site's own serverEverything listed aboveA virtual server rented from Hostinger. The address block is registered in India.
ResendYour email address and the message sent to it; a notification of the request to Conscious, with your name, address, organisation, the assessment and the scoreAn email delivery service, used only to deliver these messages.

If you are in the European Economic Area or the United Kingdom, there is no adequacy decision for India, so a transfer there needs a safeguard rather than nothing. If that affects whether you want to send a record, do not send one: the assessment and its result work without it, and you can save the record as a PDF from your own browser instead.

No advertiser, data broker or analytics provider receives any of it. There is no such party on this site to receive it.

A record is deleted automatically 24 months after it is received, and sooner if you ask for it to be erased.

Server logs

The web server keeps an ordinary access log: the requesting IP address, the time, the page requested, the response status, the referring page and the user-agent string. This happens for every visitor, including one who never fills anything in, and it is how the service is operated and faults are found.

What this site does not do

Your rights

Wherever you are, and whichever regime applies to you, you can ask for a copy of what is held about you, ask for it to be corrected, and ask for it to be erased. Where the basis is your own request, you can withdraw it and the record goes.

Depending on where you are, you may also have the right to object to a use, to ask for the data in a portable form, and to complain to your own regulator rather than to Conscious. A complaint to a regulator does not require asking here first.

Requests and complaints

A request to erase a record is acted on without asking why it was made.

Changes

This notice describes the site as it behaves today. Where the site's behaviour changes, this page changes in the same release, and the review date at the top moves. There is no separate archive: the page is the current statement.