LEGAL

Privacy Policy

Last updated 25 July 2026. Provisional — pending final legal review. Describes what the product actually does today.

Who this covers

Octet Operator is operated by MMCX LLC. This policy covers the Octet Operator iOS app, this website (octetoperator.com), and the operator-type quiz. It is the single authoritative privacy policy for Octet Operator; mmcxllc.com defers to this page. Buying a Survival Guide happens on a separate Shopify store (thomsonvisuals.com) — see Purchases below.

Accounts and sign-in

You can use the app signed in or anonymously.

• In the app: Sign in with Apple, sign in with Google, or use an anonymous account. An anonymous account has no email address attached to it. If you sign in with Apple or Google, that provider gives us the email address on your account — including the private relay address if you chose “Hide My Email” with Apple.
• On this website: sign-in is a passwordless email link, so we hold the email address you sign in with. (Apple and Google buttons appear on the sign-in page but are not enabled.)
• Enterprise SSO is not currently active.

Your account record stores a handle you choose, which sign-in method you used, when the account was created, and optionally three-letter initials and a display name. Your email address, if you have one, is held by our authentication provider and is not copied into your public profile.

What other people can see

This is the part worth reading twice.

• Leaderboards. If you post a score, your handle and initials appear to other players alongside your rank, grade, score and time.
• Credential verification. If you earn a credential, its public verify page shows the holder handle, track, issuer, award date and credential ID — so anyone with the link can confirm it. It never shows your email or real name.

Your handle and initials are the identity you present here. Choose them accordingly.

Learning and gameplay data

When you use the app or the website's learning features we store, against your account: lesson and track progress, competency data (attempts, successes and accuracy per learning objective), streaks, achievements, credential awards, and your self-reported focus area, experience level and career stage. For "Save the Show" we store your result for each scenario — the date, grade, score, time remaining, difficulty and the path of decisions you made — so scoring, streaks and leaderboards work.

Organization and employer accounts

If you join through an organization seat (an employer or team licence), that organization's owners and admins can see a cohort view of their members: readiness and competency scores, domain breakdowns, credentials, engagement, and a CSV export. If your employer bought your seat, your employer can see your progress. We also keep an audit log of organization and administrative actions which includes the IP address of the action.

Analytics in the mobile app

Usage analytics in the app are off by default. They're collected only if you explicitly turn them on, and you can delete your analytics data at any time from within the app.

If you do turn them on, we send product-usage events (screens viewed, feature events, error type) to PostHog on their EU infrastructure, identified by a pseudonymous, random per-install ID — a UUID generated on your device. That ID is not your account ID, your email, or your handle. We call it pseudonymous rather than anonymous because it persists for the life of that install.

You can turn analytics off again in Settings. "Delete My Analytics Data" stops collection and permanently severs this install's analytics identity on your device — the next install is treated as a new, unrelated one. It does not by itself erase records already held on our provider's servers; to have those erased, email us at the address below and we'll action it.

Analytics on this website and the quiz

Statistics about how the website is used (pages viewed, links clicked) are anonymous and are never tied to your name, email, or account. They're on by default, and you can turn them off below.

We record a small, fixed set of product events so we can see which parts of the funnel work: that the quiz was started, that it was completed and which operator archetype came out, that a result was viewed, that a Survival Guide link was clicked (and which edition), and that an early-access signup happened. These are tied to a random ID stored in your browser (oo.anon.id) — not to you. We do not know who you are from them.

Your quiz answers are scored in your browser. We never send the answers themselves — only the resulting archetype label. Events are sent to our own server first, which forwards them to PostHog (EU) and discards any field that isn't on a fixed allow-list, so personal data cannot end up in analytics even by mistake.

Turn website analytics off

Your choice is stored in this browser and enforced both in your browser and on our server, so nothing is recorded while you're opted out. If you clear your browser data you may need to set it again.

Email and early access

If you give us your email for early access, we store the address and where you signed up, and we pass it to Beehiiv, our email provider, to send you the invite and updates. The quiz itself does not ask for your email. The analytics event for a signup records only that a signup happened — never the address alongside it.

Company signal

When you join our waitlist or request early access, we derive the domain of your email address — the part after the @, for example company.com — to understand which organizations our audience comes from. We don't use the rest of your address for this, and this view never includes your name or full email.

Purchases

• Survival Guide. Sold on our Shopify store at thomsonvisuals.com. The whole transaction — including payment — happens there under Shopify's handling; we never see your card details. When you click a Guide link we pass campaign parameters and the random oo.anon.id in the URL so we can tell which page sent the visit.
• In the app. Purchases and subscriptions go through Apple. We never see your payment details. We store what you're entitled to — tier, billing period, product ID, expiry and Apple's transaction identifier — so paid features unlock on your devices.

Who else processes your data

• Supabase — database and authentication (accounts, progress, results).
• PostHog (EU) — product analytics.
• Beehiiv — early-access email list.
• Shopify — Survival Guide purchases (thomsonvisuals.com).
• Apple — App Store distribution, Sign in with Apple, in-app purchases.
• Cloudflare — hosting and delivery of this website.

What we never collect

We never put personal information into analytics — no name, no email address, no quiz answers, no contents of anything you type. We don't sell your data, we don't share it for advertising, and we don't buy data about you.

Your choices and rights

• Website analytics: use the button above.
• App analytics: Settings → turn analytics off, and "Delete My Analytics Data" to sever this install's analytics identity. Email us to have records already collected erased.
• Leaderboards: your handle and initials appear only if you post a score.
• Deleting your account: you can do it yourself, in the app, at Settings → Account → Delete Account. It permanently removes your account and everything listed above — progress, competency data, results and any credentials you've earned. On an older version of the app, update it, or email us at the address below and we'll do it for you.
• Access or correction of your account data: email us at the address below and we'll handle it.

Keeping and securing your data

We keep account, progress and results data for as long as your account exists, and email-list data until you unsubscribe or ask us to remove it. We do not currently operate a fixed automatic deletion schedule — deleting your account (see above) is what removes your data, and you can also ask us and we will delete it. Access to the database is restricted by row-level security so, as a rule, you can only read your own records.

Changes

If we change how we handle data we'll update this page and the date at the top.

Contact

Privacy questions and data requests: privacy@octetoperator.com, or admin@mmcxllc.com (MMCX LLC).