Privacy Policy

The short version

• You can take the Activity Fallacy Test and see your result without providing an email address or creating an account.
• If you ask for your result by email, we use your address to send it. That alone does not sign you up for updates.
• If you choose to subscribe and confirm, we keep your email and result category so future updates can fit your result. We do not keep individual answers in your subscriber profile; temporary result-email records follow the seven-day schedule below.
• Stripe handles payments. Our website and delivery application do not receive or store your full card number.
• Analytics cookies are optional. On pages with analytics enabled, limited usage signals are sent to Google Analytics without analytics cookies before you choose and if you decline; accepting enables cookie-based measurement. We do not sell your information or share it for cross-context behavioral advertising.
• Write to info@causalcubed.com to request access to, correction of or deletion of information we hold.

The full policy follows.

1. Who we are and what this policy covers

Causa Strategy Group LLC (“Causa,” “we,” “us” or “our”) operates causalcubed.com, home of the Causal Cubed™ framework, and the related pages used to send test results and deliver purchased files, including files.causalcubed.com.

We are based in New Jersey, USA. Our mailing address is 971 US Highway 202N, Ste N, Branchburg, NJ 08876, USA. For privacy questions or requests, contact info@causalcubed.com.

This policy explains how we collect, use, disclose and retain personal information when you browse our website, take the Activity Fallacy Test, request your results by email, subscribe to updates, purchase digital products or contact us. Our current commercial focus is the United States. Any rights you have under applicable law remain available regardless of that focus.

This policy does not replace our Terms & Conditions, and our Refund Policy. You do not need to create a Causal Cubed™ account to take the test or buy a product. Reading this policy or visiting the website is not, by itself, consent to analytics cookies or marketing emails.

2. Information we collect

Information you provide. We collect your email address when you request an emailed result, subscribe to updates, make a purchase or contact us. We also receive information you choose to include in a support request, such as your name, order reference and description of the issue. Please do not send passwords, full payment-card details or sensitive personal information in support messages or test responses.

Test answers and results. The test uses your selected answers to produce a result, an answer recap and a recommended next step. You can view your result without supplying an email address. If you request an emailed result, we receive your email address and the selected answers needed to generate that message. The result email includes the recommended resources or products associated with your result. Separately, we measure test progress and interactions as described in section 4. When you allow analytics cookies, we may also measure selected answer options, result categories and recommendation identifiers using browser identifiers. Without that permission, we omit those answer, result and recommendation-code fields. A clicked product or recommendation link may still indicate which resource interested you. Declining marketing updates does not prevent you from receiving a result you requested.

Purchase and delivery information. Stripe collects the information required by its checkout, which may include your email address, name, billing address, tax information and payment details. We receive or can access the order information needed for fulfillment, accounting and support, such as purchased items, price, currency, transaction identifiers, payment/refund status and customer contact or billing information. Our website and file-delivery application do not collect or store full card numbers or card security codes. Stripe handles payment details directly; limited payment-method information may be available to us through Stripe.

Download records. When you press a download button, we record the order and file identifiers, product name, request time and server-observed delivery status. Opening the access page is not treated as a completed download. These records cannot establish that you saved, opened or read a file, or identify the person using a forwarded private link.

Subscription choices. If you confirm a subscription, we keep your email address, the result category from the test you took when subscribing (not your individual answers), consent wording and version, request and confirmation dates, provider contact identifier and, when recorded, withdrawal status/date. A newsletter subscription is optional and requires the additional confirmation described below.

Technical and usage information. Our hosting and security providers process connection information such as IP address, request time, browser/device information and error or security signals to deliver and protect the service. For result-email rate limiting, our application stores a keyed representation of the IP address rather than the raw IP address. These representations and browser identifiers can still be personal information; they are not necessarily anonymous.

On pages with analytics enabled, Google Analytics receives limited usage signals even without analytics-cookie permission, including page and interaction events, consent state, time, referrer origin and technical browser/device information. Network requests expose connection information such as an IP address; Google states that GA4 does not store or log IP addresses. With your analytics-cookie permission, measurement may also use browser identifiers, approved campaign information, selected test answers and results, and consented purchase attribution. These signals should not be assumed to be completely anonymous. We do not intentionally send your name, email address, payment-card details, private download links or free-text support messages as analytics event parameters.

3. How we use information

We use information to:

• Operate, secure and troubleshoot the website, test and download service.
• Calculate and display test results, show relevant recommendations and send a result you request.
• Process purchases, deliver products, handle support and refund requests, and maintain required business records.
• Send optional articles, resources, product information and updates to confirmed subscribers, tailored to their result category.
• Understand website and product performance through limited usage signals and, with analytics-cookie permission, more detailed test measurement and campaign-related purchase attribution.
• Record and respect privacy choices, prevent abuse and investigate delivery issues.
• Comply with applicable law and establish, exercise or defend legal claims.

The test provides informational feedback and product recommendations. It is not used to make eligibility decisions about employment, credit, housing, insurance or other similarly significant matters.

4. Cookies, browser storage and analytics

We use browser storage to remember your analytics-cookie choice. That choice is currently treated as valid for 180 days, after which we may ask again. Browser storage may remain on your device until overwritten or cleared; its continued presence does not make an expired consent valid.

We use Google Tag Manager and Google Analytics with advanced Consent Mode on the home page and public article pages. The tags load with analytics-cookie storage denied by default. Before you choose, and when you select No cookies, Google Analytics receives limited measurements without reading or writing its analytics cookies. These may include page and section views, product views, test starts and completion, question progress, recommendation and checkout clicks, result-email request events, and article interactions. We omit selected answer options, result categories and recommendation-code fields, and do not store campaign attribution in browser storage in that state. We do not send a persistent user ID of our own. Google may use these signals for statistical modeling; they are not a complete individual browsing history.

Choosing Accept and continue permits analytics cookies and the more detailed measurement described in section 2. This helps us evaluate and improve the site’s content, tools and recommendations; it does not personalize your test result based on browsing history. Your test result and recommendations are determined by your answers, regardless of your cookie choice.

You can change your choice through Cookie settings wherever analytics is enabled. Selecting No cookies after previously accepting removes our site’s accessible Google Analytics cookies and returns future measurement to limited, cookieless signals. It does not retract signals already sent. Continuing to browse does not count as acceptance. Either choice leaves the test, articles, purchases and downloads available and does not subscribe you to emails. Analytics is excluded from our legal, purchase-confirmation and file-delivery/subscription pages.

Analytics may use cookies and similar identifiers, and temporary browser storage may remember campaign information for a browsing session. Our checkout-attribution process can associate a consented visit with a purchase using a random reference sent to Stripe and limited transaction information returned to our system. This association does not require sending your email address or full payment information to Google. Users who decline analytics cookies or block measurement may not appear in our analytics purchase reports, and limited signals may not appear in reports unless Google’s modeling requirements are met.

You can also control cookies through your browser. The checkout operated by Stripe has its own cookies, security measures and privacy choices; our website’s analytics choice does not control every function on Stripe’s checkout.

We do not currently operate third-party advertising placements or remarketing campaigns, or sell personal information or share it for cross-context behavioral advertising. We do not currently change website behavior solely in response to the legacy Do Not Track browser signal. Global Privacy Control is a separate opt-out signal; our current no-sale/no-cross-context-advertising practice applies whether or not that signal is enabled. You can reject analytics cookies through our cookie controls; the limited signals described above continue without those cookies.

5. Emails and your choices

We use Resend to deliver emails, including purchased-file access and test results you request. These messages are sent from hello@mail.causalcubed.com. Replies and support requests are directed to info@causalcubed.com.

When requesting a test result, you can separately choose to receive future articles, resources and updates. The checkbox is optional and unchecked by default. If selected, the result email includes a subscription-confirmation link; you must open the confirmation page and confirm before we add you as a subscribed contact. Buying a product or requesting a result alone does not subscribe you to future marketing emails.

Result emails and marketing emails include our postal address and a way to stop future marketing messages. You can reply to a result email or use its unsubscribe request link; marketing campaigns include their own unsubscribe link. You may also contact us to withdraw your subscription. We retain limited suppression information as necessary to avoid sending further marketing to an address that opted out. Unsubscribing from marketing does not prevent essential messages about a purchase you made or a new result you explicitly request.

Email processing includes recipient addresses, message content, timestamps, provider message identifiers and delivery/failure information. Open or click measurement, if enabled for a message or campaign, may also provide engagement information through tracking technologies. Email images can be blocked in your mail application; some clients proxy or preload them, so engagement signals are not reliable proof that a person read a message.

6. Who receives information

We disclose information as needed to providers that help operate the service:

Provider	Role and information involved
Cloudflare	Hosting, network/security services, application processing, databases and private asset storage. Processes website requests and the operational records necessary for results, consent and file delivery.
Stripe	Checkout, payments, payment security, transaction records and refunds. Processes payment and purchase information and provides fulfillment-related transaction information to us.
Resend	Sends requested and purchase-related emails, manages confirmed marketing contacts, their result category and suppression choices, and processes message content and delivery information.
Google Analytics / Google Tag Manager	Permitted analytics and tag administration. Receives limited cookieless usage signals on pages with analytics enabled, and additional cookie-based measurement when you allow analytics cookies, as described in sections 2 and 4.
Email, accounting and professional advisers	Receive relevant correspondence or transaction information where needed to provide support, maintain business records or advise us. Access is limited to the relevant purpose.

These providers may also process certain information for their own legal, security or other independent purposes. See their notices: Cloudflare, Stripe, Resend and Google.

We may also disclose information where legally required, to protect the service and the rights or safety of others, or in connection with a genuine merger, financing, acquisition or transfer of the relevant business. We do not provide a public user profile, public discussion forum or public directory of test results.

7. How long we retain information

We apply the following ordinary retention schedule. Automated removal occurs through periodic cleanup, and provider deletion processes may operate on their own schedules. A longer period may apply to specific information where a legal obligation, documented dispute, fraud/security investigation or preservation requirement makes it necessary. Such exceptions are limited to the information and purpose concerned.

Category	Ordinary retention
Result-email requests and answer/message payloads in our application database	7 days from the request, followed by scheduled removal. This does not remove copies already delivered to a mailbox or information separately collected with analytics permission.
Unconfirmed newsletter requests	7 days from the request, followed by scheduled removal.
Active subscriber contact information and result category	For the duration of the subscription. The result category is removed when withdrawal is recorded; provider-originated changes are reconciled through periodic checks.
Evidence of confirmed marketing consent	During the subscription and 3 years after withdrawal is recorded.
Minimal marketing suppression information	As long as reasonably necessary to respect the opt-out and prevent unwanted resubscription or re-import. Not used to send marketing.
Purchase-email payloads in our delivery application	Normally 30 days from creation for completed or closed delivery jobs. Active delivery work and documented preservation exceptions may require more time.
Operational order, delivery and download records	Normally 24 months from the order’s creation. If necessary to finish an active delivery or honor an unexpired grant, limited records remain until that activity ends.
Customer-support correspondence	Normally 24 months after the issue is closed.
Core accounting records of purchases, invoices, taxes and refunds	Normally 7 years after the end of the relevant financial year, with any different period required for the particular record by applicable law. This does not extend every technical record or test answer to seven years.
Temporary checkout-attribution records in our application	Normally removed within approximately 48 hours of creation. Purchase-analytics processing records are removed after 30 days.
GA4 user/event data covered by its retention setting	14 months, without automatically resetting user-data retention on new activity. Google removes eligible data on its deletion schedule. Standard aggregated reports are not governed by that setting and may remain longer.
Routine technical/security logs under our control	Normally no more than 30 days, often less depending on the provider and plan. Specific incident evidence may be preserved for the investigation or related legal requirements.

At the time of this policy, Resend states that email content and logs on its Free, Pro and Scale plans are retained for 30 days. That period does not mean that active marketing contact lists are erased every 30 days. Other providers may retain information they independently control, including payment or security records, under their own legal obligations and retention policies.

Deleting an active application record does not necessarily remove every backup copy immediately. Residual copies may persist until the provider’s backup cycle expires. We limit their use to recovery, security or legal needs and reapply applicable deletion restrictions if data is restored. Files or emails that you save, or that are held by your email provider, are outside our control.

Expiry of a private download link limits access through that link. It is separate from the retention of purchase records and does not determine your refund rights.

8. Privacy requests and US state rights

You can contact info@causalcubed.com to request access to, correction of or deletion of information we hold about you, or to ask about our privacy practices. Please identify the email address used with the service and, for a purchase inquiry, an order reference if available. Do not send a full card number or an identity document unless we explain why a particular verification step is necessary.

Depending on your state of residence, the nature of the information and whether the relevant law applies to our business, you may have rights to confirm processing, obtain access or a portable copy, correct inaccuracies, delete information, opt out of sale, certain sharing, targeted advertising or certain profiling, and appeal a denial. An authorized agent may submit a request where applicable law allows it, subject to appropriate authorization and verification. We will not discriminate against you for exercising applicable privacy rights.

We take reasonable steps to verify a request and protect other people’s information. We respond within the period required by applicable law and explain any permitted extension or applicable exception. We may retain information required for accounting, legal obligations, disputes, fraud prevention or honoring an opt-out. Some requests cannot be fulfilled without affecting a service that needs the information concerned.

To appeal a privacy-request decision, reply to our response or email us with Privacy appeal in the subject line. We will review the decision and explain the outcome and any further rights available under applicable law, including contacting the relevant state authority. You can also contact your state attorney general or other competent authority about a privacy concern.

We do not use sensitive personal information to infer sensitive characteristics, and we do not sell or share personal information for cross-context behavioral advertising. Any such future change would require an updated notice and the choices required by applicable law before the changed processing begins.

9. Location and security of processing

We are based in the United States and use providers whose systems and personnel may operate in the United States and other countries. Cloudflare’s network in particular may process requests through infrastructure in multiple locations. This policy does not promise that all information stays in a single state or country.

We use reasonable technical and organizational safeguards appropriate to the information and service, including encrypted connections, restricted administrative access and signed, time-limited download links. Please keep private links confidential: anyone who receives a valid link may be able to use it until it expires or is revoked. No system can guarantee absolute security.

10. Visitors outside the United States

Our service is designed for and marketed to people in the United States. If you visit from another country, your information may be processed in the United States and other locations described in this policy. You can contact info@causalcubed.com to request access to, correction of or deletion of your information, or ask about rights under the laws of your country. We will respond in line with the law that applies.

11. Children

The service is intended for an adult professional audience and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action, including deletion where required.

12. Other websites

Links to third-party websites and externally hosted checkout pages lead to services with their own privacy practices. Review their notices before providing information. Our policy explains our own processing and does not replace those notices.

13. Changes and contact

We may update this policy as the service or legal requirements change. We will post the revised policy with an updated date and provide additional notice of material changes where required. Where a new purpose requires consent, an updated notice alone will not replace that consent.

For privacy questions, requests or appeals:

Causa Strategy Group LLC
971 US Highway 202N, Ste N
Branchburg, NJ 08876
USA
info@causalcubed.com