Privacy-First Email Management

One of the most common questions we receive is: "How can you email me my results if you don't store my email with my score?" It's a great question that gets to the heart of privacy-first design. Today, we're pulling back the curtain on PAICE's unified email system - a technical architecture that protects your privacy while providing a seamless user experience.

The Privacy Paradox

Here's what seems contradictory at first:

• ✅ We can email you your assessment results
• ✅ We remember your email across the entire platform
• ✅ You can update your email anytime
• ✅ Your email is never linked to your PAICE score™

How is this possible? The answer lies in our Privacy by Design architecture.

The Short Answer

Your email and your score are stored in completely separate systems. When you complete an assessment, we use a temporary session identifier to connect them just long enough to send your results, then that connection is discarded. Your email exists in our system, your score exists in our system, but they're never permanently linked together.

Think of it like a library: Your library card (email) lets you check out books (access features), but the library doesn't permanently record which specific books you borrowed in your permanent record.

The Technical Architecture

Two Separate Storage Systems

System 1: Assessment Scores (Anonymous)

• Stores your PAICE score™, dimensional breakdown, and tier
• Uses a hashed session ID (one-way encryption)
• No email addresses, no names, no identifying information
• Cannot be traced back to you

System 2: Email Addresses (Encrypted)

• Stores email addresses with AES-128 encryption
• Tracks where you provided your email (homepage, contact form, etc.)
• Used for communications and feature access
• Not linked to assessment scores

The Bridge: Temporary Session IDs

• When you complete an assessment, you get a temporary session ID
• This ID exists in your browser's memory only
• If you provide your email, we use this session ID to send your results
• The session ID is then discarded - the link is broken
• Your email and score remain in separate systems

How Email Sending Works

Here's the step-by-step process when you request your results via email:

1. You complete your assessment → Score stored in System 1 with hashed session ID
2. You provide your email → Email stored in System 2 with encryption
3. You click "Email Results" → Your browser sends the temporary session ID
4. Backend retrieves your score → Using the session ID from System 1
5. Backend retrieves your email → Using the session ID from System 2
6. Email is sent → Results delivered to your inbox
7. Session ID discarded → The connection between email and score is broken

Result: You got your results, but your email and score are no longer connected in our database.

The Unified Email Experience

One Email, Everywhere

When you provide your email anywhere on PAICE - homepage, contact form, whitepaper page, pilot application, or assessment results - it's saved to our unified system. This means:

• ✅ No duplicate requests - We never ask for your email twice
• ✅ Form pre-population - Your email auto-fills on all forms
• ✅ Feature access - Premium features unlock automatically
• ✅ Persistent tracking - Your email is remembered across sessions

Where You Can Provide Your Email

Marketing Pages (Newsletter Mode):

• Homepage subscription form
• Whitepaper download page
• Contact form submission
• Pilot program application
• Blog newsletter signup

Assessment Page (Assessment Mode):

• Results page after completing assessment
• Unlocks premium features (Insights tab, PDF download, social sharing)

All modes save to the same unified system, so you only provide your email once.

New Feature: Update Your Email Anytime

As of this week, you can now update your email address directly from the Results page:

How It Works:

1. Complete your assessment and provide your email
2. Premium features unlock (Insights, PDF, sharing)
3. In the "Export Your Results" section, click "Update Email Address"
4. Modal opens with your current email pre-filled
5. Change your email and submit
6. Updated email is saved to the unified system
7. All pages immediately recognize your new email

Why This Matters:

• Changed jobs? Update your email to keep receiving updates
• Typo in your original email? Fix it easily
• Want to use a different email? Switch anytime
• No need to contact support - you're in control

Privacy Protection:

• Your new email is still not linked to your score
• The same privacy protections apply
• You can update as many times as needed
• Old email is replaced, not stored alongside

Privacy Protections in Detail

What We Store

In the Email System:

{
  "email": "encrypted_email_address",
  "source": "homepage",
  "timestamp": "2025-12-12T10:30:00Z",
  "consent": true
}

In the Assessment System:

{
  "session_id": "hashed_identifier",
  "score": 78,
  "tier": "Proficient",
  "timestamp": "2025-12-12T10:45:00Z"
}

Notice: No email in the assessment record. No score in the email record.

What We Don't Store

• ❌ Email + Score combinations - Never permanently linked
• ❌ Conversation content - Processed in real-time, then discarded
• ❌ Personal identifying information - Names, employers, locations
• ❌ Browsing history - We don't track your activity across the web
• ❌ Device fingerprints - No surveillance or tracking

How We Protect Your Email

Encryption at Rest:

• All emails encrypted with AES-128 using Fernet
• Encryption keys stored separately from data
• Industry-standard cryptographic practices

Access Controls:

• Limited team access to encrypted data
• Audit logging for all email access
• Regular security reviews

Data Minimization:

• We only store what's necessary
• No unnecessary metadata collection
• Automatic cleanup of temporary session data

Common Questions Answered

"If my email isn't linked to my score, how do you know which results to send me?"

Answer: We use a temporary session identifier that exists only in your browser's memory. When you click "Email Results," your browser sends this session ID to our backend. We use it to retrieve both your score and your email, send the email, then discard the session ID. The connection exists for seconds, not permanently.

"Can my employer request my email and score together?"

Answer: No. Even if your employer somehow obtained your email from us (which we would never provide without your consent), they couldn't use it to look up your score. The systems are separate. Your results belong to you, and only you can choose to share them.

"What if I use the same email for multiple assessments?"

Answer: Each assessment gets its own hashed session ID. Your email might be the same, but each assessment is stored separately with no cross-referencing. While we are in Research Preview, we can't tell that two assessments came from the same person unless you explicitly tell us. This is planned to change in the future when we introduce account systems.

"How do you prevent data breaches from exposing email + score combinations?"

Answer: Because they're in separate systems, a breach of one doesn't compromise the other. Even if someone accessed our email database, they'd see encrypted emails with no scores. If they accessed our assessment database, they'd see scores with no emails. The temporary session IDs that bridge them are never stored.

"I thought you didn't use cookies? How are you getting my email from my browser memory?"

Answer: Great question! We use localStorage, not cookies. Here's the difference:

Cookies:

• Sent to the server with every request
• Can track you across websites
• Often used for advertising and surveillance
• Subject to third-party tracking

localStorage:

• Stays in your browser only
• Never sent to servers automatically
• Can't track you across websites
• Only accessible by PAICE.work

How it works:

1. When you provide your email, we save it to localStorage in your browser
2. localStorage is like a local notepad that only PAICE can read
3. When you visit another PAICE page, we check localStorage
4. If we find your email there, we pre-fill forms
5. This happens entirely in your browser - no server communication needed

Privacy benefits:

• ✅ No tracking cookies
• ✅ No third-party access
• ✅ Data stays on your device
• ✅ You can clear it anytime (browser settings → Clear browsing data → Local storage)
• ✅ Works even if you block cookies

Technical note: We also use PostHog for analytics, which can use cookies, but those are for aggregate analytics only (page views, button clicks) - never for personal data or cross-site tracking. You can opt out of analytics in your browser settings.

"Can I delete my email but keep my score?"

Answer: Yes! Your email and score are independent. You can request deletion of your email while keeping your assessment results, or vice versa. Contact us to request deletion of either or both.

"What about GDPR and CCPA compliance?"

Answer: Our architecture is designed to treat these compliance safeguards as the minimum requirements, not as barriers to functionality. We've built the system to naturally satisfy these principles without compromising the user experience.

We meet key privacy principles:

GDPR (European Union):

• ✅ Data minimization (we store only what's necessary)
• ✅ Purpose limitation (email used only for stated purposes)
• ✅ Storage limitation (temporary session data discarded)
• ✅ Right to access (you can request your data)
• ✅ Right to deletion (we process requests within 30 days)
• ✅ Right to portability (you can export your results)

GDPR Recital 26: Our assessment scores qualify as anonymous data under GDPR Recital 26 because they cannot be linked back to you without the temporary session ID, which we don't retain.

CCPA (California):

• ✅ Right to know (we disclose what we collect)
• ✅ Right to delete (we process requests within 45 days)
• ✅ Right to opt-out (you can unsubscribe anytime)
• ✅ No sale of personal information (we never sell data)

CCPA Article 1799.105: We treat assessment scores as de-identified data under CCPA Article 1799.105, as they cannot be reasonably linked to you without the temporary session ID.

The User Experience Benefits

Seamless, Anti-Creepy

Good Privacy Design:

• ✅ Remember your email across pages (convenience)
• ✅ Pre-fill forms automatically (efficiency)
• ✅ Let you update your email easily (control)
• ✅ Never ask for it twice (respect)

Bad Privacy Design:

• ❌ Track everything you do (surveillance)
• ❌ Link all your data together (profiling)
• ❌ Make deletion difficult (lock-in)
• ❌ Hide what you're collecting (deception)

PAICE follows the good design principles. We remember what's useful (your email for communications) while forgetting what's sensitive (the link between your email and your score).

Cross-Page Recognition

Example User Journey:

1. Monday: Subscribe to newsletter on homepage
   • Email saved to unified system
   • Source tracked as "homepage"
2. Tuesday: Visit whitepaper page
   • Email form hidden (already subscribed)
   • No duplicate request
3. Wednesday: Complete assessment
   • Backend checks for existing email
   • Finds it in newsletter system
   • Premium features unlock automatically
   • No email prompt shown
4. Thursday: Visit contact page
   • Form pre-populated with your email
   • Can change it if needed
   • Update saves to unified system
5. Friday: Return to results page
   • Click "Update Email Address"
   • Change to new work email
   • All pages immediately recognize new email

Result: You provided your email once, updated it once, and had a seamless experience across the entire platform. No duplicate requests, no friction, no privacy compromise.

Why This Matters

Trust Through Transparency

We could have built a simpler system that links emails and scores together. It would certainly be easier to implement and maintain! But it would violate our Privacy by Design principles.

We chose the harder path because:

1. Your privacy is non-negotiable - We won't compromise it for convenience
2. Trust requires transparency - You deserve to know how your data is handled
3. Good design is possible - Privacy and usability aren't mutually exclusive
4. Standards matter - We want to set an example for the industry

The Bigger Picture

PAICE is part of a broader movement toward privacy-first technology. We believe:

• Privacy is a right, not a feature - It should be built in, not bolted on
• Users deserve control - Your data, your choices
• Transparency builds trust - No hidden practices, no fine print tricks
• Good design respects users - Convenience without surveillance

Technical Implementation Details

For developers and technical readers, here's how we implemented this:

Backend Architecture

Email Storage (MongoDB):

# Two separate collections
newsletter_signups = {
    "email": "encrypted_with_fernet",
    "source": "homepage",
    "timestamp": "ISO8601",
    "consent": true
}

captured_emails = {
    "session_id": "hashed_sha256",
    "email": "encrypted_with_fernet",
    "timestamp": "ISO8601"
}

Assessment Storage (MongoDB):

# Separate collection, no email field
assessment_results = {
    "session_id": "hashed_sha256",
    "score": 78,
    "dimensional_scores": {...},
    "tier": "Proficient",
    "timestamp": "ISO8601"
}

Email Status Check:

# Queries BOTH collections
def check_email_status(session_id):
    # Check assessment emails
    assessment_email = captured_emails.find_one(
        {"session_id": hash(session_id)}
    )
    
    # Check newsletter emails
    newsletter_email = newsletter_signups.find_one(
        {"email": get_stored_email()}
    )
    
    return assessment_email or newsletter_email

Frontend Architecture

Unified Storage (LocalStorage):

// Single storage keys for all modes
localStorage.setItem('paice_email_submitted', true);
localStorage.setItem('paice_user_email', email);

// Recognized across all pages
const hasEmail = localStorage.getItem('paice_email_submitted');
const userEmail = localStorage.getItem('paice_user_email');

Dual-Mode Hook:

// Newsletter mode (no session required)
useEmailCapture({
  mode: 'newsletter',
  source: 'homepage',
  context: 'hero_section'
});

// Assessment mode (requires session)
useEmailCapture({
  mode: 'assessment',
  sessionId: result.metadata.sessionId,
  context: 'results_page'
});

Email Update Component:

<EmailCapture
  variant="modal"
  currentEmail={getStoredUserEmail()}
  allowUpdate={true}
  onSubmit={handleEmailUpdate}
/>

Continuous Improvement

We're constantly refining our privacy practices based on:

• User feedback and questions
• Regulatory developments (GDPR, CCPA, etc.)
• Security best practices
• Industry standards

Your input matters. If you have more questions about our email system or privacy practices, visit our Security and Privacy pages, or contact us. Your questions help us improve our transparency and documentation.

The Bottom Line

PAICE's email system demonstrates that privacy and usability aren't mutually exclusive. You can have a seamless, convenient experience without sacrificing your privacy.

Key Takeaways:

• ✅ Your email and score are never permanently linked - Separate systems, temporary connections only
• ✅ You provide your email once - Recognized across the entire platform
• ✅ You can update it anytime - New feature on Results page
• ✅ We protect it with encryption - Industry-standard security practices
• ✅ You control your data - Access, export, or delete anytime
• ✅ We're transparent about our practices - No hidden data collection

Privacy by Design isn't just a buzzword at PAICE - it's how we build every feature. The email update functionality we launched this week is a perfect example: we added convenience (update your email easily) while maintaining privacy (still not linked to your score).

---

Have questions about email privacy or data practices? Contact us

Read our full Privacy Policy and Security page for complete details.

Want to update your email? Complete an assessment and look for the "Update Email Address" button in the Export section of your results.

Recommended Reading

📖 Privacy & Security:

• Your Data, Your Privacy: How PAICE Handles Your Information - Comprehensive privacy overview
• Privacy by Design: How PAICE Achieves Privacy Compliance - Technical architecture details
• Visit our Security page - Complete security documentation

📖 Platform Updates:

• Weekly Update: Research Preview 2025.12 Launch - Latest platform enhancements
• Research Preview 2025.11: What It Means for You - Platform evolution

📖 User Guides:

• How to Prepare for Your PAICE Assessment - Get the most accurate results
• Understanding Your PAICE Score™ - Interpret your results