Privacy

What this site collects, who sees it, and how to get rid of it.

The short version

We collect what the service needs to run: your answers, an email if you give us one, and a payment reference if you buy. We do not sell it, we run no advertising trackers, and there are no analytics scripts on this site at all.

What we hold

If you just try the free question
The session: the questions asked, what you said, and the stronger versions the engine wrote. It is kept on our server so the result page works and so a shared link can be opened.
If you create an account
Your email address, a name if you give one, and a hashed password. We never store the password itself, and we cannot read it.
If you buy a session
A payment record: the amount, the tier, and a reference from the processor. Card details never reach us — you pay on the processor’s own page.

Cookies

There are exactly two, and both are strictly necessary:

dbi_session
Keeps you logged in. Set only after you log in.
dbi_csrf
Stops another site submitting forms as you. Set when you open a form.

Both are HttpOnly, Secure and SameSite. No tracking or advertising cookie is set, which is why there is no consent banner.

Who else sees it

Running a spoken interview needs outside services. These are the only ones in the path:

Our hosting
Runs this site and stores the data above.
Avatar and voice
Tavus and HeyGen, both in the United States, carry the video and speech. They receive the conversation in order to run it.
Language models
OpenAI, in the United States, generates the interviewer’s wording and the scoring.
Payments
Stripe for cards and NOWPayments for crypto. Both handle payment and identity checks under their own policies.

Nothing on the page is loaded from a third party until you click to start a session. That is what the note under the demo means.

How long, and how to remove it

Session transcripts and account data stay until you ask for them to be deleted. There is no self-serve delete button yet; email support@dontbombit.com from the address on the account and it will be removed. If you only signed up for the daily question, ask and the address comes off the list.

Your rights

You can ask for a copy of what we hold, ask for it corrected, or ask for it deleted. You can also complain to the Information Commissioner’s Office, which regulates this in the UK. In every case the address is support@dontbombit.com.

Age

This is interview practice for people going for jobs, so it is for adults: you must be 18 or over to use it.

Last updated 25 September 2026. If this changes in a way that matters, the date moves.

Back to Don’t Bomb It