Superwrk
Catch It Out

How we handle your data

Catch It Out is a free drill run by Superwrk, Sydney, Australia. Plain language, no surprises. This page tells you exactly what we collect, why, and what we will never do.

Last updated: 6 July 2026

Our promise

Your score is private. Your employer never sees it.

We never share your individual results with anyone: not employers, not recruiters, not advertisers. Drill responses are analysed in aggregate, to study which AI errors mislead which professions. Your results are never used to make decisions about you individually, and we do not sell your data.

What we collect, and why

Your answers, response times and score. Which items you trusted or flagged, how long each took, and your score. Stored pseudonymously: under a random code, not your name. This is the whole point of the drill. It tells us which confident AI mistakes are hardest to catch.

Your country and device type. Worked out on our server the moment you start, from your connection. We keep only a two letter country code and your device type. Your IP address is used for a moment to work out the country and to block spam, and is never stored.

Your role, only if you choose to answer. The role question is optional and you can skip it. If you answer, we use it to build role benchmarks and to study which AI errors mislead which professions.

How comfortable you work in English, only if you choose to answer. This question is optional and you can skip it. If you answer, we use it only to check that the test reads fairly across languages, never to judge you individually.

Your email, only if you join the waitlist. Joining the waitlist means we may email you about early access to what we build next. A separate tick box, never pre ticked, asks if you also want occasional Superwrk updates. You can say no to both and still see your full results. Every email we send includes an unsubscribe link.

If you join the waitlist, your role answer is copied to your email record. This is so we know which professions want early access. We never use your email to look up or report your individual answers or score.

How you found us. Referral links and campaign tags, so we know which channels bring people in.

If you contact us. Your name, email and message from the contact form, used only to reply.

Two functional cookies. One cookie remembers your drill session so a page refresh does not wipe your progress. A second cookie remembers your language choice so the site stays in your language. Neither tracks you. Our analytics are cookieless, and there are no advertising or cross site trackers.

What we never do

  • No precise or GPS location. Country only.
  • No storing your IP address.
  • No selling your data, ever.
  • No sharing your individual score with your employer or anyone else.
  • No advertising trackers or cross site tracking.
  • No public leaderboards, rankings or comparisons.

How long we keep it

Up to 24 months from collection, then it is deleted. Ask us earlier and we delete earlier. If you withdraw consent to emails, we stop sending and remove your email promptly.

Where your data is stored

We use trusted providers to run the site: Vercel (hosting), Supabase (database) and PostHog (analytics, on servers in the European Union). Some data is stored outside your country, including in the European Union and the United States. Wherever it goes, the promises on this page go with it, and we transfer data only where the law of your country allows.

Your rights

Wherever you live, including India, the Philippines, Malaysia, Singapore, Vietnam and Indonesia, you can:

  • ask for a copy of your data
  • correct it
  • have it deleted
  • withdraw any consent you gave, as easily as you gave it
  • in India, nominate another person to exercise these rights for you

Email info@superwrk.com and we will respond within 30 days. If you are not satisfied, you can complain to your privacy regulator, including the Data Protection Board of India, the National Privacy Commission (Philippines), the Personal Data Protection Commissioner (Malaysia), the Personal Data Protection Commission (Singapore), the Ministry of Public Security (Vietnam) or Indonesia's data protection authority.

Age

Catch It Out is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have, email us and we will delete it.

If something goes wrong

If a data breach affects you, we will tell you and the relevant authorities as the law requires.

India: our DPDP commitment

We collect only what's needed to run this drill - your answers and response times, approximate country, device type and, only if you choose to share them, your role, how comfortable you are working in English, and your email - and we handle it in line with India's Digital Personal Data Protection Act 2023 and DPDP Rules 2025, including the obligations taking full effect on 13 May 2027.

Languages

This notice is available in English, हिन्दी (Hindi), Bahasa Melayu, Bahasa Indonesia and Tiếng Việt. If a translation ever differs from the English text, the English text applies, unless the law of your country requires otherwise.

Changes to this notice

If we change what we collect or how we use it, we will update this page and the date at the top, and flag material changes clearly.