Privacy Policy

Data controller

No data protection officer is required for an operation of this size.

Hosting and server log files

This website is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany, on the basis of a data processing agreement pursuant to Art. 28 GDPR. For technical reasons, the hosting provider's web server automatically records access data in log files: IP address, date and time of the request, requested page, browser type/version, and operating system. This data is stored for a maximum of seven days and used solely to ensure the technical operation and security of the website (Art. 6 (1)(f) GDPR).

SSL/TLS encryption

This site uses SSL/TLS encryption for all data transmitted between your browser and our server, recognizable by the "https://" prefix and the lock icon in your browser's address bar.

Test results and local storage

Your answers and test results are stored locally in your browser (LocalStorage) by default. They are not transmitted to a server and are not known to us. You can view and delete your saved results at any time via the "My Results" page. Clearing your browser cache/site data also deletes them.

Fonts

This site uses the fonts Inter and Space Grotesk via Next.js' built-in font optimization, which downloads and self-hosts the font files at build time. Your browser never connects to Google Fonts or any other external font server at runtime, and no data is transmitted to Google for this purpose.

Optional: anonymized usage statistics (backend)

This feature is off by default. If the operator has activated it, completing a test additionally sends an anonymized copy of the result to our own server: which test, when, and the score/band per subscale -- never your individual item-by-item answers. Separately, coarse, non-personal daily counters (e.g. "test X was started N times today") may be recorded for the same purpose. Neither includes your IP address, a device fingerprint, or any cookie -- there is no way for us to link this data back to you. A technical anti-abuse measure stores a salted hash of the submitting IP address for a maximum of 24 hours to rate-limit automated abuse of these endpoints; the raw IP address itself is never stored.

Optional: cookie-less analytics (Plausible)

This feature is off by default. If activated, this site uses Plausible Analytics, a privacy-focused analytics service that does not use cookies and does not collect or store any personally identifiable information. Visit statistics are aggregated and anonymous. Learn more at plausible.io/privacy-focused-web-analytics.

Optional: newsletter

This feature is off by default. If activated, signing up for the newsletter stores your email address on our own server, together with a confirmation status. We use a double opt-in procedure: you will receive a confirmation email, and your address is only added to the active list once you click the link in it (Art. 6 (1)(a) GDPR). Every email contains a one-click unsubscribe link. Your address is not shared with third parties.

Advertising (Google AdSense)

This website displays ads on a small number of non-clinical pages (homepage, the Learn overview, individual articles, and the "Personality" test category) via Google AdSense (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Ads never appear on pages related to taking a test, viewing your results, or any clinically-oriented category of this site. Google and its advertising partners may use cookies and similar technologies on the pages listed above to display and measure ads and, where you consent, to personalize them -- this constitutes processing of personal data requiring your prior consent under GDPR.

Before any ad is requested on the pages listed above, Google's own consent management platform (certified under the IAB Transparency & Consent Framework) shows you a consent dialog listing the ad technology providers involved and lets you accept or decline personalized advertising, or reject non-essential ads entirely where required by your location. Your choice is stored in your browser and respected on later visits. You can change or withdraw it at any time via "Privacy settings" in the footer of this site.

More information: policies.google.com/technologies/ads.

Support link (Ko-fi)

The "Support" link/button leads to an external Ko-fi page. We do not transmit any data to Ko-fi ourselves -- once you follow the link, Ko-fi's own privacy policy applies to your interaction with their site.

No medical advice

The content and tests provided on this website are for general information and self-reflection. They do not constitute a medical or psychotherapeutic diagnosis or treatment.

Your rights

Regarding any personal data processed by us (see the optional features above), you have the right to: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with future effect. Please contact us using the details above to exercise any of these rights.

No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Your test results are calculated transparently using the published scoring method documented on each test's info page, and are shown only to you.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes to this policy

We will update this privacy policy whenever changes to our services or to legal requirements make it necessary -- for example before activating any of the optional features described above.