Privacy Policy
Last updated August 2026. Operated by Rozeta-2009 EOOD. The short version: you can take every test without an account, we never sell data, and you can have your answers erased by asking.
Who is responsible
Personality Strategy is operated by Rozeta-2009 EOOD, 33 Hemus St., Sofia 1000, Bulgaria, company number 200709929. That company is the data controller for this site, and the same company operates sportpersonalities.com.
Questions, access requests and erasure requests go to [email protected].
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Your answers to a test, and the scores computed from them | To produce your result page and, if you buy one, your report | Performance of a contract / your request |
| A random session identifier and a cookie proving this browser owns the result | So you can return to your own results and nobody else can write to them | Legitimate interests (security of your result) |
| Email address, if you ask us to send your results or you buy a report | To send the result, the receipt and your permanent access link | Your request / performance of a contract |
| Marketing emails — only if you tick the box | Occasional emails about what your results mean | Consent, withdrawable at any time |
| Purchase records: amount, currency, payment reference, timestamps | To deliver the report, handle refunds, and meet accounting obligations | Contract and legal obligation |
| Referrer and campaign tag (utm_source), country | To understand which pages bring people here | Legitimate interests (running the site) |
| Analytics and advertising data — pages viewed, referrer, device | To see which pages work, and to measure advertising | Consent, and only if you accept cookies |
| Your cookie choice — which purposes you granted or refused, and when | To show that consent was asked for, and what you chose | Legal obligation (we must be able to demonstrate consent) |
| Research consent flag | Whether your anonymised answers may be used to build our norms | Consent, and only if you ticked it |
We do not collect your name, and we never ask for one. We do not take card details — payment happens on Stripe's own checkout page and card numbers never reach our servers. We do not sell or rent data to anyone.
Who processes data on our behalf
- Stripe — Payments, receipts and refunds (USA / EU).
- Google (Analytics) — Measures which pages are used — only if you accept cookies (USA).
- Anthropic — Would write AI-personalised report sections from your scores — a future feature, not used today (USA).
- Hetzner Online GmbH — Hosting (Germany).
- Cloudflare, Inc. — DNS, TLS and the proxy every request passes through (USA / EU).
- SMTP2GO — Sends receipts, access links and any newsletter you opt into (EU / USA).
Stripe is the only party that sees your card details; they never reach our servers.
Anthropic is listed for a feature we have built but do not use today: AI-personalised report sections. Every report is currently written from our own fixed templates, and nothing is sent to Anthropic. If that changes, it would receive your numeric scores and facet values only — never your name or email — that content would not be used to train models, and this policy will say so before the first such report is sold.
Cookies
Cookies we set to make the site work
A session cookie, a cookie proving this browser owns a given result, and — after a purchase — a cookie that keeps your report open on this device. These are necessary for the things you asked us to do, so they are not optional and we do not ask permission for them.
Analytics and advertising cookies
We use Google Analytics to see which pages are worth keeping. It sets cookies and transfers data to the United States. We run no advertising tracker at all. The consent choice below still offers advertising as a separate option, and accepting or refusing it currently loads nothing either way.
Neither would load until you accept. Until you choose, no analytics or advertising script is on the page at all — not loaded-but-disabled, not present. If you reject, they are never loaded, and rejecting everything takes exactly one click, the same as accepting everything.
When you choose, the choice is stored in your browser — that is what switches the tags on or off — and we keep a record on our side of which purposes you granted or refused and when. No identifier is attached to that record. You can change your mind at any time with the Cookie settings link in the footer, which reopens the choice.
What these tools receive is ordinary web-usage data: pages viewed, referrer, approximate location, device. They never receive your test answers, your scores, your result or your report content. Those never leave our own systems except to the processors listed above that need them to deliver what you bought.
How long we keep it
- Tests you open but do not answer: deleted after 30 days.
- Test answers and scores: kept while the result is live, so your link keeps working. Erased on request — unless you bought a report, in which case the limit below applies.
- Referrer, campaign tag and country on a completed test: removed after 13 months.
- Site-usage events (which step you reached, and your cookie choice): deleted after 13 months.
- Purchase records: kept for as long as accounting and tax rules require (typically several years), even after an erasure request — see below.
- Marketing emails: until you unsubscribe, then removed from the list.
Your rights
You can ask for a copy of your data, correction, erasure, restriction, or portability, and you can object to processing based on legitimate interests. Write to [email protected] with the link to your results — that link is how we find your record, since we hold no name.
One honest limit. If you have bought a report, we must keep the financial record of that sale to satisfy tax and accounting law. In that case erasure means we scrub the identifying parts — your email, country, referrer and the public link — and keep the sale record, your scores and the anonymised test session behind it, because the report you paid for and the accounting record both depend on them. We will not delete a sale record on request, and no one should offer to.
If you think we have handled your data badly, you can complain to your national data protection authority. Ours is the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria — www.cpdp.bg.
Research use
If you tick the research box, your answers may be used — stripped of anything identifying — to build the norms that let us tell people how their scores compare. That is the only research use, it is optional, and declining changes nothing about your results. See the methodology page for what we do with it.
Children
This site is not intended for children under 16, and we do not knowingly collect their data.