Privacy policy

1. Controller and contact

Algorithmo GmbH is responsible for the processing described in this notice. It operates lovetest.info and determines how the service uses personal data.

Algorithmo GmbH Haus-Endt-Str. 90 40593 Düsseldorf Germany Email: hello@algorithmo.de Telephone: +49 211 94624337

Use these contact details for privacy questions, requests concerning your data, or questions about billing and access. Please identify the relevant service and request without sending unnecessary sensitive information.

2. Scope and sources of information

This notice covers visiting Lovetest, taking its entertainment quizzes, buying a report, using Club membership or complimentary access, and contacting us. Data comes from your browser, your selected answers and communications, and our payment and delivery providers when they confirm payments, membership or email delivery.

The service uses technical request data, browser preferences, quiz-progress and result references, payment and subscription records, contact information, and limited completion statistics. You can browse without purchasing. Without the answers needed to score a test, we cannot calculate its result; without necessary payment or membership information, we cannot provide the corresponding paid service.

3. Purposes and legal bases

We process data needed to deliver requested quizzes, reports, purchases, membership and account restoration under Article 6(1)(b) GDPR. Statutory accounting and other applicable legal duties use Article 6(1)(c).

Hosting, troubleshooting, protecting access, preventing abuse, handling general enquiries and the limited popularity statistics described below rely on Article 6(1)(f). Our interests are a secure, reliable service, accurate access decisions and useful discovery of available tests. Your rights and reasonable expectations must be considered.

Where processing requires consent, Article 6(1)(a) applies. Storage or access on your device is assessed separately under § 25 TDDDG: strictly necessary operations for a service you expressly request use § 25(2); optional operations requiring consent use § 25(1). Visiting the site does not give blanket consent to future tracking.

4. Hosting, network delivery and technical logs

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany hosts the service. Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA supplies DNS, network delivery, caching and protection against malicious traffic. Requests pass through this infrastructure before reaching the application.

These services may process IP addresses, requested addresses, timestamps, browser and operating-system information, referrer information where supplied, response status and security events. This enables page delivery, fault investigation and protection against attacks. Infrastructure providers may use necessary security technologies under their applicable configurations. Our basis is the legitimate interest described in section 3; delivering a requested transaction may also serve contractual purposes.

Provider information: Hetzner — Privacy policy and Cloudflare — Privacy policy. Operational-log retention depends on the service configuration and the need to investigate faults or security incidents; details can be requested from us.

5. Quiz answers, scoring and results

When you complete a test, your selected answer identifiers are sent to our server and evaluated against that test’s predefined scoring rules. The server selects a prepared result and creates signed references needed to show the teaser and verify access. The application does not save your individual answer list in a server database. This does not mean all quiz information disappears: browser history, signed result references and purchase metadata are described below.

Answers and inferred results can be personal, particularly for relationship topics. Quiz scoring serves the entertainment and reflection service you request, under Article 6(1)(b). It is not a psychological diagnosis and does not make decisions producing legal or similarly significant effects about you. We do not use quiz results to decide employment, credit, insurance or comparable eligibility. Avoid sending additional intimate details or information identifying other people in support messages.

6. Browser history and device storage

Local storage keeps answer identifiers, question position, completion status, test version, attempt references and timestamps. Answers remain after completion. Guest history and signed-in history are displayed separately; the account namespace uses a pseudonymous reference derived from verified sign-in, rather than an email address. Joining Club can associate the just-completed guest attempt with the signed-in history. Progress is not synchronized across devices. Signing out does not erase it.

The application’s storage periods are: • Quiz history: no automatic expiry; a retake replaces that test’s current answers, and clearing site data removes local history. • Language preference (lovetest_language): one year. • Manual currency preference (lovetest-currency): local storage until changed or cleared. • Signed completed-attempt and recent-checkout cookies: up to seven days. • Paid-result receipts and membership cookies: up to 90 days. • Complimentary-pass cookies and related report access: up to 30 days, as explained in section 11.

Access cookies are HttpOnly and signed to detect alteration, not encrypted. Their contents include technical references such as test, attempt, result or subscription identifiers; a result identifier may indicate an outcome. Local history never proves payment. Browser controls can block or delete storage, but doing so may remove progress or access. Save or print reports you want to retain.

Newly completed reports also retain a compact copy of the selected answer positions inside these signed, HttpOnly attempt and report cookies. This lets us display your answer breakdown and restore the same paid report. It follows the same cookie expiry periods above; it is not sent to advertising platforms.

7. Language and currency preferences

We use a saved language choice or browser language settings to select a language. For an initial currency suggestion, Cloudflare’s approximate country signal is used where available: EUR for the configured European countries and territories, USD elsewhere. An explicit region in browser language settings is the fallback, then EUR. A manual choice takes priority.

The currency feature returns only a currency suggestion to the browser. It requests no GPS access or device-location permission and retains no separate country or IP record. This does not remove infrastructure logging described in section 4. Processing supports understandable prices and requested preferences under Article 6(1)(f) or, for a purchase, Article 6(1)(b).

8. Payments, Stripe and optional wallets

Stripe provides hosted checkout, payment processing and the billing portal. Stripe receives information necessary for the selected transaction, which may include your name, email, billing details, payment credentials, device information and fraud-prevention signals. Lovetest receives transaction status and references, billing and subscription information needed to provide access; the application does not receive your full card number.

We attach test, version, result, attempt, plan, language and currency references to checkout so a payment can be matched to its report. Stripe therefore receives result-related metadata, rather than your individual answer list. Processing supports the purchase under Article 6(1)(b), fraud prevention under Article 6(1)(f), and statutory records under Article 6(1)(c).

If available and selected, Apple Pay or Google Pay involves the wallet provider and payment participants under their own terms and privacy information. Lovetest does not separately embed their sign-in or advertising services. Stripe identifies the relevant entities, regional processing and provider roles at Stripe — Privacy policy. Stripe may act independently for regulatory and security purposes, as well as providing services to us.

9. Membership and restoring access

A successful Club purchase creates a signed membership cookie referring to Stripe customer and subscription records. We check subscription status with Stripe when providing Club report access. Cancellation and billing changes are handled through Stripe’s portal. A locally stored completion flag does not authorize a report.

To restore membership, you provide the billing email address. We look for the corresponding membership and, where found, send a signed link lasting 15 minutes. Its token is carried in the address fragment to keep it out of ordinary HTTP request URLs. Membership restoration on another device does not restore that browser’s quiz history. Processing is necessary for the requested membership or recovery service under Article 6(1)(b); safeguards against misuse rely on Article 6(1)(f).

10. Transactional email through Postmark

Postmark, operated by AC PM LLC within the ActiveCampaign group in the United States, delivers sign-in messages. It processes the recipient address, message contents, including the temporary sign-in link, and delivery or failure records. We disable open and link tracking for these authentication messages. Requesting a sign-in link does not subscribe you to marketing.

Our basis is Article 6(1)(b) for requested account access and Article 6(1)(f) for reliable, secure delivery. Message and delivery-record retention follows the configured service and operational requirements. Provider information is available at Postmark — Privacy policy and ActiveCampaign — Data processing agreement.

11. Complimentary access

A private gift link can activate a signed lovetest_gift_pass cookie for 30 days from redemption. The gift parameter is removed from the displayed address by a redirect. The original request can nevertheless appear in infrastructure access logs. Treat such links as private.

The pass permits free reports while valid without creating a subscription. Redeeming an active key again starts another 30-day period; rotating or removing the key invalidates passes issued under it. Gift-derived report access requires the current pass and the appropriate guest/account scope. Clearing its cookie removes browser access. Independently purchased receipts are separate. Processing and necessary storage provide the complimentary service you request, under Article 6(1)(b) and § 25(2) TDDDG.

12. Trending statistics

To rank popular tests, the server records only the test identifier, a hashed attempt identifier and completion time. Events are used for duplicate prevention for up to 90 days. Older entries are removed when statistics are next read or updated; if activity stops, automatic expiry limits storage to less than 180 days after an individual completion. Only completions within the selected rolling window contribute to the ranking. The displayed window is currently seven days and can be configured between one and 30 days.

This feature stores no answer list, result, account identity or IP address. Public displays contain aggregated completion counts and ranks. Complimentary-pass completions are excluded. We rely on Article 6(1)(f): providing useful test discovery and reliable counts with limited, pseudonymous data. This is not cross-site advertising tracking. You may object on grounds relating to your situation as explained in section 18.

13. Enquiries and support

If you contact us by email or telephone, we process the contact details and information you provide, the subject of your request and relevant correspondence. Billing support may require a payment reference to locate the transaction. Please do not send full payment credentials, passwords or unrelated sensitive information.

Contract-related enquiries use Article 6(1)(b). Other requests use Article 6(1)(f), reflecting our interest in responding appropriately; legal obligations may also require processing. We retain correspondence as needed to resolve the request, document relevant transactions or handle legal claims, subject to applicable retention duties.

14. Retention and deletion

Specific browser and statistics periods appear above. Technical expiry of a cookie does not delete Stripe’s billing records, provider delivery records or copies you saved yourself. We retain other information only while needed for the stated purpose, a legal obligation or the establishment, exercise or defence of claims. Tax and commercial records follow their applicable statutory periods.

Where deletion is requested, we assess the relevant records and legal requirements. Necessary retained records may be restricted to the purpose that still justifies keeping them. Clearing browser data is under your control; it can remove report access without canceling an existing Stripe subscription. Cancel membership through the billing portal or contact support.

15. Recipients and international transfers

Recipients include the named hosting, network, payment and email providers, their authorized service providers where necessary, and advisers or authorities where a lawful requirement or justified purpose applies. Providers working on our instructions are engaged under data-processing arrangements; providers may have separate responsibilities for their own statutory or security functions.

Cloudflare, Stripe and Postmark services can involve processing outside the European Economic Area, including the United States. Applicable transfer requirements must be met, for example through an adequacy decision covering the recipient and transfer, or appropriate safeguards such as European Commission standard contractual clauses with necessary supplementary measures. Different national laws can affect protection and access by authorities. We do not assume that every provider or transfer is covered by a particular certification. Contact us for the applicable transfer arrangements or a copy of relevant safeguards, subject to necessary redactions.

16. Security

The deployed service uses HTTPS/TLS to protect data in transit, signed access tokens to detect alteration, and access restrictions for operational credentials. Payment details are entered in Stripe’s checkout. These measures reduce risks but cannot guarantee that every internet transmission, email account or device is secure.

Protect devices used for personal quizzes, especially shared browsers. Sign out when appropriate and consider clearing stored quiz data after saving any report you need. A copied private access link, compromised email account or accessible browser profile may allow another person to use the access available there.

17. Your data-protection rights

Subject to the GDPR’s conditions, you can request access to your personal data and information about its processing, correction of inaccurate data, and erasure where continued processing lacks a lawful basis. You can request restriction while accuracy is checked, where processing is unlawful but you prefer restriction, where you need data for legal claims, or while an objection is being assessed.

For data you provided and that is processed automatically on consent or contract grounds, you can request a structured, commonly used, machine-readable copy and direct transfer where technically feasible. You can withdraw consent at any time for future processing; withdrawal does not make earlier lawful processing unlawful.

Contact hello@algorithmo.de. We may request information necessary to verify the request without collecting unnecessary additional data. Responses are normally due within one month; any lawful extension and its reason will be explained.

18. Right to object

Where processing relies on Article 6(1)(f), you may object at any time for reasons connected with your particular situation. This includes the limited trending statistics and relevant security or operational processing described here. We must then stop the affected processing unless compelling legitimate grounds override your interests, rights and freedoms, or the processing is needed for legal claims.

If personal data is used for direct marketing, you can object at any time without giving a reason, including to associated profiling. After such an objection, the data must no longer be used for that marketing. Lovetest currently sends the transactional messages described above, not a marketing newsletter. Send objections to hello@algorithmo.de.

19. Complaints and legal information

You may complain to a data-protection supervisory authority, particularly where you live or work or where you believe an infringement occurred. This does not prevent other administrative or judicial remedies. A relevant authority for our Düsseldorf establishment is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW): North Rhine-Westphalia data protection authority (LDI NRW).

The legal texts are available at General Data Protection Regulation (GDPR) and TDDDG § 25: protection of terminal equipment.

20. AI-created content, tracking and changes

Tests, prepared reports and illustrations may be created with AI before publication. Your individual quiz answers are not sent to an AI provider for live scoring. The scoring process uses the published test’s predefined rules.

Lovetest currently includes no advertising pixels, cross-site analytics scripts, Google Analytics, TikTok tracking, Google sign-in or CookiePass integration. Following an advertisement or opening the site inside another app does not prevent that external platform from applying its own privacy practices.

If we introduce optional analytics, advertising or other tracking, we will first describe the actual providers, purposes, data, retention and transfer arrangements and implement consent where required before non-essential tracking begins. Consent must be capable of withdrawal. This notice does not authorize unimplemented tracking. We will update the notice when the service or relevant requirements change and provide additional information where required.