Privacy policy

What we collect

Depending on how you use Cèrcol, we may hold:

• Your email address: when you create an account or sign in.
• Your test results: scores linked to your account when you are signed in. Anonymous scores (no account) are stored without any identifying information.
• Profile fields you provide voluntarily: first name, last name, country, native language. All optional except first name.
• Anonymous usage data: if you complete an assessment without an account, only the scores are stored. No name, email, IP, or device information.
• Visit source: the referring website and any campaign tags (utm) from the link you arrived through, stored with a completed test. First-party only, never shared, and never linked to your identity.

Why we collect it

We collect data for three purposes only:

• To provide the service: your email is needed to authenticate you; your results are stored so you can view your history.
• Anonymised research: de-identified scores are used to improve the personality model and validate norms across populations, and are published as an open dataset for other researchers. The published data carries the scores, the instrument, the language and the date, and never your email, your account, or anything that could identify you.

We do not sell data. We do not use data for advertising. We do not share data with third parties except as described above.

How long we keep it

We keep your data for as long as your account is active. Specifically:

• Account data (email, profile, results), retained until you delete your account.
• Anonymous test scores: retained indefinitely as research data, with no link to any individual.

Cookies

Cèrcol uses one strictly necessary cookie: the authentication session token stored in your browser when you sign in. No analytics cookies, no advertising trackers, no third-party tracking of any kind. Strictly necessary cookies do not require your consent under GDPR.

Your rights

Under GDPR, if you are based in the EU or EEA, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Deletion: request that your account and all associated personal data be deleted.
• Portability: request your test results in a machine-readable format.
• Correction: update or correct your profile information at any time via the profile page.

To exercise any of these rights, email us. We will respond within 30 days.

Third-party services

Your account data and test results are stored in a database hosted by Cloudflare, Inc. and located in Western Europe (EU). Transactional emails (sign-in links) are sent via Resend (Resend, Inc.), a US-based company operating under standard contractual clauses for EU data transfers. Sign-in works by magic link, or through Google if you choose to sign in with your Google account — in that case Google authenticates you; Cèrcol never sees or stores a password.

Cèrcol takes no payments: everything is free, and no payment data is collected or processed.

No other third-party services receive your personal data. There are no analytics platforms, advertising networks, or social media trackers on this site.

Contact

For data requests, questions, or complaints:

hello@cercol.team