Privacy Policy
Last updated: July 8, 2026
1. Introduction and Scope
This Privacy Policy explains how MONETIZANDO TU PASION LTD ("PersonalityTests", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you visit or use the website personalitytests.online, including its quiz funnel, member area, and any related features (together, the "Service"). It also describes the choices and rights you have with respect to your personal data.
PersonalityTests is a web-only self-discovery service offering personality-style tests, short lessons, reflection practices, a mood check-in, a private journal, a daily task planner, and progress tracking. The Service is provided exclusively through the website.
Please read this Privacy Policy carefully before using the Service. This Privacy Policy should be read together with our Terms of Use and Service (/legal/terms), Subscription Policy (/legal/subscription), Money-Back Policy (/legal/money-back), and Cookie Policy (/legal/cookies). Capitalized terms that are not defined here have the meaning given to them in the Terms of Use and Service.
2. Definitions
- "GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation), concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data.
- "EEA" means the European Economic Area, comprising the Member States of the European Union together with Iceland, Liechtenstein, and Norway.
- "CCPA" means the California Consumer Privacy Act of 2018, as amended (including by the California Privacy Rights Act of 2020), and its implementing regulations.
- "Process" (and "processing"), in relation to personal data, means any operation performed on that data, including collecting, recording, storing, using, disclosing, and erasing it.
- "Personal data" means any information relating to an identified or identifiable natural person.
3. Data Controller
The controller of your personal data — the entity that decides why and how your personal data is processed — is:
- MONETIZANDO TU PASION LTD
- Registered address: Efesou 9, 5280 Paralimni, Cyprus
- Email: support@personalitytests.online
Because we are established in Cyprus, a Member State of the European Union, the GDPR applies to our processing of your personal data.
4. What Personal Data We Collect
We collect two kinds of data: data you provide to us voluntarily, and data collected automatically when you use the Service. We aim to collect only what we need to run and improve the Service.
4.1. Data you provide voluntarily:
- Funnel and quiz answers — the responses you give in the onboarding quiz at /quiz.
- Email address — when you submit it on the funnel (lead capture) or use it to sign in as a member.
- Name — optional; only if you choose to provide it.
- Member content — your test answers and results, mood check-ins, journal entries, planner tasks, lesson progress, and lesson ratings and written feedback.
- Support correspondence — the content of emails you send to support@personalitytests.online and our replies.
4.2. Data we collect automatically:
- Funnel events — page and step views in the quiz funnel, tied to an anonymous session ID stored in a first-party cookie.
- First-touch marketing attribution — utm_source, utm_medium, utm_campaign, utm_term, utm_content parameters, gclid (Google click ID), fbclid (Meta click ID), the referrer URL, and the landing page. This information is stored in a first-party cookie for 90 days and may be linked to your email submission and to any purchase you make so we can understand which campaigns work.
- Server logs — standard hosting infrastructure logs, including IP address, browser user-agent, and timestamps.
4.3. Passwords. If you have a member account, your password is stored only as a salted cryptographic hash (scrypt). We never store passwords in plaintext and cannot read them.
4.4. Payment data. When paid subscriptions are available, all payments are handled by third-party payment processors. We never collect or store full card numbers. We may receive transaction metadata such as the date, amount, last four digits of the card, and payment method type. See Section 6 (Purposes) and our Subscription Policy (/legal/subscription).
4.5. Advertising measurement. We use Google Ads to promote the Service and Google's conversion-tracking tag (the Google tag) to measure whether our ads lead to sign-ups and purchases. The tag sets advertising cookies (see our Cookie Policy at /legal/cookies) and, when you submit your email in the quiz or complete a purchase, records a conversion with Google. To improve accuracy (Google Enhanced Conversions), the tag may include your email address, which it hashes with SHA-256 in your browser before it is sent. We use Google Consent Mode and honor the Global Privacy Control signal as an opt-out. Aside from this Google tag, we do not run third-party analytics scripts (such as Google Analytics), and we do not embed advertising SDKs. If that changes, we will update this Privacy Policy and our Cookie Policy first.
5. Cookies
The Service uses the first-party cookies listed below, each of which is httpOnly (it cannot be read by scripts in your browser). In addition, the Google Ads conversion tag sets advertising cookies, which are not httpOnly and may include third-party cookies set by Google, as described in Section 4.5 and in our Cookie Policy (/legal/cookies).
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| pt_sid | Anonymous session ID linking your test results/progress and funnel | 12 months | First-party, essential |
| pt_attr | First-touch campaign attribution (UTM params, click IDs, referrer) | 90 days | First-party, analytics/attribution |
| pt_user | Signed member session (keeps you logged in) | 30 days | First-party, essential |
| pt_admin | Staff session for site administration | 7 days | First-party, essential |
You can delete or block cookies at any time through your browser settings. Please note that blocking the essential cookies (pt_sid, pt_user) may prevent you from signing in or saving your progress.
Our Cookie Policy (/legal/cookies) lists every cookie we and our advertising partner set, including the Google Ads conversion cookies. If we later add further analytics or advertising cookies, we will update the Cookie Policy and this Privacy Policy before doing so.
6. Purposes of Processing
We process your personal data for the following purposes:
- To provide the Service — deliver your test results, save your progress, mood check-ins, journal entries, planner tasks, and lesson history; authenticate you; keep you signed in; and fix errors and technical issues.
- To personalize your experience — tailor lesson recommendations, learning-path content, and in-product suggestions to your answers and activity.
- To process payments — when paid plans are live, third-party payment processors handle your payment; we use transaction metadata to manage your subscription, renewals, refunds, and chargebacks.
- To communicate with you about the Service — send transactional emails such as sign-in and account messages, receipts, renewal reminders, support replies, and legal notices.
- To send marketing emails — if you have given us your email address, we may send you news, offers, and content about the Service. Every marketing email includes an unsubscribe link, and you can opt out at any time without affecting your use of the Service.
- To measure advertising — we use Google Ads conversion tracking (Google's tag, which sets the advertising cookies listed in our Cookie Policy) to measure whether our ads lead to sign-ups and purchases, and we may also send server-side conversion events (for example, via the Meta Conversions API). Where these include identifiers such as your email address, the identifier is hashed with SHA-256 before being sent, so the raw value is not transmitted. We keep Google ad personalization turned off (we measure conversions only) and honor the Global Privacy Control signal automatically as a complete opt-out from this measurement — both Google's tag and any server-side conversion events.
- To research and improve the Service — analyze aggregate funnel events and usage to understand which tests, lessons, and features are useful and to plan improvements.
- To keep the Service secure — detect, prevent, and investigate fraud, abuse, unauthorized access, and other malicious activity, and enforce our Terms of Use and Service.
- To comply with legal obligations — including tax, accounting, and consumer-protection requirements, and responding to lawful requests from public authorities.
7. Legal Bases for Processing (EEA/GDPR)
Where the GDPR applies, we rely on the following legal bases for each purpose described in Section 6:
| Legal basis | Purposes |
|---|---|
| Performance of a contract (Art. 6(1)(b) GDPR) | Providing the Service; saving and displaying your results and member content; account authentication; processing payments and managing subscriptions; customer support; transactional communications. |
| Consent (Art. 6(1)(a) GDPR) | Marketing emails where your consent is required by the law of your jurisdiction. For non-essential cookies (such as pt_attr) and advertising measurement, we rely on your consent only where applicable law requires prior opt-in consent; where the law permits an opt-out model — including the United States, our current market — these run on an opt-out basis. You can control the pt_attr cookie through the browser controls in our Cookie Policy, and for the Google advertising tag we additionally honor the Global Privacy Control signal automatically. You may withdraw consent or opt out at any time. |
| Legitimate interests (Art. 6(1)(f) GDPR) | Analyzing funnel events and usage to improve the Service; our use of already-collected marketing attribution data and ad-measurement results (where permitted without consent — note that placing the non-essential pt_attr cookie on your device is itself subject to the consent rules described above where they apply); securing the Service and preventing fraud and abuse; enforcing our Terms; marketing to existing customers where permitted. We balance these interests against your rights and freedoms. |
| Legal obligation (Art. 6(1)(c) GDPR) | Retaining transaction records for tax and accounting purposes; responding to lawful requests from authorities; complying with consumer-protection rules. |
8. California Privacy Rights (CCPA)
This section applies to residents of California, United States, and supplements the rest of this Privacy Policy.
We do NOT sell your personal data. We do use Google Ads conversion tracking, and may use server-side conversion events (such as the Meta Conversions API), to measure our advertising; this may qualify as "sharing" for cross-context behavioral advertising as that term is defined by the CCPA. The categories of personal data involved are identifiers (such as a hashed email address and advertising click IDs) and internet or other electronic activity; the recipients are our advertising partners, Google and — if activated — Meta (see Sections 4 and 10). We set Google Consent Mode to deny ad personalization at all times, so this data is used for conversion measurement rather than ad personalization or audience building. You can opt out of all such sharing at any time by sending a Global Privacy Control (GPC) signal from a supported browser or extension. We honor GPC automatically and frictionlessly as a complete opt-out: our website reads the signal and both stops Google's tag from using cookies or identifiers for advertising (and redacts ad-click data) and suppresses any server-side conversion events associated with you. You may also email support@personalitytests.online with "Do Not Sell or Share My Personal Information" in the subject to make the same request.
As a California resident, you have the right to:
- Know and access — request that we disclose the categories and specific pieces of personal data we have collected about you, the sources, the purposes of collection, and the categories of third parties to whom personal data has been disclosed.
- Delete — request that we delete the personal data we have collected from you, subject to legal exceptions (for example, records we must keep for accounting).
- Correct — request that we correct inaccurate personal data we hold about you.
- Opt out of sale or sharing — we do not sell your personal data. We use Google Ads conversion tracking to measure our advertising, which may qualify as "sharing" for cross-context behavioral advertising under the CCPA. You can opt out of all such sharing at any time by sending a Global Privacy Control (GPC) signal from a supported browser or extension, which we honor automatically and frictionlessly as a complete opt-out (both Google's tag and any server-side conversion events), or by emailing support@personalitytests.online.
- Non-discrimination — we will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised any of these rights.
To exercise these rights, email support@personalitytests.online. We will verify your request by matching the information you provide (typically your account or lead email address) against our records, and we may ask for additional information where reasonably necessary to confirm your identity. You may use an authorized agent to submit a request on your behalf; we will require proof of the agent's authority and may still verify your identity directly.
Shine the Light (Cal. Civ. Code § 1798.83): California residents may request, once per calendar year and free of charge, information about any personal data we have disclosed to third parties for their own direct-marketing purposes during the preceding calendar year. We do not disclose personal data to third parties for their own direct-marketing purposes; if you would nonetheless like to submit a request, email support@personalitytests.online with "California privacy rights request" in the subject line.
9. Data Retention
We keep personal data only for as long as it is needed for the purposes described in this Privacy Policy, except where the law requires or allows us to keep it longer.
- Account and member content (test results, journal entries, mood check-ins, planner tasks, lesson progress) is kept while your account is active and for up to 12 months after your account is closed, after which it is deleted or irreversibly anonymized — unless you ask us to delete it sooner.
- The attribution cookie (pt_attr) expires after 90 days; the anonymous session cookie (pt_sid) expires after 12 months.
- Transaction records are retained for as long as required by tax, accounting, anti-fraud, and chargeback rules, even if you delete your account.
- Lead records collected in the funnel (such as your email address and quiz answers) are kept while they remain useful for follow-up and campaign measurement, and for no more than 24 months from your last interaction, after which they are deleted or anonymized — sooner on request.
- Advertising-measurement data has a short life: Google's conversion cookies (such as _gcl_au) expire within about 90 days (see the Cookie Policy), and the hashed email used for conversion matching is retained by Google according to its own retention rules, not stored by us for advertising beyond the measurement event.
- Support correspondence is retained for as long as needed to handle your request and demonstrate our compliance.
When data is no longer needed, we delete it or irreversibly anonymize it.
10. With Whom We Share Personal Data
We do not sell personal data. We share personal data only with the following categories of recipients, and only to the extent needed:
- Hosting and infrastructure — our servers are operated on European cloud infrastructure provided by OVHcloud, using data centers located in the EU.
- Email delivery — a transactional and marketing email service provider (Resend) is used when email features are active. Marketing emails always include an unsubscribe link.
- Payment processors — when checkout is live, third-party payment processors handle your payment data directly; we never receive full card numbers.
- Advertising partners — Google (Google Ads), through its conversion-tracking tag on our website, to measure whether our ads lead to sign-ups and purchases; where enabled, an email address included for Enhanced Conversions is hashed with SHA-256 in your browser before it reaches Google. We set Google Consent Mode to deny ad personalization at all times, so this is used for conversion measurement rather than ad personalization or audience building. We may also send server-side conversion events (for example, to the Meta Conversions API) with identifiers such as email addresses hashed using SHA-256 before transmission. A Global Privacy Control signal is honored automatically as a complete opt-out from both channels.
- Public authorities — courts, law enforcement, and regulators, where we are legally required to disclose data or where disclosure is necessary to protect our rights, your safety, or the safety of others.
- Corporate successors — if we are involved in a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of that transaction; we will require the successor to honor this Privacy Policy or notify you of any material change.
We do not collect health data, do not connect to wearables or device health platforms, and do not share any chat content with AI providers, because no chat feature is live today (see Section 11).
11. AI Coach (Planned Feature)
An AI-powered coach is a planned feature and is currently shown only as a "coming soon" teaser. No chat messages or conversation content are collected today.
If and when the AI coach launches, we may process the messages you choose to send to it in order to generate responses and personalize your experience, and we may use a third-party AI service provider to power the feature. Before the feature goes live, we will update this Privacy Policy to describe exactly what conversation data is processed, which provider (if any) is involved, and how long such data is retained.
12. International Data Transfers
Your data is hosted in the European Union. If we transfer personal data outside the EEA, we rely on one of the following safeguards:
- Standard Contractual Clauses approved by the European Commission;
- an adequacy decision of the European Commission covering the recipient country; or
- the EU-U.S. Data Privacy Framework, where the recipient is certified under it.
You can request more information about the safeguards applied to a specific transfer by emailing support@personalitytests.online.
13. Your Privacy Rights
Depending on where you live, you have some or all of the following rights with respect to your personal data. If you are in the EEA, all of these rights are available to you under the GDPR.
- Access — request confirmation of whether we process your personal data and receive a copy of it.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data ("right to be forgotten"), subject to legal retention obligations.
- Restriction — ask us to limit the processing of your data in certain circumstances.
- Objection — object to processing based on our legitimate interests, and object at any time to processing for direct marketing.
- Portability — receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
- Withdraw consent — where processing is based on your consent, withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Complaint — lodge a complaint with a data protection supervisory authority, including the authority of the EU Member State where you live, where you work, or where the alleged infringement took place. Our lead authority is the Office of the Commissioner for Personal Data Protection of Cyprus.
To exercise any of these rights, email support@personalitytests.online from the email address associated with your account or lead record. You may also submit a request through an authorized agent or other representative; in that case we will verify the agent's authority and may verify your identity with you directly before acting. We will respond within the timeframe required by applicable law (under the GDPR, generally within one month). We may ask for additional information where reasonably necessary to verify your identity. Exercising your rights is free of charge, except where requests are manifestly unfounded or excessive.
14. Do Not Track
Our website does not respond to the older browser "Do Not Track" signal, because there is no accepted industry standard for how to interpret it. However, we do honor the Global Privacy Control (GPC) signal as a complete opt-out from our advertising measurement: when your browser sends GPC, we instruct Google's advertising tag not to use cookies or identifiers for advertising and we redact ad-click data, and we suppress any server-side conversion events associated with you.
15. Age Limitation
The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has provided us with personal data, please contact us at support@personalitytests.online and we will delete that data promptly.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email (where we have your address) before the changes take effect, and we will update the effective date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after a revised Privacy Policy takes effect means the revised policy applies to your use from that point forward.
17. Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, contact us at:
- MONETIZANDO TU PASION LTD
- Efesou 9, 5280 Paralimni, Cyprus
- Email: support@personalitytests.online