Blog Take the check
Legal

Privacy policy

Last updated:

The short version. You can read this site and take the check without giving us your name. We only store a result together with your email address if you type it in and tick the box. Analytics cookies stay off unless you accept them. You can withdraw any consent at any time, and ask us to delete everything we hold about you.

1. Who is responsible

The controller for data processing on this website under the GDPR is:

Email:

We have not appointed a data protection officer, because we are not required to.

2. Visiting the website

Server logs

This site is hosted on Cloudflare Pages. When you open a page, your browser sends technical data that Cloudflare processes to deliver the site and keep it secure. This includes your IP address, the requested URL, the referring page, date and time, your browser and operating system, and the country the request came from.

Purpose: delivering the site, protecting against attacks and abuse, and keeping the service stable. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a working and secure website.

Processor: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and Cloudflare Germany GmbH. We have a data processing agreement in place with Cloudflare.

Aggregate traffic statistics

We read Cloudflare's own traffic statistics for our domain. These are aggregate counts derived from the server logs above, such as page views, requests and unique visitors per day. They set no cookie, no script runs in your browser, and we cannot identify you from them. Legal basis: Art. 6 (1) (f) GDPR.

3. Cookies and similar storage

We use a small number of technically necessary storage entries, and optional analytics cookies that only run after you accept them. The full list, with purposes and durations, is in our cookie policy.

Storing information on your device, and reading it, requires your consent under § 25 (1) TDDDG unless it is strictly necessary to provide the service you asked for. Necessary entries run on § 25 (2) TDDDG. Everything else waits for your consent.

You can change or withdraw your choice at any time through the , also reachable from the footer of every page.

4. Google Analytics 4

If, and only if, you accept analytics cookies, we use Google Analytics 4 (measurement ID G-DZKX00PCZD) to understand how the site is used: which pages are visited, how people arrive, roughly where they are, and which devices they use. Google Analytics sets cookies on your device and assigns a randomly generated identifier to your browser.

Legal basis: your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. We use Google Consent Mode, so the tag loads in a denied state and measures nothing until you accept.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and we additionally rely on the standard contractual clauses in Google's data processing terms. IP addresses are shortened by Google before any storage.

Withdrawal: open the cookie settings and switch analytics off. That immediately stops further measurement. You can also install Google's browser opt-out add-on. More on Google's handling of data is in Google's privacy policy.

5. Google Fonts

Our pages load the Archivo and Space Grotesk typefaces from Google's font servers (fonts.googleapis.com and fonts.gstatic.com). Your browser therefore contacts Google when a page loads, and your IP address is transmitted to Google. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a consistent presentation of the site. Provider and transfer details are as in section 4.

6. The Phase 0 check

The check runs in your browser. Your answers are scored locally and shown to you immediately. Nothing is sent to us while you answer.

At the end you can ask for your result by email. Only if you enter an email address and tick the consent box do we transmit and store a record containing:

  • your email address
  • your answers, your six domain scores, your human-skill score and your AI-exposure result
  • the optional profile you typed in: job title, industry and seniority
  • whether you want to hear about the Human Skill Certificate
  • the language you took it in, the page that referred you and any campaign parameters in the link
  • your browser's user agent string, the country of the request, and the time of submission

We do not store your IP address with this record.

Purposes: sending you your result and, if you asked for it, updates about the Human Skill Certificate and its waitlist, plus improving the assessment itself. Legal basis: your consent under Art. 6 (1) (a) GDPR.

Where it is stored: in a Cloudflare D1 database operated for us by Cloudflare, as described in section 2. Only the two founders can read it, through an internal tool protected by individual sign-in.

Retention: until you withdraw your consent or ask for deletion, and in any case no longer than 24 months after our last contact with you. Aggregate statistics that can no longer be linked to you may be kept beyond that.

Automated decisions: the score is calculated automatically, but it has no legal effect on you and nothing comparable. There is no automated decision-making in the sense of Art. 22 GDPR, and we do not use your data to profile you for advertising.

7. Contacting us by email

If you email us, we process your address, your message and any details you include, in order to answer. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in responding, or Art. 6 (1) (b) GDPR where your message concerns a contract. We keep the correspondence for as long as needed to deal with it and to meet retention obligations.

8. Who receives your data

  • Cloudflare, hosting, security and database, as processor
  • Google, analytics and fonts, as described above

We do not sell your data and we do not pass it to anyone else, unless we are legally obliged to.

9. Transfers outside the EU

Both providers above are US companies or have US parent companies, so data may be processed outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework, and standard contractual clauses under Art. 46 GDPR apply in addition. US authorities may in principle be able to access data, and enforcing your rights there can be harder than in the EU.

10. Your rights

Under the GDPR you have the right to:

  • access the data we hold about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • have your data deleted (Art. 17)
  • have processing restricted (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing based on legitimate interest (Art. 21)
  • withdraw consent at any time, with effect for the future (Art. 7 (3))

To exercise any of these, email . We answer within one month.

You also have the right to complain to a data protection supervisory authority. The one competent for us is the . You may also complain to the authority where you live or work.

11. Do you have to give us data

No. You can use the whole site and take the whole check without providing anything. If you want your result by email, the email address is the only field we need.

12. Children

This site is aimed at working adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, email us and we will delete it.

13. Changes

We update this policy when the site changes. The date at the top always shows the current version.