Privacy.

Charactly is an interpretive personality test (not a medical or diagnostic tool). It is run by Natalia Khivrenko, a sole proprietor registered in Poland (jednoosobowa działalność gospodarcza), who is the controller of your personal data. With any question, or to exercise your rights, reach us at [email protected].

Only two things, and only when you choose: (1) your email address, if you give it to save your result or join the waitlist; and (2) your test result – your type code and per-axis percentages, with a random public id – when you finish the test. We do not collect your name, and there are no accounts or passwords.

If – and only if – you allow analytics on the banner, we also record anonymous usage events (which screens you see, where the test gets confusing) to improve the site. Until you allow it, nothing is measured and no analytics cookies are set. You can change your mind any time from the footer.

Like any website, our host and content-delivery network process the technical data every browser sends – your IP address and basic request details – to deliver and protect the pages. That is standard server-log processing for security and delivery; we don’t keep it next to your result, and we don’t use it to profile you.

Email: your consent – captured when you submit your address (single opt-in). You can withdraw it any time. Test result: to deliver the result you asked for. Analytics: your consent – we measure nothing until you choose “Allow” on the banner, and you can withdraw that any time from the footer.

On servers in the European Union (Hetzner, Germany / Finland). Your data stays in the EU.

Resend delivers our confirmation and notification emails, so it receives your email address.

If you allow analytics, PostHog processes your usage events on our behalf, hosted in the EU (Frankfurt). PostHog Inc. is US-owned; where any data reaches the US it relies on the EU Standard Contractual Clauses under PostHog’s data processing agreement. We never send PostHog your email – the email field is masked.

Cloudflare provides the content-delivery network that serves the site and its images (it resizes the portraits at the edge). As the network layer in front of the site it processes technical request data – including your IP address – to deliver and protect the pages; the portrait images are stored in Cloudflare R2 in the EU. Cloudflare Inc. is US-owned, so, as with PostHog, any US transfer relies on the EU Standard Contractual Clauses under its data processing agreement. It is infrastructure, not advertising – your data is never sold.

We will name any future processor here – including any AI provider – before it handles your data.

You can ask us to access, correct, delete, or export your data, restrict or object to how we use it, or withdraw your consent – at any time, by emailing [email protected]. We keep your email until you unsubscribe or ask us to remove it, and your test result until you ask us to delete it.

If you think we’ve mishandled your data, you can complain to your local data-protection authority – in Poland, the President of the Personal Data Protection Office (UODO).

We set no analytics cookies or storage until you allow it on the banner. Choose “No thanks” and nothing is stored or measured. Choose “Allow” and PostHog keeps a pseudonymous id (cookie / local storage) so your visit isn’t double-counted – never your name, never your email.

Session replay records an anonymised playback of how the test is used – and only after you allow analytics. Anything you type into a form is masked (your email is recorded as ****, never in the clear). The static page text – headings, buttons, the test questions – is recorded as you saw it, so we can see where people get stuck. No mouse-tracked typed input is captured. Withdraw any time from the footer.

If this notice changes, we’ll update the date above and, for material changes, let you know before they take effect.