Privacy Policy
Last updated: October 2026
Introduction
This policy explains what personal data thelovetests.com (the "Site", "we") collects, why, and what your rights are. It follows the EU General Data Protection Regulation (GDPR). The Site is operated under the trading name THE LOVE TESTS; the data controller is named on the imprint. You can reach us about privacy at [email protected].
Your answers and results
Your answers are scored in your browser. Your result is kept in your browser's session storage until you close the tab; we do not receive your individual answers. We do receive:
- Anonymous result statistics: the test, your result category and total score, without your name, email or any identifier. We use them to show how results compare.
- Quiz progress events: a random session code, the test, the question number you reached and where the visit came from (the referring website's domain or a campaign label, never the full address). We use them to see where people stop and to improve the tests.
- Checkout results copy: when you start a payment, we keep a copy of the result shown in your browser so we can restore it if your bank or wallet app sends you back in a new tab. We use this copy only for that purpose and keep it for no longer than 30 days.
- PDF report: when a paying member downloads the PDF, the result is sent to our server to create the file. It is used only to make the PDF.
Payments and membership
If you buy a full profile, the payment is handled by Stripe, which processes your payment details under its own privacy policy (stripe.com/privacy). We never see your full card details. We receive and store the payment status, amount, currency, country, the test, and the name and email address you give. After paying you confirm your name and email address: the name appears on your PDF, and the email address lets you log in again. We keep payment records for as long as the law requires for bookkeeping.
When you ask for a login link on the members page, we send it to your email address through an email delivery provider. The link works for 30 minutes and only once.
Cookies and storage
- Essential: a login cookie (
lst_member, about 13 months) that recognises a paying member, and your browser's session storage for your result while the tab is open. These are needed for the Site to work and do not need consent. - Analytics (no cookies): we do not use Google Analytics or any other analytics cookies. Visits are counted with Cloudflare Web Analytics, a cookieless service that stores no identifier on your device and does not identify you. We also keep our own first-party log of how visitors move through the Site (for example the page, the test, the step reached, whether a checkout was started, the device type, the country and approximate city, and where the visit came from). It contains no name, email address or IP address.
- Advertising cookie (only for ad visitors, only with consent): only if you reached the Site through one of our Microsoft Advertising (Bing) ads do we ask whether we may place an advertising cookie, used to measure whether that ad worked. It is placed only after you accept it in the cookie banner, and your choice is stored in your browser's local storage. You can change or withdraw it at any time via "Cookie settings" at the bottom of the page. Visitors who do not arrive through an ad see no cookie banner, because nothing that requires consent is placed.
Hosting and security
The Site runs on Cloudflare, which processes technical data such as IP addresses to deliver the Site and protect it against abuse. Data is sent over encrypted connections, and access to stored data is restricted.
Who we share data with
We do not sell your personal data. We share it only with the service providers named above (Stripe for payments, Cloudflare for hosting, an email delivery provider for login links, and Microsoft Advertising only if you came through one of our ads and accepted its cookie), or when the law requires it. Some of these providers may process data outside the European Economic Area; where they do, they use safeguards approved under the GDPR, such as standard contractual clauses.
Your rights
You have the right to access, correct or delete your personal data, to receive it in a portable format, to object to or restrict its processing, and to withdraw consent at any time. To use these rights, email [email protected]. We reply within 30 days. If you are not satisfied, you can complain to your local data protection authority.
Children
The Site is not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, please contact us and we will delete it.
Changes
We may update this policy. The date at the top shows when it last changed.