Privacy policy

Who we are

Quizlumen is operated by Highlight Digital, the trading name of sole proprietor (FOP) Kosiuk Serhii Olehovych (Косюк Сергій Олегович), 21 Nezalezhnosti St, apt. 101, Netishyn, Khmelnytskyi Oblast, 30100, Ukraine. State registration no. 26720000000004094. Not VAT-registered; Paddle, our merchant of record, charges and remits VAT. ("we"). We are the controller of the personal data described here. Contact: privacy@quizlumen.com.

What we collect and why

Quiz answers and results: to calculate and show your result (performance of a contract, Art. 6(1)(b) GDPR). If you take a quiz without an account, we link it to a random identifier stored in a cookie on your device, not to your name.

Email address: when you buy, our reseller Paddle collects it at checkout and shares it with us so we can create your account and send your sign-in links (Art. 6(1)(b)).

Purchase records: what you bought, when and the amount, for accounting and tax obligations (Art. 6(1)(c)). Payment details are handled by Paddle; we never see or store them.

Security data: we briefly store keyed hashes (not raw values) of IP addresses and emails to stop abuse such as password-link spamming (legitimate interest, Art. 6(1)(f)).

Advertising cookies and measurement (Meta, TikTok): only if you click Accept. They tell us which ads lead to visits and purchases. When you consent and buy, we also send Meta a hashed (SHA-256) copy of your email, your browser's user-agent and Meta's _fbp/_fbc cookie values to measure the purchase, and we keep the ad campaign (UTM) tags of your visit with the payment record (Art. 6(1)(a)). Your quiz answers and results are never shared with advertisers.

Health-related self-checks

Some self-checks (for example the ADHD Traits Self-Check) ask about experiences that can relate to your health, which is special-category data under Art. 9 GDPR. We process it only with your explicit consent, given by ticking a box before you start (Art. 9(2)(a)), and only to calculate your result.

For these self-checks we delete your individual answers as soon as your result is calculated and keep only the result. No advertising pixels load on these pages, and we never tell advertising platforms which self-check you took or what your result was. You can withdraw consent at any time by deleting the result (or your account); this does not affect processing that happened before.

We do not offer quizzes about politics, religion or sexuality. None of our results is a diagnosis or a medical or psychological assessment.

Who we share data with

Paddle.com (Paddle.com Market Limited and its affiliates) is our reseller and the merchant of record for all orders: it sells the full reports and memberships to you, processes your payment and handles tax, and is an independent controller of the data it collects at checkout (see paddle.com/legal). Processors acting for us under data-processing agreements: Vercel Inc. (hosting, EU region: Frankfurt), Neon Inc. / Databricks (database, EU region: Frankfurt), Resend (email delivery), and, only with your consent, Meta and TikTok (ad measurement). Some of these may process data outside the EEA under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

We never sell your personal data.

How long we keep it

Anonymous quiz attempts that were never purchased: deleted after 30 days.

Account data and purchased reports: until you delete your account, or 36 months after your last purchase if you have no active membership.

Sign-in links: expire after 15 minutes. Sessions: 30 days.

Payment records: kept by Paddle and in our accounts for as long as tax law requires (typically up to 10 years). To have Paddle erase its copy, contact Paddle as described in its privacy notice.

Your rights

You can access, download, correct or delete your data, object to processing, restrict it, and withdraw consent at any time. Download and delete are self-service in My results. For anything else, email privacy@quizlumen.com. You can also complain to your local data protection authority.

Children

Our services are for people aged 16 and over. We do not knowingly collect data from children.