Privacy policy

The short version: we do not know who you are. There is no account, we never ask for your name, and you can see your entire result without giving us an email address.

Who is responsible for your data

The Half-Said is run by Daniela Lozano, an individual based in Bogotá, Colombia. That is the data controller for the purposes of the GDPR, and the person you are dealing with. Write to hello@thehalfsaid.com about anything on this page.

Payments are handled by Polar, which acts as the merchant of record and is the seller for the purposes of your purchase. They collect your email and payment details; we never see your card.

What we deliberately do not ask

We removed questions about political opinions, religious beliefs, mood, and psychological fragility from the questionnaire on purpose. Under the GDPR these can be special category data, and the cleanest way to protect them is not to collect them. We also never ask about your health, diagnoses, medication, or treatment.

What we do collect

• Your answers to the 50 questions — in your browser only, for the length of the session, so a refresh doesn’t lose your progress. They are sent to us once to be scored, and never written down.
• Your scores — encoded into your result link and nowhere else. See below.
• Your email address — only if you buy a report, and only so we can deliver it and send your receipt. It is collected by our payment provider.
• Nothing else. No cookies, no cross-site tracking, no advertising identifiers, no analytics that identify you. This is why you see no cookie banner: there is nothing to ask you to consent to.

How long we keep it — we don’t

We do not store your answers or your result at all. When you finish the test, your scores are calculated and encoded directly into your result link, cryptographically signed so it can’t be altered. Then they’re discarded. There is no database row with your name on it, because there is no database row.

That has a consequence worth knowing: if you lose the link, we cannot get your result back for you. We have nothing to look it up in. It also means there is nothing for us to delete on request, nothing to leak in a breach, and nothing to hand over if someone asks us for it.

Legal basis

We process your answers on the basis of your consent, which you give before the first question and can withdraw by deleting your result. If you buy a report, we process your email on the basis of performance of a contract — we need it to deliver what you paid for.

Marketing email, if we ever send any, requires a separate opt-in that is never pre-ticked. Buying a report does not subscribe you to anything.

Who else sees your data

• Cloudflare — hosting and storage.
• Polar — payments; acts as merchant of record and handles your billing details. We never see your card.
• Resend — delivers your report email.

We do not sell or share personal information, and we do not use it for cross-context behavioural advertising. That applies to everyone, including residents of California and other US states with similar laws.

Where your data goes

The Half-Said is operated from Colombia, and data may be processed there and in the United States and the European Union by the providers listed above. Colombia is not covered by a European Commission adequacy decision, so transfers of personal data from the EEA rely on standard contractual clauses.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, or stop processing it. Write to support@thehalfsaid.com and we will answer within 30 days. Because we hold no name and no account, please include your result link so we can find the right record. You also have the right to complain to your local data protection authority.

Age

You must be at least 16 to use The Half-Said. We do not knowingly collect data from anyone younger.