Privacy notice

Controller: Chan Nam Ao, Johannisplatz 20, 04103 Leipzig, Deutschland, team@stayinde.de.

Your answers reveal your political opinions (a special category of personal data under Article 9 of the EU General Data Protection Regulation, GDPR), so we handle them as little as we can:

• While you answer, your answers are kept only in your own browser, in the memory of that tab (sessionStorage). They disappear when you close the tab.
• Free preview: your answers are sent to our server for the calculation and discarded straight away. They are not written to a database or to log files.
• When you pay: after you tick the consent box (Article 9(2)(a) and Article 6(1)(a) GDPR), your answers are encrypted with AES-256-GCM and stored in the metadata field of that Stripe payment record. Stripe can only see the encrypted content, and only our server can decrypt it. It is used for one purpose only: to create and reopen your result page.
• You can withdraw your consent and ask for deletion at any time by writing to team@stayinde.de. After deletion, your result page no longer works. Withdrawing consent does not affect processing carried out before the withdrawal.
• Your browser remembers on your device the result links you have bought and whether you closed the language notice (localStorage), to make things easier next time. This data is not sent to our server and is deleted when you clear your browser data.
• If you arrived through one of our promotion links (an address with /s/ in it, such as /en/s/reply, sometimes followed by the public code of a Threads post), your browser keeps that source tag (a word such as reply or pin) in the memory of this tab only, and drops it when you close the tab. When you pay, the tag is written into the payment record so we know which channel, and which post, the purchase came from. The tag names a channel; it holds nothing about you.
• We also keep one anonymous tally: each time a result is calculated, we add one to a count of which party came first, by language edition and date (for example “28 September, English edition, SPD first” goes up by one). The tally holds no answers and no identifier of any kind, so nothing in it can be traced back to anyone; we use it to publish overall figures such as which party English-speaking readers in Germany come closest to. It is stored in a database hosted by Supabase.
• “Compare with a friend”: your result page offers a compare link. It carries an encrypted reference to your result (not your result link; only our server can read it, and reading it yields a comparison, nothing more). Whether you send it, and to whom, is your choice. Whoever opens it sees, on their own result page, your spectrum, your place on the map and whether the two of you agree on each statement. If they start the quiz from your link and pay, the reference is written into their payment record so the comparison is still there when they reopen their page. Your page never learns who used your link.

Payment is processed by Stripe Payments Europe, Ltd. (Ireland). Stripe collects the data needed for the payment (for example your email address and billing country) to complete the transaction, send your receipt and calculate VAT as the law requires; we do not receive your card number. Transaction records are kept for the periods set by German tax law.

Hosting: Vercel Inc. hosts this site and processes the technical data needed for the connection (IP address, time, browser type). We use Vercel Web Analytics to count page views; it does not use cookies and does not track individuals. Your answers are not included in the analytics data.

Promotion statistics: to learn how many readers each promotion link brings and how many of them reach a result and the payment page, we record which step you reached (page opened, quiz started, result shown, payment details shown, payment page opened), the link or website you came from (for example the public code of a Threads post, or just a website’s name), the date, language edition, approximate country and device type (phone or computer). Your answers are not part of this record. Nothing is stored in your browser: our server combines your IP address and browser type with a random value that changes every day and is deleted the next day, and turns them into a code that is valid for that day only. The IP address and browser type themselves are not stored, and from the next day on not even we can match the code to a device. When you pay, this code and the tag of the link you came through are written into the payment record, and we copy the payment’s amount, date, billing country and status into the same database for internal reports, without email address, name or card number (the email address is kept only as a one-way hash, to count unique buyers). The legal basis is our legitimate interest in knowing what our promotion achieves (Art. 6(1)(f) GDPR). The data is kept for 400 days in a database hosted by Supabase in Frankfurt, Germany. If your browser sends Global Privacy Control or Do Not Track, none of this is recorded.

Your rights: access, rectification, erasure, restriction of processing, data portability and objection. You can also lodge a complaint with a data protection supervisory authority (for example Saxony’s authority, the Sächsische Datenschutz- und Transparenzbeauftragte).

Right to object (Art. 21 GDPR): you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 6(1)(f) GDPR); we then stop unless there are compelling legitimate grounds. The easiest way: switch off the statistics below, or write to team@stayinde.de. With statistics off, this browser is no longer counted in the campaign statistics or Vercel Web Analytics; the choice is remembered in a cookie (stayinde_notrack) used only for that (§ 25(2) TDDDG).