Privacy

Short version: no account, no cookies, no advertising trackers. Your quiz answers and your result stay in your own browser. We count page views with our own cookieless analytics.

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is the operator of this site, a private individual in Bavaria, Germany. You can reach him for every question and request about your data at:

Florian Breitenberger, Münchener Str. 3, 82211 Breitbrunn-Herrsching, Germany. Email:

No data protection officer has been appointed, because the legal requirements for appointing one (Art. 37 GDPR, Section 38 BDSG) are not met. Please send all privacy requests to the contact above.

Hosting

This site is hosted on Cloudflare Pages (Cloudflare, Inc., USA). Cloudflare processes the technical data every web request produces, such as your IP address, the requested URL, the time and your browser’s user agent, in order to deliver the page and to defend against attacks. Legal basis: our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under a data processing agreement. Because Cloudflare is based in the USA, this involves a transfer outside the EU; it is covered by the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can request a copy of these clauses at the address above. Cloudflare keeps this request data only as long as needed to deliver the site and protect it against attacks.

Your quiz answers

The quiz runs entirely in your browser. Your answers and your result are written to your browser’s localStorage under keys beginning with pairlings. so you can close the tab and continue later. Your answers are never sent to a server, and we cannot read them. Clearing your browser storage deletes them permanently. Saving them in your browser is strictly necessary for the quiz you chose to take (Section 25(2) no. 2 TDDDG); since we never receive them, the GDPR does not come into play.

Working out which attachment style fits you best also happens only in your browser. We receive no answers, and we do no profiling and make no automated decisions about anyone.

Cookies

We set no cookies. localStorage is not a cookie: it is never sent with requests and is only read by this site’s own code in your browser.

Analytics

We use Matomo, an open-source analytics tool, on our own server (metrics.florianbreitenberger.com), reached through this site’s own address. The server is hosted by ALL-INKL.COM (Neue Medien Münnich GmbH) in Germany. Matomo runs without cookies and builds no cross-site profile. It records which pages are visited, the referring site, device and browser type, and two content-free quiz events (“started” and “completed”). It never receives your quiz answers or your result. Your IP address is shortened before it is stored (the last part is removed), so the full address is never kept. To count visits within a day without cookies, Matomo derives a visitor ID from technical request data; this ID changes daily and is not linked to you.

Each visit is additionally counted, with the same shortened data, in a combined overview of all websites we run, on the same Matomo server. Page addresses are reported without any query string and without the part after a # sign. Shared result links carry the result in exactly that part, so the reported address never contains a result.

Raw visit data is deleted after 13 months. The aggregated reports we keep after that contain no personal data.

Legal basis: our legitimate interest in understanding how the site is used so we can improve it (Art. 6(1)(f) GDPR) and, for reading technical device data, Section 25(2) no. 2 TDDDG. No cookie or other storage on your device is used for analytics, except the opt-out entry described below.

To opt out, use the button below. It saves the entry matomo_optout in this browser’s localStorage (not a cookie), and from then on the analytics script is not loaded at all. Do Not Track and content blockers keep working as well.

Anonymous click heatmaps

We also use the heatmap function of our own self-hosted Matomo (the OpenHsr plugin). It runs on the same server and goes through the same proxy, with the same shortened IP address. It records only where on a page people click and, sampled every 200 milliseconds, where the mouse pointer moves, both as positions relative to the page size. Along with that it records the page address (without query string or the part after #), the device class (mobile, tablet or desktop), the window size and the time spent on the page.

It does not record your screen or anything you type. It sets no cookies and stores nothing on your device. A random ID exists only in memory for a single page view, so that clicks from the same page view can be grouped; it is not linked to you or to any other visit. Clicks and pointer movements inside the quiz itself (the answer scale and the result) are not recorded, so your answers cannot be inferred from them.

We use the heatmaps only to see which parts of our pages are used, so we can improve the layout. Raw heatmap data is deleted after 13 months, like the raw analytics data.

Legal basis: the same as for analytics, our legitimate interest (Art. 6(1)(f) GDPR) and Section 25(2) no. 2 TDDDG. The opt-out button in the Analytics section and Do Not Track switch heatmaps off as well.

Who receives data

Only two service providers: Cloudflare (hosting, as our processor, see Hosting) and ALL-INKL.COM (Neue Medien Münnich GmbH), which hosts our Matomo server in Germany. The only transfer outside the EU is the one to Cloudflare in the USA described above. Nothing else is shared, and we never sell data.

What we do not do

There are no accounts, no newsletter, no advertising and no payments on Pairlings. There is nothing to buy and no payment processing of any kind.

Security

The whole site is served over HTTPS only (with HSTS). Because there are no accounts, there are no passwords or profiles that could leak. IP addresses are shortened for analytics, and we collect only the minimum described on this page.

Children

This site is not directed at children, and we do not knowingly collect data about children.

Your rights

Under the GDPR you have the right to access the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18) and to receive it in a portable format (Art. 20). Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3)).

Right to object: where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), such as hosting and analytics, you can object at any time on grounds relating to your particular situation (Art. 21). For analytics, the opt-out button above, Do Not Track or a content blocker works immediately.

To exercise any of these rights, write to the contact under “Who is responsible.” In practice we hold almost nothing that could identify you, and we will tell you exactly what exists.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA). If you live or work in another EU or EEA country, you can also complain to the data protection authority there; the European Data Protection Board lists all of them on its website.

Changes

If this page changes, the change is made here. There is no mailing list to notify.