BestOfYU
Best of You

Privacy policy

Last updated:

This policy explains what personal data bestofyou.ai (“Best of You”) collects, why, who receives it, how long it is kept, and how to exercise your rights under the General Data Protection Regulation (GDPR).

Data controller

The publisher of the website, a private individual (see the legal notice). Contact: ….

Data we collect

Your account

  • Your email address and your gender (“Not specified” unless you choose otherwise). These stay in your account: nobody else sees them.
  • Your display name (which you can change at any time): the only name shown to others (people you share a profile with, members of your duos and groups).
  • When you sign in with Google or Facebook: your identifier and profile picture at that provider (see below).
  • Your password, stored only as a secure hash (we never know it), and the public keys of your passkeys.
  • The date of your last visit, to count the active accounts and to spot accounts that are no longer used.

Your tests and profiles

  • The scores of each test you take (one score from 0 to 100 per trait). Your individual answers are not stored on our servers: they stay in your browser until the test is submitted.
  • The personality profiles written for these tests, in each language you generated them in.
  • Share links you create, your duos and groups (name, context, members, the test each member brought, the analyses), and your notifications.

Personality scores and profiles say something about who you are: we treat them with care, never sell them, never use them for advertising, and never show them to anyone unless you decide to (share link, duo or group).

Your feedback

  • When you use “Give feedback”: your rating (how satisfied you are with the website, or how well a profile or a group analysis fits), your optional message, the profile or group it is about, the page you sent it from and the language of the interface, linked to your account so that we can answer you if needed.

Technical data

  • Your IP address, used briefly and in memory only to limit abuse (for example, repeated sign-in attempts), and in the server logs.
  • Usage data collected by Microsoft Clarity (see “Cookies and similar technologies” below).

Why we use it

  • Providing the service (account, tests, profiles, sharing, duos and groups, notifications, emails about your account): necessary to perform our agreement with you, the terms of use.
  • Security (preventing abuse, protecting accounts): our legitimate interest in keeping the service safe.
  • Improving the website (understanding how pages are used, with Microsoft Clarity; counting active accounts): our legitimate interest in improving the website for the measurement without cookies; your consent, asked on your first visit, for its cookies, which you can withdraw at any time.

Signing in with Google or Facebook

Signing in with Google or Facebook is optional: you can also use an email address and a password. When you choose it, here is exactly what we receive and what we do with it.

Data we receive

  • From Google (scopes “email” and “profile”): your Google account identifier, your email address and whether Google has verified it, your name and the address of your profile picture.
  • From Facebook (permissions “email” and “public_profile”): your Facebook account identifier (for this app), your email address, your name and the address of your profile picture.

We do not receive your password, your contacts, your posts, your files or any other data from these accounts, and we never post anything on your behalf.

How we use it

  • The account identifier: to recognize you when you sign in again.
  • The email address: to create your Best of You account or to link the sign-in to your existing account (only when both addresses are verified), and to send you emails about your account.
  • The first name: to prefill your display name when it is empty (it is not stored otherwise). You can change it at any time on your account page. Like any display name, it is shown to the people you share a profile with and to the members of your duos and groups, and is sent to OpenAI when an analysis of a duo or group you belong to is written.
  • The profile picture: as your avatar in the website.

This data is used only to provide these features. It is never sold, never used for advertising, never used to train artificial intelligence models, and never shared with anyone other than the providers listed below, for the purposes described in this policy. Best of You's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and deletion

This data is stored with your account, on our servers in France, until you remove it. You can unlink Google or Facebook from your account page at any time (as long as you keep another way to sign in), or delete your account: everything is then deleted immediately (see Deleting your data). You can also withdraw our access from your Google account or your Facebook settings.

Who receives it

We do not sell or rent your data. It is only processed by the following providers, for the purposes above:

  • Hostinger International Ltd (France): hosts the website and its database.
  • OpenAI (United States): writes the profiles and group analyses. It only receives your scores, the requested language, your gender if you gave it (only to write your texts with the right grammatical agreements) and, for duos and groups, the display names and genders (if given) of the members. It never receives your email address, nor any name other than the display names of duos and groups. Under OpenAI's API terms, this data is not used to train its models; it may be kept up to 30 days to detect abuse.
  • Hostinger: sends the emails about your account (address verification, password reset, email change) and the emails telling you that a profile or an analysis is ready.
  • Microsoft (Clarity): usage statistics of the website.
  • Google and Facebook (Meta): only if you choose to sign in with them.

Some of these providers are located outside the European Union, notably in the United States. These transfers rely on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.

Other people only see what you choose to show them: anyone with a share link can read the shared profile and your display name; the members of your duos and groups see your display name and the group analysis, never your scores or your profile.

How long we keep it

  • Your account and its data: until you delete your account (or until we delete it if it breaks the terms of use).
  • Tests: the 10 most recent ones; older tests are deleted, with their profiles, when you take a new one. You can also delete any test, with its profiles, yourself.
  • Notifications: the 50 most recent ones.
  • Feedback: until you delete your account.
  • Links sent by email: valid 24 hours (address verification, email change) or 1 hour (password reset), then useless.
  • Share links: until you stop sharing, or delete the test.

Cookies and similar technologies

  • Session cookie (nuxt-session): keeps you signed in; encrypted, necessary for the service.
  • Language cookie (i18n_locale): remembers your language.
  • Browser storage (localStorage): your answers during a test, an invitation to a group while you sign in, and your display settings; it stays on your device.
  • Consent cookie (analytics_consent): remembers whether you accepted or refused the cookies of the audience measurement, for 6 months; you are then asked again.
  • Microsoft Clarity: recordings of how pages are used (clicks, scrolling), to improve the website. Before you answer the window shown on your first visit, or if you refuse, it stores nothing on your device: each page is measured on its own. If you accept, it also uses cookies (_clck, _clsk, up to one year) to link the pages of a visit; never for advertising. Refusing has no impact on the service. You can change your choice at any time in the settings menu (gear icon, “Cookies”). See Microsoft's privacy statement.

Your rights

You can access, correct, delete and export your data, restrict or object to its use. Most of it can be done directly on your account page (name, email, sign-in methods, deletion of the account) and in “My space” (deletion of tests). For anything else, including a copy of your data, write to …: we answer within one month.

If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, or the authority of your country.

Deleting your data

To delete your account and all its data:

  • sign in to Best of You (email, Google, Facebook or passkey);
  • open your account page (menu of your avatar, “My account”);
  • at the bottom of the page, choose “Delete my account” and confirm.

Everything is deleted immediately and permanently: tests, profiles, share links, duos and groups you created, your memberships, notifications and feedback. If you can no longer sign in, write to … from the address of your account.

Children

The service is not intended for people under 16. If you believe a child has created an account, contact us and we will delete it.

Changes

We may update this policy when the service changes. The date of the last update is shown at the top of this page; significant changes will be announced on the website.