Privacy policy
Last updated: October 5, 2026
This policy describes what personal data Elme Universe (the “Service”) processes, for what purpose, on what legal basis, who receives it, how long we keep it, and what rights you have. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR).
1. The data controller
Elme Universe (operated by: Dávid Kovács). Contact for data protection matters: davidkovacs@mensa.hu.
2. What data we process
We follow the principle of data minimization — we only process what's needed to operate:
- Email address — to identify your account and send the sign-in link (only if you create an account).
- Name (optional) — to address you.
- Test results — the scores computed from the questionnaire and your position on the map, saved to your account (only if you choose to save them).
- Consent data — what you accepted and when.
- Session cookie — a technical cookie (eu_session) that keeps you signed in.
- Anonymous usage events — e.g. “quiz started” or “result viewed”, with date and language only; no IP address, cookie or identifier.
We don't store passwords — sign-in is passwordless, via an email link. Taking the test does not require an account.
3. Purpose and legal basis
- Account and result saving: performance of our agreement with you and your consent (GDPR Art. 6(1)(a) and (b)).
- Test results: as these relate to your personality, processing is based on your explicit consent (GDPR Art. 9(2)(a)), given via the checkbox at registration.
- Newsletter (if requested): your consent (Art. 6(1)(a)), which you can withdraw at any time with one click.
- Anonymous statistics: legitimate interest in improving the Service; the data cannot be linked to you.
4. Where and how long we store it
Data is stored in Cloudflare's database (D1). We keep account data as long as your account exists. If you delete your account (on the Account page), your email, profile and all saved results are deleted immediately and permanently. Sign-in links expire after 15 minutes. Newsletter subscriptions are kept until you unsubscribe.
5. Recipients (processors)
- Cloudflare, Inc. — hosting and database, under a data processing agreement (DPA).
- Resend — delivery of sign-in and (if requested) newsletter emails, under a DPA.
- OpenAI — only if you use the ChatGPT app; see section 7.
We don't sell your data and don't share it for advertising.
6. Cookies
We use only a single, technically necessary session cookie (eu_session) that keeps you signed in. It's HttpOnly and Secure. We don't use marketing or tracking cookies.
7. The ChatGPT app
The quiz runs inside ChatGPT. Your answers are not sent to our servers; we only receive the anonymous events above. When you finish, a summary of your result is passed to ChatGPT so it can discuss it with you — this is processed by OpenAI under its own privacy policy. If you open the website from the app, your answers travel in the part of the link after “#”, which browsers never send to any server; the website uses it to show your result and then removes it from the address bar. Nothing is stored on our side unless you choose to save your result to an account.
8. Your rights and controls
Under the GDPR you have the right to access, rectify and erase your data, restrict its processing, data portability, to object, and to withdraw your consent at any time. On the Account page you can download your data (machine-readable export) and delete your account yourself. For anything else, write to the email above. You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu).
9. Security
The connection is encrypted (HTTPS). For sign-in tokens and sessions we store only a cryptographic hash, never the secret itself.
10. Not a diagnosis
Elme Universe is a scientifically informed self-knowledge tool, not a psychological diagnosis and not a clinical measurement.
11. Changes
We may update this policy; the date of the last update is always shown at the top.