Privacy policy

LAST UPDATED 2026-08-24

1. Who is responsible

The controller for the processing described here is:

Bálint Albert, operating this site as a private individual
1173 Budapest, Ferihegyi út 93/C (postán maradó), Hungary
hq.abholdings@gmail.com

Given the limited scale of this site and the fact that it collects almost nothing, a data protection officer is not required under Article 37 GDPR and none has been appointed.

2. The short version

This site asks you five questions and shows you a result. Your answers are processed entirely in your browser and are never transmitted to us. There is no account, no login, no newsletter and no contact form. We do not build a profile of you and we do not sell anything about you to anyone.

Three things do involve data leaving your device, and each is described below: your hosting request when you load the page, the live price ticker, and any affiliate link you choose to click.

3. What is processed, and why

3.1 Your quiz answers

The answers you select are held in your browser's memory for the length of your visit and are used only to produce the result on screen. They are discarded when you close the tab. They are not sent to any server, not stored on your device, and not logged.

If you use a share link, your answers are encoded in the URL. Anyone you send that link to can see those answers — that is the point of the feature — so only share it if you are comfortable with that.

3.2 Server logs

Like any website, loading a page means your device contacts our hosting provider, which records standard technical information. This typically includes your IP address, the time of the request, the page requested, and your browser's user-agent string.

Purpose: delivering the site, keeping it available, and investigating abuse or attacks.
Legal basis: legitimate interests, Article 6(1)(f) GDPR — running a secure website. We consider this proportionate because the data is technical, not used to identify you personally, and not combined with anything else.
Retention: log data is retained for as long as our hosting provider retains it under its standard configuration, and is not copied, exported or analysed by us.
Processor: Namecheap, Inc., United States, acting as our hosting provider under its data processing agreement.

3.3 The live price ticker

The prices scrolling at the top of the page are fetched directly from a public market-data endpoint operated by Bybit. Because your browser makes that request itself, your IP address is visible to Bybit, along with technical request headers. We do not send them anything about you, and we receive nothing about you back.

Legal basis: legitimate interests, Article 6(1)(f) GDPR — showing current market data alongside the tool. If the ticker fails to load it simply disappears; it never displays invented prices.
Transfers: this may involve a transfer outside the EEA. See section 6.

3.4 Fonts and other assets

All fonts, styles, scripts and graphics are served from this site's own domain. Nothing is loaded from Google Fonts, a CDN, or any other third party, so no request is made to them on your behalf.

3.5 Affiliate links

Some links to trading platforms are referral links. Clicking one takes you to that platform's own website, which will set its own cookies and apply its own privacy policy — we have no control over and no visibility into that. If you subsequently open an account, the platform may tell us that a sign-up occurred so that commission can be paid. Where that happens we receive aggregate or pseudonymous reporting, not your name, email or trading activity.

Nothing on this page tracks which links you click before you leave. Read the destination platform's privacy policy before registering; it will describe far more extensive processing than anything here.

3.6 Analytics

This site uses Google Analytics 4, provided by Google Ireland Limited, to count visits and see which pages are useful. It sets cookies and processes your IP address, with IP anonymisation enabled.

Legal basis: your consent, Article 6(1)(a) GDPR. Nothing loads before you choose.
How consent works here: Google Consent Mode is set to deny storage by default, and the analytics script is only injected into the page after you accept. Refusing means the script is never downloaded at all — not merely disabled. Nothing is pre-ticked, continued browsing is not treated as agreement, and refusing takes exactly one click, on the same screen as accepting.
Withdrawing: use the Cookie settings link in the footer at any time. Withdrawal is as easy as consent was, and does not affect processing that already took place.
Transfers: Google may process data outside the EEA. See section 6.
What we see: aggregate reports — visitor counts, pages viewed, rough geography, device type. We do not receive your name or contact details and we do not attempt to identify individuals.

Cookie-by-cookie detail is in the cookie policy.

4. Storage on your device

The only thing this site stores on your device is your cookie choice, kept in your browser's local storage so you are not asked again on every visit. It contains no identifier and expires after six months. Clearing your browser data removes it. Full detail is in the cookie policy.

5. Automated decision-making

The result you see is produced by a fixed set of rules applied to the answers you chose. It is informational only — it produces no legal effect and nothing similarly significant for you, and so is not automated decision-making within the meaning of Article 22 GDPR. The ranking logic is described openly in the footer of the tool, and no commercial arrangement affects it.

6. Transfers outside the EEA

Three of the processors described above sit partly or wholly outside the EEA:

Namecheap, Inc. (hosting, United States) — transfers rely on the Standard Contractual Clauses incorporated into its data processing agreement.
Google (analytics) — the EU entity is Google Ireland Limited; onward transfers to the United States rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.
Bybit (price ticker) — your browser contacts a public market-data endpoint that may be routed outside the EEA. No personal data is sent by us; what reaches them is the IP address and headers your browser transmits when making any web request.

7. Your rights

Under the GDPR you have the right to request access to your personal data, to have it corrected or erased, to have processing restricted, to object to processing based on legitimate interests, and to receive your data in a portable format. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

An honest limitation. Because we deliberately collect almost nothing, we usually cannot identify you from a request. If you ask us for a copy of your data, the truthful answer will normally be that we hold none that identifies you. Under Article 11 GDPR we are not required to collect extra information purely to enable identification — and we will not, because doing so would mean processing more of your data, not less.

To exercise a right, contact hq.abholdings@gmail.com. We will respond within one month, extendable by two further months for complex requests.

8. Complaints

If you believe your data has been handled unlawfully you can complain to a supervisory authority in the EU or EEA state where you live, work, or where the alleged infringement took place. Our lead supervisory authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9-11, 1055 Budapest, Hungary — naih.hu.

9. Children

This site is not directed at children and its subject matter is not suitable for them. We do not knowingly process data relating to anyone under 16.

10. Changes

If what we do changes, this page changes with it and the date at the top is updated. Material changes to how we use your data will be flagged on the site itself, not buried here.