Privacy / Clear boundaries
Your data should have a reason to be here.
This page describes the privacy boundaries of the current product features. It is an informational translation, not legally authoritative text or legal advice. The German version remains the reference; any legally required particulars must be reviewed before production data collection is enabled.
Site access, hosting and server logs
When a page is requested, the browser sends necessary connection data such as IP address, time, URL, method, status, referrer and device details. They may be processed to deliver and protect the site, based where applicable on the legitimate interest in secure operation.
No production host is reliably evidenced by the current repository or public DNS. The real provider, processing location, recipients and log retention must be added from the actual hosting configuration before public deployment.
BTS Account and Supabase
The optional BTS Account uses Supabase for sign-in, sessions and data access. Operator dashboard evidence identifies both current DEV and Production projects as: Free; AWS eu-central-1 (Frankfurt, EU). Data include email, authentication identifiers, session data and an optional public display name; administration also checks MFA/AAL.
A session uses necessary HttpOnly cookies with SameSite=Lax and HTTPS-only transport in production. Processing supports the requested account function and secure operation; public content remains available without an account.
The Supabase Free plan currently includes neither automatic database backups nor point-in-time recovery, so V1 uses an internal manual logical-backup procedure. Supabase publishes a data-processing addendum and subprocessor list; their concrete contractual application must be checked before the relevant production processing is enabled. Data remain only while required for the account, security, deletion handling or law; no unimplemented automatic deletion deadline is claimed.
EchoWall and Writing comments
EchoWall stores display name, message, category, consent evidence and moderation state. An optional email remains private and separate. Display name and message can become public only after moderation; a one-time deletion reference supports removal requests.
Writing comments publish display name and comment body. Account-comment ownership is linked to the verified account. Moderation and security events support safe operation.
Contribution tables store no raw IP address; they use secret-keyed pseudonymous hashes and short-lived abuse-control events. Consent supports voluntary publication, while legitimate interests may support moderation and security. Retention lasts only while purpose, security, deletion handling or law requires; no unimplemented automatic deletion is claimed.
Automatic Writing translations
When a Writing article is published or updated, btshq.online sends the necessary source-article content to OpenAI server-side to produce the other six supported language versions. The data sent are the title, teaser, editorial document content, source and target language, and translation instructions. Account, assessment, newsletter-subscriber, analytics, and administrator credential data are not sent. Source publication remains independent from translation.
Nerd Corner / curated taste
Nerd Corner is publicly visible, editorially selected personal content. When external artwork loads, the browser requests media files directly from media.themoviedb.org (TMDB) and images.igdb.com (IGDB). These necessary requests can disclose ordinary connection data such as the IP address and request headers to the respective provider. Nerd Corner does not set additional cookies, add provider tracking or make runtime provider API calls for this artwork. Spotify is not embedded, and the Streamory handoff links only to the internal project page.
Life Alignment
Self and the Partner comparison explicitly labelled as the shared-device flow keep answers only in current page state. Career and Life Vision store up to 20 private derived snapshots with dates in this browser's local storage so the timeline persists between visits. They are not sent to the server, cookies, URLs or analytics; another person with access to this browser profile can inspect or clear local storage.
In Partner, each person answers independently in the normal interface. Person A reviews and seals their selected comparison data before handing over the device; Person B then answers and explicitly consents before the shared relationship context appears. This UI handoff reduces ordinary answer bias, but it is not a security boundary against the device owner, developer tools or local inspection. Reset clears both perspectives.
Partner, Friendship and Founder Alignment can still be used as an unstored Solo Reflection. An invite session requires the inviter to use BTS Account. The application stores module and version identifiers, session and participation state, structured answers with stated importance, the deterministically derived shared interpretation, optional Agreements, and minimum consent and security evidence. The invitation is valid for seven days; its secret and the later participant secret are stored only as hashes. Answers remain hidden from the other participant while answering. After both complete, each person sees the same derived interpretation, not the other person's raw answers by default. An invited participant can delete their participation before shared finalization; finalized shared history is not silently rewritten. Data is not used for marketing, public indexing, analytics or AI processing. Automatic cleanup of incomplete sessions is not yet scheduled in V1.1 and remains an operational follow-up.
Private invite sessions for Partner, Friendship, Founder, Family and Team can contain multiple rounds. Each round preserves its derived shared result and its own Agreement; the bounded timeline loads at most 20 completed rounds and never the other person's raw answers. Access remains bound to BTS Account or participant capability. A new round does not change an older round.
Printing, saving a PDF or copying a deliberately reduced summary happens only after an explicit action. From that point, the browser, operating system, printer, clipboard manager, cloud clipboard or destination app controls the exported copy. Detailed evidence and optional sensitive context are excluded from clipboard summaries.
Personal Advantage Mapping
Personal Advantage Mapping stores versioned structured progress and result data only in this browser's local storage. Optional free text remains in current-page memory and is not persisted. Answers are not sent to BTS, an account, analytics or an AI provider. Starting over clears the local state; clearing browser data does too. The One-Pager and Share Cards contain only explicitly selected derived summaries—never raw answers, free text, constraint details or private access information.
Money Profile
Money Profile does not ask for income, balances, net worth, debt amounts, credit scores, investments or bank access. Versioned structured answers and progress stay only in this browser's local storage; there is no account sync, bank connection, runtime AI or third-party persistence. Share Cards contain only explicitly selected derived summaries. Result feedback is optional, is sent to the private BTS feedback inbox separately from answers, and must not include sensitive financial information. Money Profile is not financial, investment, tax, credit or debt advice.
People and World Map
People/Spotlight and World Map show only curated public editorial and professional context. The map separates current context from origin, uses city/country context rather than precise private addresses, and exposes relationships only through the published taxonomy.
These areas collect no new contact details, infer no private locations and perform no external people enrichment. Correction or removal can be requested through the published privacy contact.
YouTube and external media
YouTube videos initially render as local placeholders. youtube-nocookie.com loads only after an explicit click; autoplay is disabled. A labelled external YouTube link is available.
After loading media or opening an external link, that third party processes data under its own terms. Other links are not silently embedded.
Contact and external profiles
btshq.online has no server-backed contact form or public booking integration. Contact uses email or deliberately selected external profiles. The relevant service processes submitted data under its own terms.
Cookies, local storage and tracking
The application contains no analytics, advertising pixels, profiling or marketing trackers. FYNS, Self and shared-device answers remain in page state. Career and Life Vision store up to 20 private derived snapshots in this browser's local storage; they are not sent to cookies, URLs or analytics.
Before a deliberate video choice or sign-in, no non-essential technology is used. A general cookie banner would therefore add no real control. Authentication cookies serve only a user-initiated account session.
Private feedback
The Feedback Box stores the submitted message, an optional name, a voluntary contact method and contact value, a coarse product context, processing status and timestamps. Short-lived keyed network and form-token hashes are processed separately for abuse control; a raw IP address is not stored as Feedback product data. Hosting and security infrastructure may process necessary request metadata.
The message and voluntary contact details are not public and are available only to the operator in the protected BTS Studio with admin authority and AAL2. No account or contact detail is required. Contact details are used only to make a possible reply available; no reply is guaranteed. Supplying them is not consent to marketing or a newsletter.
Feedback remains stored until the operator deletes it or it is no longer needed; automatic deletion is not implemented. Without an account or public receipt there is no self-service deletion. Privacy requests can use the published contact. Any later publication would require a separate consent and editorial process.
Optional result feedback stores only the selected product, fit response, optional usefulness category, locale and optional bounded comment. Assessment answers, full results, stress details and financial data are not attached, and feedback never changes the current result.
Data-subject rights and supervisory authority
Subject to applicable legal conditions, people may request access, correction, deletion, restriction, portability or object, withdraw consent for the future, and complain to a supervisory authority.
For the controller in Hesse: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Wilhelmstraße 7, 65185 Wiesbaden, poststelle@datenschutz.hessen.de, +49 611 1408-0, https://datenschutz.hessen.de/. Privacy requests to btshq.online can be sent directly to the controller contact above.