Who is responsible
NPTN, SASU with a share capital of €1,000, 6 rue de Thionville, 08200 Sedan, France, Sedan register 984 876 409, is the controller of your data. Questions and requests: contact@noetly.com.
What we collect, and why
Session and account. A random identifier and a signed cookie, your email if you save your account, your handle, your language, creation and last-activity dates. They let us find your space and protect it. Legal basis: performing the service you asked for, and our legitimate interest in its security.
Your profile. Your answers, free text, response times, quiz answers, the trait estimates derived from them, results, analyses and your exchanges with the assistant. They build your profile and present it back to you. Legal basis: your consent, and your explicit consent for sensitive data (GDPR Articles 6(1)(a) and 9(2)(a)).
Sensitive data. Some questions and some inferences may reveal your political opinions, beliefs, health, sex life or sexual orientation. Skipping a question is never read as an answer.
Personalisation. Display name, photo, gender and birth date if you provide them. Do not include information that identifies another person.
Public profile. As soon as you choose a handle, your profile is reachable by anyone with the link; the section “Public profile and sections” says exactly what shows and how to set it.
Community profile. The public “typical profile” page aggregates the members who have answered at least ten questions, and only appears once eight of them qualify. It publishes medians, spreads and counts: never a handle, an identifier or an answer. The dots on the political map are bare coordinates, with no label tying one back to a person. Deleting your profile takes you out of it.
Premium and payment. Customer and subscription identifiers, status and dates, held by our payment provider. Legal basis: the contract, and our accounting obligations. Noetly never sees or stores your card numbers.
Evidence of your choices. For every consent: the text version, language, date and boxes ticked. These records hold no IP address and no browser fingerprint.
We do not sell your data and do not use it for advertising. Compatibility matching between members and collective calibration of the questions are not active; each will require its own agreement before it opens. Your profile consent does not allow training an artificial intelligence on your data.
Without an account you are pseudonymous, not anonymous
A profile without an email is tied to a noetly_sid cookie pointing at a database row. Your answers stay linked to that identifier. Verifying an email attaches the profile to your account. If the address already belongs to an account, signing in opens that account and the two profiles are not merged.
What the results are worth
Noetly rests on established models of personality psychology (the Big Five and its facets, HEXACO honesty-humility, Schwartz values, RIASEC interests, motives, attachment) and on an adaptive method: every answer adjusts the estimates, the next question is picked where the profile is still blurry, and the reliability of every trait is shown rather than hidden. The AI-written texts start from those estimates, not from generalities.
They are estimates, and they improve with your answers: a trait at 30% reliability is a hypothesis, at 90% a solid portrait. They are meant for you, to understand yourself and talk about it. They are not a medical diagnosis or a psychological assessment validated by a professional, and nobody should use them to decide about you in matters of employment, credit, insurance or care.
Who receives your data
- Scaleway SAS (Paris) rents the servers, located in France, on which NPTN hosts the service and its backups.
- DeepSeek (Hangzhou, China) is the language model that writes the texts: portrait, shadow side, reports, assistant replies, translations, questions. It receives free text and trait summaries, never your email, handle or an identifier: nothing that could identify you. This transfer of pseudonymised data outside the European Union rests on your explicit consent to the profile (GDPR Article 49(1)(a)).
- Resend sends the sign-in emails and receives your address for that.
- Stripe processes Premium payments and receives the data needed for billing.
Administration functions are restricted to NPTN. Nobody else accesses a profile beyond what you made visible.
For how long
- Session cookie: one year at most; deleting it does not erase server data.
- Sign-in links: 30 minutes.
- Profile without an account: deleted after 24 months of inactivity.
- Account: deleted after 36 months of inactivity, after an email warning.
- Technical logs: 12 months at most.
- Backups: 30 days; a deletion is replayed after any restoration.
- Consent evidence and billing data: the applicable legal period (five years for evidence, ten years for accounting).
Online deletion erases the account and everything linked to it in the active database; payment records kept by Stripe follow their own periods.
Your choices and your rights
You can skip a question, correct an answer, set block by block what others see, export your data as JSON and withdraw consent by deleting your profile, all from My data, without creating an account. Withdrawal stops the analysis and erases the profile; it does not affect what was done before. The subscription is cancelled at the same time. Export first.
You have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR. To exercise them outside the interface, including if you lost access to your profile, write to contact@noetly.com; we answer within one month. You may also complain to the CNIL or your own supervisory authority.
Public profile and sections
Without a handle, your profile has no public address. With a handle, a base is visible to anyone with the link: handle, display name and gender if you provided them, avatar, archetype, a silhouette of your five main axes in three levels with no score, activity indicators, general quiz results. This base contains no free text.
Every other section is set from the menu on its block of your profile, at one of three levels: visible to everyone, visible to your accepted friends, or private. A preview shows the page exactly as a visitor or a friend sees it.
- By default, nothing beyond the base is visible to everyone.
- Visible to your friends by default: detailed axes with types and tags, “what Noetly perceives”, evolution over time, career interests, drivers.
- Private by default: facets, honesty-humility, emergent traits.
- Private by default and potentially sensitive: AI-written portrait and shadow side, dating-mode quiz results, values, romantic profile and attachment, political compass. Making one visible, to everyone or to friends, requires a separate explicit agreement the first time, recorded as evidence.
The quiz live feed shows general quiz results of every member with a public profile, and dating-mode results only for members who switched that section on.
Raw answers, email, birth date and journal are never published. Profile pages ask search engines not to index them; that does not prevent copying by a third party, and hiding a section does not remove copies already made elsewhere.