Privacidade e cookies

B5 HOLDING AS is the controller for personal data processed in Pair Perspective. Privacy questions and rights requests can be sent to the contact address below.

We process your answers to the 57 questions, selected language, progress, consent time and version, completion status, expiry date, and random assessment and access identifiers. Some questions concern intimacy and sex life. Those answers may constitute special categories of personal data.

We do not ask for a name, email address, phone number, or user account. Hosting providers may nevertheless process technical data such as IP address, time, browser type, requested address, and error or security logs where needed to deliver and secure the service.

Answers are processed to save progress, compare the two participants' answers, and present the shared result. Processing is based on your explicit consent under GDPR Article 6(1)(a) and, for information that may concern sex life, Article 9(2)(a).

Necessary technical processing for access control, operations, troubleshooting, and security is based on our legitimate interest in providing a secure and reliable service under Article 6(1)(f). We do not use answers for advertising, data sales, AI training, or decisions producing legal or similarly significant effects.

Participation is voluntary. You can withdraw consent by deleting the assessment or contacting us. Because the result depends on both participants' answers, withdrawal means deleting the entire assessment and making its result unavailable.

Answers remain separate while the assessment is in progress. Once both participants have completed it, each can see all answers side by side, calculated scores, and conversation prompts. A private link acts as a key to that participant's part of the assessment. Anyone who receives it can act as that participant, so it must be stored and shared securely.

The assessment and answers are deleted automatically from the active database 30 days after creation. Either participant can select “Delete assessment” at any time. This immediately deletes the complete assessment from the active service and invalidates both private links. Deletion cannot be undone.

Technical security and error logs and any provider backups may have separate, limited lifecycles before rotation or overwriting. They must not be used for other purposes and must only be retained as long as needed for operations, security, and legal obligations.

Pair Perspective only uses storage necessary for the function you request. An HttpOnly access cookie stores the private access key for up to 30 days. It is restricted to the relevant assessment, sent only to its API, and marked Secure in production. This lets the page remember the correct participant without an account or password.

The device that creates an assessment stores private recovery links in browser localStorage. This lets you copy your own link and open the assessment on another device. The local copy is removed when you delete the assessment on that device, or when an expired entry is next read. You can also remove it by clearing site data in your browser. A local link provides no access after the assessment is deleted or expires.

We do not use analytics, marketing, personalisation, or third-party cookies. We therefore do not display a consent banner for optional cookies. If optional tracking is introduced later, it will remain off until valid consent is given.

We use Vercel for application hosting and Neon for the database. The providers process data only on our behalf and under a data processing agreement. They may use subprocessors for infrastructure, security, and operations.

If a provider or subprocessor processes information outside the EEA, the transfer must have a valid basis under GDPR Chapter V, such as an adequacy decision or the EU Standard Contractual Clauses with required supplementary measures. Contact us for information about the basis applicable to your processing.

Access keys are long and random and are stored as cryptographic hashes in the database. Standard new access links place the key in the URL fragment so it is not sent with the initial page request. Cookies are HttpOnly and scoped to one assessment and participant, and the answer API disallows caching. No solution is risk-free; contact us immediately if you believe a private link has been exposed.

You may request access, rectification, erasure, restriction, and portability, and object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier processing. We may ask for the private link or other necessary documentation to avoid disclosing information to the wrong person.

You can delete the assessment directly in the service. For other requests, email the controller. You also have the right to lodge a complaint with the Norwegian Data Protection Authority.

We update this notice when processing changes. The date above identifies the latest version. Material changes affecting consent will require new information and, where necessary, renewed consent.