CROWD

Last Updated: November 30, 2025

1. Introduction

Welcome to CROWD. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is CROWD.
Contact: crowd.contact@proton.me

3. Data We Collect

We collect the following types of personal data:

3.1 Email Address

We collect your email address when you:

Subscribe to our waitlist or newsletter
Complete the CORE personality test
Submit a bug report
Create an account

3.2 Authentication Data (Google Sign-In)

On our /nvidia-bubble page, we offer Google authentication. When you sign in with Google, we receive:

Your email address
Your Google user ID
Basic profile information (name, profile picture if provided by Google)

3.3 CORE Test Data

When you complete our CORE personality test, we collect:

Your responses to questionnaire questions
Calculated personality scores across four dimensions: Cognitions, Orientation, Risk, and Energy
Timestamp of completion

3.4 User-Generated Content

We collect content you voluntarily provide, including:

Username/pseudo
Market predictions and bets
Comments and discussions
Votes on community content
Bug reports and feedback

3.5 Technical Data

We automatically collect limited technical information:

Timestamps of actions
Basic anti-spam verification data (honeypot fields, JavaScript detection)

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Email Addresses

To measure interest from potential users in our project
To send you your CORE personality test results
To notify you about important updates and major news about our platform (with your consent)
To respond to your inquiries and provide customer support

4.2 CORE Test Results

To provide you with your personality assessment
To improve our website and test methodology
For internal analysis and platform development (aggregated data only)

4.3 User-Generated Content

To enable community features (discussions, predictions)
To display your contributions to other users
To improve platform functionality and user experience

5. Legal Basis for Processing

We process your personal data based on:

Consent: When you subscribe to our mailing list or create an account
Legitimate Interest: To improve our services and prevent spam/abuse
Contract Performance: To provide you with the services you requested

6. Data Storage and Security

All personal data is stored securely using Supabase infrastructure, with data centers located in Paris, France. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Only authorized personnel (currently limited to the project administrator) have access to personal data, and access is granted solely for legitimate operational purposes.

7. Data Retention

We retain your personal data as follows:

Email addresses: Retained for 3 years from your last interaction. If you never engage with our communications, your email will be automatically deleted after 3 years.
Test results and user content: Retained for as long as your account is active, or until you request deletion.
Authentication data: Retained for as long as you maintain an active account.

8. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We do not share your personal information with any external organizations for marketing or commercial purposes.

Service Providers: We use the following trusted service providers to operate our platform:

Supabase: Database and authentication services (servers in Paris, France)
Google: Authentication services (only when you choose to sign in with Google)
Vercel: Website hosting and infrastructure

These providers have access to your data only to perform services on our behalf and are obligated to protect your information.

9. Cookies and Tracking

Currently, we do not use non-essential cookies or third-party tracking technologies. Essential cookies required for authentication and basic functionality may be used by our authentication provider (Supabase/Google).

We use Vercel Speed Insights to collect anonymous performance metrics to improve our website's speed and user experience. This does not collect personally identifiable information.

10. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (available through our data removal page)
Right to Restriction: Request limitation of processing of your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing of your personal data
Right to Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, please contact us at crowd.contact@proton.me

You can remove your email from our database at any time using our data removal page available on our website.

11. International Data Transfers

Your data is stored in Paris, France (European Union). We do not transfer personal data outside the EU/EEA.

12. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: crowd.contact@proton.me

15. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).