Last updated: Oct 18th, 2026
This policy explains what personal data Roadmantica processes, why and on what legal basis, who receives it, how long it is kept, and what rights you have.
It is information for you, not a contract: you do not agree to anything by using the service. Where we need your consent, we ask for it separately, at the moment it matters.
The controller responsible for your data is LESPIRANT GmbH, Karlstrasse 72, 40210 Düsseldorf, Germany, represented by its managing director, Laurent Tran. Email: info@lespirant.com. Phone: +49 152 26729110.
Our legal notice (Impressum) has our full company details.
If you sign in with Google, LinkedIn or GitHub, that service gives us your account number there, your name (on GitHub, your user name when you have not set a name) and your email address, with whether the service has confirmed it; GitHub gives us only your primary address, and only once GitHub has verified it. Your account keeps an email address only if the service has confirmed it and no other account here uses it. For each service you sign in with, we keep your account number there, the address it last gave us, and when you first and last signed in with it, so that any of them opens the same account; signing in with another service that confirms the same address as your account adds it to that account. We do not store your picture.
If you create an account with a username and a password, we store your username and your password in scrambled form. If you give no email address, we also store the three recovery questions you chose with your answers in scrambled form, and your ten recovery codes in scrambled form, with the date each code was used; such an account has no email address, so if you lose both your answers and your codes, nobody can let you back in. If you give an email address (possible only while this site can send emails), we use it only to confirm it, to send you a link to reset a forgotten password, and to warn you about your account's password: when it changes, or when someone tries to create another account with your address. You can also add or change your account's email address later in Privacy Settings: the confirmation link goes to the new address, and once it is opened we tell the previous address that it was changed, without naming either address. Until you open the confirmation link, the address is kept only with that link, and an account whose address is never confirmed is deleted after 7 days. Scrambled here means a one-way hash: the text cannot be read back from it, not even by us. We need this to sign you in and to let you back in (Art. 6(1)(b) GDPR).
You can also use Roadmantica without an account. The first time you start a survey, rank your priorities, answer an invitation, save an alignment or choose to continue as a guest, we create a guest identity: a random code kept in this browser, with no name or email attached. What you keep from then on is stored on our server under that code: your priority rankings (the order you chose and the this-or-that choices behind it), your survey answers, your answers to an invitation and the alignments you save. For a guest identity, we also record the day of its last visit, so that we can delete it after 12 months without one.
With either kind of identity, we store the date you confirmed you are 18 or older, the names you give yourself and the other person in an alignment, and your earlier priority rankings; results are calculated from both partners' answers each time you open them and are not stored. We need all this to provide the service you asked for (Art. 6(1)(b) GDPR). Alignment answers are sensitive and need your explicit consent: see "Alignment answers" below.
When you answer a survey, we also keep a scrambled version of your network address (IP address), never the address itself, only to spot duplicate or fraudulent answers. It cannot be turned back into the address without a secret key that only our server holds, and nobody can see it. The person who created a survey sees only totals, never your individual answers. The legal basis for your answers is providing the service (Art. 6(1)(b) GDPR); for the scrambled address, it is our legitimate interest in honest survey results (Art. 6(1)(f) GDPR).
If you choose to answer the optional "About you" questions on a survey (gender, year of birth, nationality, country of residence, education, work and partner status), we keep your answers to group and compare survey results, and only ever show them in groups of ten or more. The legal basis is your consent (Art. 6(1)(a) GDPR): you consent when you save the form.
When you make a cookie choice, or consent to storing your alignment answers, we record what you chose, the version of the wording you saw, and when. The law requires us to be able to prove consent (Art. 7(1) and Art. 6(1)(c) GDPR).
We record when you sign in and a few account events: a change of plan, a deletion, a cleared history. We use this to keep the service secure and to know how much it is used, which is our legitimate interest (Art. 6(1)(f) GDPR). Our administrator sees totals and, to manage accounts, a list of accounts with each one's email, if it has one, username, name and sign-in methods. Your email address appears next to your number of actions only if your account has one and your latest cookie choice allows analytics; for that part, the legal basis is that consent (Art. 6(1)(a) GDPR).
When your browser contacts our servers, they necessarily receive its network (IP) address in order to answer. To protect the service from abuse, we count requests per address in the server's memory only. A count lasts a minute, or an hour when a request creates a new guest identity, and is erased within a minute after it ends. Our application never writes your IP address, the full address of the page you asked for, your email or any access link to its logs. A log line records the time, the kind of request, its result and, for some actions, the internal number of your account. In the rare case of an error in our web server, the error record includes the address and the request. The legal basis is our legitimate interest in a secure and working service (Art. 6(1)(f) GDPR).
Only if you allow it in the cookie banner, we use Google Analytics to understand how the service is used, and Google AdSense to show ads. The legal basis is your consent (§ 25(1) TDDDG and Art. 6(1)(a) GDPR). See "Cookies and tracking" below.
The romantic fit score is calculated automatically from both partners' answers, but it is only an aid to conversation. We never use it, or anything else, to make decisions about you that have legal or similarly significant effects.
You do not have to give us any of this data. Without it, you can use only the parts of the service that do not need it: for example, you can complete an alignment in your browser without saving it.
We use your information to operate your account, provide the features you use, keep the service secure, and understand overall usage through aggregated statistics. We do not use your personal information to build advertising profiles.
When you finish a survey on priorities you can keep as your own, we also save that ranking as your priorities, so you never have to rank the same priorities twice. If you already have a different ranking of them, we ask you first. The two are kept apart: removing your survey answer does not remove your priorities, and changing your priorities does not change the answer you gave the survey.
Alignment answers can reveal sensitive information about your relationships and private life. We store them only with your explicit consent, which you give when you save an alignment or answer an invitation, and you can withdraw it at any time by deleting your side of the alignment.
An alignment asks how you experience your relationship with a named person, including how attracted you are to them and whether you feel safe with them. Such answers can reveal information about your sex life or sexual orientation, which the GDPR treats as a special category of data, so the legal basis is your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR). You give it with a separate tick box, or, for alignments saved before we asked, with the "Keep them — I agree" button, and we record it on our server.
Your partner sees your answers. Once both of you have submitted, each of you sees both sides' ratings for every question, the gaps between them, the fit score, both priority rankings and the suggestions built from them. Before answering, the invited person sees the inviter's name, the kind of alignment and the list of questions. If you answer an invitation after signing in with Google, LinkedIn or GitHub, the person who invited you also sees the name on your account, which comes from the service you signed in with.
Withdrawing your consent does not make what happened before it unlawful. If you answered someone else's invitation, deleting your side removes your answers; your partner keeps theirs and sees the alignment as waiting for a response. If you started the alignment, deleting it removes the whole alignment for both of you, including your partner's answers.
We never send alignment answers, scores or relationship details to advertisers or to any AI provider.
Some storage on your device is needed for the service to work and does not need your consent (§ 25(2) TDDDG): your sign-in session, kept in this browser tab until you close it or sign out; your guest code; your cookie choice; your age confirmation; an alignment you have not saved yet; and four cookies used to sign in with, or connect, Google, LinkedIn or GitHub, which expire after ten minutes. When you choose a language, a theme or a currency, your browser also remembers that choice on this device, because you asked it to.
Only with your consent: analytics (Google Analytics) and marketing (Google AdSense). Google then sets its own cookies on this device, such as _ga for Analytics and __gads for AdSense. Google Analytics is set up to receive the type of page you are on, never its full address, so invitation links never reach Google; Google signals and ad personalisation are turned off. We show only non-personalised Google ads, and Google's ad script may load only on our public site pages (such as the home page, pricing, this policy, the terms, the legal notice, help and contact), never on pages that show your alignments, results, rankings, survey answers or invitations, nor on sign-in or your privacy settings. If you move from a public page to a page that may not show ads, the page reloads, so the ad script does not follow you. Non-personalised ads still use cookies, for example to limit how often an ad is shown and to prevent fraud.
Your cookie choice is recorded on our server under your browser's code and remembered on this device for 180 days, after which we ask again. You can review or change it at any time in Privacy Settings. Withdrawing your consent removes the cookies Google set under our site's address on this device; cookies Google keeps under its own addresses can be deleted in your browser's settings.
Service providers process data for us under data-processing agreements, only as we instruct them: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, hosts our servers in its data centres in the EU; Turso (ChiselStrike, Inc., USA) runs our database, which is stored on Amazon Web Services servers in Ireland.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, provides sign-in with Google, sends our emails through its Gmail service and, only with your consent, provides Google Analytics and Google AdSense. LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, provides sign-in with LinkedIn, and GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, provides sign-in with GitHub; each takes part only when you choose to sign in with it.
Gmail, Google's email service, sends our emails: for each email it receives your address and the email itself, with its link if it has one. We email an address only about an account, or about an attempt to create one with that address: to confirm the address, to reset a forgotten password, to tell you the password or the address was changed, or to tell you someone tried to sign up with it. The address is one typed into our forms, usually by you, or the one Google, LinkedIn or GitHub confirmed when you signed in with it.
No AI provider receives your data. The service can use AI providers (Mistral AI by default), but only our administrator can use those features, and no alignment, survey or account data is sent to them.
We do not sell your personal data, and we pass it to nobody else unless the law obliges us to, for example under a court order.
Google Ireland Limited belongs to Google LLC, and LinkedIn Ireland Unlimited Company to LinkedIn Corporation; Google LLC, LinkedIn Corporation, GitHub, Inc. and Turso (ChiselStrike, Inc.) are based in the USA. Transfers to Google LLC, LinkedIn Corporation and GitHub, Inc. rely on the EU–US Data Privacy Framework, under which each of them is certified (Art. 45 GDPR). Our database is stored in the EU; any access to it from the USA is covered by the EU standard contractual clauses in Turso's data-processing agreement (Art. 46(2)(c) GDPR). You can ask us for a copy of these safeguards.
We keep your information for as long as your account exists. If you delete your account, it is deactivated at once, and your alignment answers, your priority rankings and the priority sets you created are erased at once and cannot be restored; a set that someone else still uses stays, no longer linked to you. Signing back in within 30 days, with any sign-in service your account uses or with your username and password, restores the account itself (a deleted guest identity cannot be restored); after 30 days, the account and everything still linked to it (your sign-in details, including a password account's username, password, recovery questions and recovery codes, your activity history and the records of your consent) are deleted for good, and the username becomes free again.
An email link works once, a confirmation link for 24 hours and a reset link for 30 minutes, and is deleted shortly after it expires, except the newest confirmation link of a sign-up still waiting, which is deleted with that sign-up after 7 days; the links of an account are deleted at once when you delete the account. A sign-up that gave an email address and was never confirmed is deleted after 7 days, with its username, which becomes free again.
Your survey answers are kept until you delete your account, until the person who created the survey deletes it, or until you remove them from the survey's page. When you rank a survey again, your earlier answer is deleted 90 days later. Your survey profile (the optional "about you" answers) and the surveys you create are kept until you delete them or your account. Deleting your account erases all three immediately, together with every answer other people gave to the surveys you created.
Without an account, your information is kept the same way, under your guest identity, until you delete it, or until 12 months have passed since your last visit, when it is deleted. If this browser's storage is cleared, the guest identity goes with it: you can no longer reach what was stored under it, which stays on our server, with no name or email attached, until it is deleted 12 months after your last visit. Signing in with an account ends the guest identity in this browser the same way, once you have chosen what to bring along.
Your cookie choices are kept as long as the account or guest identity they belong to. If you never went further than the cookie banner, they are deleted 12 months after the last one.
The record of your consent to an alignment is deleted together with your side of that alignment. An invitation replaced by a new link, or answered with an account, is kept with its alignment and no longer opens anything. Any other invitation, one answered only as a guest included, expires 14 days after it is issued and is then deleted.
The scrambled network address on a survey answer is erased when the survey closes or after 90 days, whichever comes first.
Our application's log files are deleted after 14 days. The server's console output is kept up to a fixed size, with the oldest entries removed first, and is erased whenever we install a new version.
Google keeps Analytics data for the period set in our Analytics account, at most 14 months.
Our database provider keeps automatic backups for a short time, only to recover from a failure. Deleted data disappears from them when they expire.
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), and to receive it in a portable format (Art. 20). You can review or change your cookie preferences, download a copy of your data, clear your activity history, or delete your account at any time from Privacy Settings. Without an account, Privacy Settings offers the same download and deletion, in the browser that holds your guest identity. For anything else, write to info@lespirant.com.
Where we rely on your consent, you can withdraw it at any time, with effect for the future: your cookie choices in Privacy Settings, and your alignment answers by deleting your side. You can withdraw your consent to the survey "About you" answers at any time by deleting your survey profile, and you can remove your answer to any survey from that survey's page.
You have the right to complain to a data-protection supervisory authority, in particular in the country where you live or work. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), that is, your activity history, our server logs and the scrambled survey address, you have the right to object at any time, on grounds relating to your particular situation (Art. 21(1) GDPR). We will then stop, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. Write to info@lespirant.com.
We do not use your data for direct marketing.
Roadmantica is for adults. You must be 18 or older to use it, and we ask you to confirm this before we create a guest identity or an account. If you believe someone under 18 has used the service, write to us and we will delete their data.
We protect your data with technical and organisational measures suited to the risk: encrypted connections, invitation links and emailed links stored only in scrambled form, passwords, recovery answers and recovery codes kept only in scrambled form, limits on how often the service can be called, a 15-minute pause after ten wrong attempts in a row with the same username or email, and access to the production data restricted to our administrator. No system is perfectly secure, so we cannot guarantee absolute security.
We update this policy when the service or the law changes; the date at the top shows the current version. If a change needs your consent, we ask for it again before the change applies to you.
For any question about this policy or your data, write to info@lespirant.com, or to LESPIRANT GmbH, Karlstrasse 72, 40210 Düsseldorf, Germany.