Last Updated: 14 July 2026

National Privacy Test Privacy Policy

This National Privacy Test Privacy Policy (“NPT Privacy Policy”) explains how NordVPN S.A. (“Nord,” “we,” “us,” or “our”) collects and otherwise uses your personal data when you take the National Privacy Test available at https://nationalprivacytest.org (“NPT Website”) or when you otherwise access or use NPT Website where this Privacy Policy is posted, regardless of the device you use, such as a computer, mobile phone, tablet, or TV.

This NPT Privacy Policy supplements Nord’s General Privacy Policy.

1. Introduction

By taking the National Privacy Test and/or visiting the NPT Website, you confirm that you have read this NPT Privacy Policy and agree to be bound by it. If you do not agree with any part of this NPT Privacy Policy, please refrain from taking the National Privacy Test and/or visiting the NPT Website.

The company responsible for handling your personal data is nordvpn S.A. (PH F&F TOWER, 50th Street & 56th Street, Suite #32-D, Floor 32, Panama City, Republic of Panama). We are the "data controller" as specified under many privacy laws, like the European Union's General Data Protection Regulation or the United Kingdom's Data Protection Act 2018.

Please note that most of the data we process is anonymized and/or aggregated. As a result, we may not be able to identify you from that data, and privacy laws may not apply to it.

2. Data We Process

2.1. When you take the National Privacy Test

2.1.1. Purpose: To allow you to take the National Privacy Test and provide you with its score, as well as online security tips. For this purpose, we process your anonymized responses to questions in those four sections:

• Daily digital habits (e.g., How you respond when an app asks for permission to access your data?)

• Privacy awareness (e.g., Which of the passwords is the strongest?)

• Risk tolerance (e.g., What privacy issues should you consider when using AI to help with your work?)

• Profile (e.g., What is your gender? Country? Age? Education level? Industry of employment?)

2.1.2. Legal basis: The processing is based on the performance of a contract - specifically in accordance with the National Privacy Test Terms.

2.2. When we create and share reports

2.2.1. Purpose: To create and share the National Privacy Test reports. For this purpose, we use only aggregated anonymized responses to the National Privacy Test. This means that the reports are based on combined results and do not identify individual test participants.

2.2.2. Legal basis: The processing is based on our legitimate interest in creating and sharing reports with the journalists and the public.

2.3. When we communicate with you

2.3.1. Purpose: To respond to and resolve your inquiry. For this purpose, we process your email address, your name if you provide it, and any information or attachments you include in your message when you contact us at [email protected] about the National Privacy Test, reports, or other related questions.

2.3.2. Legal basis: Processing is based on our legitimate interest in responding to and resolving your inquiry.

3. Cookies

NPT Website uses only necessary (essential) cookies strictly to display your National Privacy Test score and provide access to your completed report.

These cookies remain on your device for 24 hours unless manually cleared. Because they are strictly necessary for the service requested, they cannot be disabled through the website. However, you may block or delete them in your browser settings, though this may affect the NPT Website functionality.

4. Your Privacy Rights

You have certain rights regarding the processing of your personal information. For more information about your privacy rights, please see the “Your privacy rights” section of Nord’s General Privacy Policy. For additional rights for California residents, please see the “Country-specific provisions” section of Nord’s General Privacy Policy.

However, please note once again that most of the data described above is anonymized and/or aggregated. As a result, we may not be able to identify and single out your personal data and fulfill your privacy rights related to that data.

5. Other

Other matters not covered here, such as data security, data sharing, data retention and deletion, are addressed in our General Privacy Policy.

6. Updates to This Privacy Policy

We always include the "last updated" date at the top of this NPT Privacy Policy so that you know when changes were made. Unless stated otherwise, any updated version becomes effective as soon as it is published on the NPT Website. We encourage you to review this NPT Privacy Policy regularly to stay informed about how we protect your personal data. By continuing to use the NPT Website after the changes are published, you agree to the updated terms.

7. Contact Us

If you have any questions, concerns, or complaints about this NPT Privacy Policy or how we handle your personal data, please see the “Contact Us” section of our General Privacy Policy.