Privacy notice for the classification challenge

Last updated 21 October 2026

Who is responsible

Cnxion Customs and Logistics AB, org. no. 559468-7641, Bräcke Ödsmål 2, 457 41 Fjällbacka, Sweden, is responsible for the personal data described here. Contact us about privacy at support@cnxion.io.

What we collect

• Your rounds: the tariff you chose, the questions you got, your answers, how long each answer took and your score. A round is not linked to you unless you add your name to the high scores.
• The name you enter for the high scores, if you do. It is shown to everyone who opens the quiz, so you may prefer a nickname.
• If you ask for your report: the details you enter in the form (name, work email address, company, job title if you give it, and country), linked to the round the report is about.
• Whether you agreed to receive marketing emails, with the wording you agreed to and when.
• Technical data needed to protect the quiz and the form against abuse: your IP address and the result of the security check.

Why we use it, and on what legal basis

• To run the game you play: score your answers and show the high scores. Legal basis: providing the service you asked for (GDPR article 6(1)(b)).
• To send you the report you asked for and record that you asked for it. Legal basis: steps taken at your request (article 6(1)(b)).
• To follow up on your request, for example by contacting you about customs classification and how CNXION can help. Legal basis: our legitimate interest in following up on a business enquiry (article 6(1)(f)). You can object at any time.
• To send you marketing emails, only if you ticked the consent box. Legal basis: your consent (article 6(1)(a)). You can withdraw it at any time through the unsubscribe link in each email.
• To improve the questions, for example to find questions that almost everyone gets wrong. We look only at answers, never at who gave them. Legal basis: our legitimate interest in a correct and fair quiz (article 6(1)(f)).
• To protect the quiz against spam and abuse. Legal basis: our legitimate interest in keeping the service secure (article 6(1)(f)).

Who processes the data for us

• Microsoft (Azure): hosting of this website, our server and the quiz database, in the Netherlands.
• Twilio SendGrid: sending the report email.
• Cloudflare (Turnstile): checking that the high-score name and the report form are filled in by a person, not a bot.
• HubSpot: our customer relationship management system, where your report request is stored, in Germany.
• Datadog: technical logs of our server, used to find and fix errors, stored in Germany. They contain no personal data, with two exceptions: the IP address of a visitor who sends too many requests in a short time, and, when your report request could not be completed, the details you entered, so that we can still complete it.

These providers process the data on our behalf under data processing agreements. Microsoft, HubSpot and Datadog store it in the EU, but their US parent companies may access some of it from the United States, for example for support. Twilio SendGrid and Cloudflare may process it in the United States. All five US companies are certified under the EU–US Data Privacy Framework, and their agreements also include the European Commission's standard contractual clauses, which apply if the Framework cannot be used.

How long we keep it

• Your name on the high scores: as long as the quiz is online, or until you ask us to remove it.
• Your report request: up to 12 months after your last contact with us, unless you become a customer or give consent to marketing.
• Marketing consent: until you withdraw it.
• Technical security data and server logs: up to 90 days.

Cookies and browser storage

This website does not set cookies and does not use tracking or analytics.

The quiz keeps nothing in your browser. A round in progress ends when you leave or reload the page.

The Cloudflare security check is loaded on the quiz page, so Cloudflare receives your IP address when you open that page. When you add your name to the high scores or ask for your report, it checks that you are a person, using your IP address, a technical fingerprint of your browser's secure connection, your browser's user agent, and our site key and web address. It stores one value, cf.turnstile.u, in your browser's local storage under Cloudflare's own domain (challenges.cloudflare.com); it sets no cookies. This is strictly necessary to protect the high scores and the form, so it does not require your consent. Cloudflare also uses these signals, as an independent controller, to improve its bot detection; see Cloudflare's Turnstile privacy addendum.

Your rights

You have the right to access your personal data and to have it corrected or deleted. You can also ask us to restrict how we use it, ask for a copy in a portable format, and object to our use of it. To use your rights, for example to have your name removed from the high scores, email support@cnxion.io.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the data protection authority where you live or work.