Today, some websites offer to calculate a price for a human being by cross-referencing physical data, lifestyle habits, or professional skills. The concept, often presented in a playful tone, raises real questions about the boundary between digital entertainment and profiling. The European legal framework, strengthened since 2025, draws clear red lines around these practices.
Social score and human estimation: what the EU AI Act prohibits since 2025
Before even discussing recreational sites, it is essential to establish the regulatory framework that applies to any form of automated assessment of a person. Regulation (EU) 2024/1689, better known as the EU AI Act, has prohibited since February 2025 the use of AI systems to assign a global reliability or social value score to an individual.
This prohibition targets both public and private actors, as long as the score leads to unfavorable treatment in a context unrelated to the data collected. In other words, aggregating a person’s online behavior to deduce their “value” and then denying them a service or contract constitutes a prohibited practice on European soil.
The text does not only target state devices inspired by the Chinese social credit system. It also covers commercial scoring tools that would rank customers or candidates based on a global “reliability” indicator calculated by an algorithm. The distinction between a harmless online quiz and a real profiling system lies in the use made of the result.
The question of how much I am worth online takes on a different turn depending on whether we are talking about a viral game or a tool feeding into an automated decision.
GDPR and automated decision-making: the filter of Article 22
The EU AI Act does not operate alone. Article 22 of the GDPR generally prohibits a person from being subject to a decision based solely on automated processing, including profiling, when that decision produces legal or significant effects. There are three exceptions: the performance of a contract, a specific legal basis, or the explicit consent of the individual concerned.
In practice, this means that an employer using an online tool to “estimate the value” of a candidate and basing a hiring refusal on that result would be in violation. The same reasoning applies to an insurer adjusting a premium based on a “personal value” score calculated automatically.
Commercial profiling and lead scoring
Lead scoring, common in customer relationship management software, assigns a score to a prospect based on their digital behavior. This practice is not prohibited in itself, but it falls under the GDPR as soon as it leads to automated decisions that have a significant impact on the individual.
Field reports diverge on this point: some companies consider scoring to be a simple tool to aid human decision-making, while data protection authorities examine the reality of effective human control.
The CNIL monitors these devices and reminds us that profiling requires clear information for the individual concerned, a right to access the data used, and the possibility to contest the decision.
Human value estimation sites: entertainment or data collection
Several sites offer to answer a questionnaire (age, height, education level, income, health status) to obtain a “price” in dollars or euros. The tone is deliberately offbeat. The results have no scientific or economic validity.
The real issue is not the displayed figure, but what happens behind the scenes. Each completed form generates personal data: health information, consumption habits, location. These data have a very real market value in the targeted advertising market.
- Health data (declared illnesses, alcohol consumption, physical activity) are among the most sensitive categories under the GDPR and require explicit consent for any processing.
- Socio-economic information (income, degrees, family situation) feeds advertising profiles resold to agencies or data brokers.
- Browsing metadata (IP address, browser type, session duration) allows for cross-site tracking even without registration.
A user playing “estimate your value” freely provides a digital portrait that companies would pay to obtain. The estimated product itself becomes the exploited data.
Ethical limits of algorithmic calculation applied to individuals
Reducing an individual to a number, even in a playful manner, reproduces a logic of hierarchy that becomes problematic when transposed outside the playful context. The criteria used by these sites (physical appearance, income, degrees) reflect measurable social biases: a person with a disability or without a degree mechanically receives a lower “price.”
The available data do not allow us to conclude that these tools directly influence an individual’s self-perception. However, the normalization of human quantification paves the way for much less innocuous uses.
From viral quiz to professional scoring
The boundary between online gaming and recruitment or insurance tools is more porous than it seems. Companies are developing “people analytics” solutions that cross-reference a candidate’s public data (social media, publications, online reviews) to calculate a compatibility or reliability indicator. The EU AI Act classifies these systems as high-risk uses when they intervene in recruitment, access to credit, or insurance.
The transparency required by the European regulation mandates that anyone subject to such a system be informed of its existence, the data used, and the underlying logic. The guidelines published by the European Commission on Article 50 of the AI Act, concerning transparency obligations, specify these requirements for general-purpose AI systems.
- The obligation to indicate that content or a decision is generated or assisted by AI applies to all AI system providers in the European market.
- High-risk systems must provide technical documentation accessible to supervisory authorities.
- Affected individuals retain a right to contest and human intervention in the decision-making process.
Estimating a person’s value online remains, in most cases, an exercise without direct consequences. The real question concerns the data collected on this occasion and their reuse in opaque circuits. The European framework sets solid safeguards, but their application depends on the vigilance of users as much as on that of regulators.