Privacy Policy

Effective 6 November 2026.

Controller

The data controller is Kamil Obstawski (a natural person based in Poland). Contact: the e-mail address shown in the footer of the homepage.

What we process and why

  • Your e-mail and the audited website address – to perform the service and send the report (Art. 6(1)(b) GDPR) and to handle refunds and complaints.
  • Payment data – processed only by our payment provider Polar Software, Inc. as Merchant of Record; we never see your card number. We receive a payment confirmation, your e-mail and country.
  • IP address and browser identifier at order time – abuse prevention (Art. 6(1)(f) GDPR).
  • Free quick scan – we store the scanned address and the result (available at a random, unlisted URL for 7 days) and a hash of your IP address for 1 hour, solely to rate-limit scans (Art. 6(1)(f) GDPR). No e-mail is required.
  • Pre-launch requests (if you leave your e-mail before checkout opens) – solely to send you one payment link for your site (Art. 6(1)(b) and (f) GDPR).

We use no cookies and no tracking analytics. We send no newsletters and share no data for marketing.

Recipients

  • Polar Software, Inc. (USA) – payments and sales; Polar privacy policy.
  • Cloudflare, Inc. – hosting of the site and the order form.
  • Google LLC – the mailbox we send reports from.
  • Anthropic, PBC – the AI model that writes the recommendations; it receives the measurement results for your site (site address and technical data), not your e-mail.

Transfers outside the EEA rely on the EU-US Data Privacy Framework adequacy decision or the standard contractual clauses used by these providers.

Retention

Order data and the report are kept for 5 years from the end of the year of the order (tax obligations and legal claims). Pre-launch requests are deleted no later than 3 months after checkout opens. Technical logs are kept for up to 30 days.

Your rights

You have the right to access, rectify, erase, restrict and port your data and to object to processing based on legitimate interest. Send requests to the controller's e-mail. You may also lodge a complaint with your supervisory authority; in Poland this is the President of the Personal Data Protection Office (uodo.gov.pl).

Automated processing

The report is produced automatically, but we make no automated decisions with legal effects about you. The audit concerns your website, not you as a person.