Privacy
Short version: no accounts, no ads, no tracking, no third-party scripts. We keep as little as we can, and you can ask us to delete what we have.
Who is responsible
The controller of your personal data under the EU General Data Protection Regulation (GDPR) is Yevhenii Kovalenko. For anything privacy-related, write to [email protected].
What we process, why, and for how long
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Server logs: IP address, time, requested URL, browser user agent | Running the site, security, fixing errors | Legitimate interest (Art. 6(1)(f)) | 14 days |
| Rate limiting: hashed IP address | Preventing abuse of the checker and forms | Legitimate interest (Art. 6(1)(f)) | Up to 1 hour (24 hours for likes) |
| Likes: a random token in a cookie; we store only its keyed hash, never your IP | Letting each visitor like a site once | Legitimate interest (Art. 6(1)(f)) — set only when you click like | Cookie 12 months; like until the site is removed |
| Page views: one number per day | Showing a view counter | No personal data | — |
| Checked websites: host name, scan dates, score and short technical findings from the public homepage | The service itself: public, shared results | Legitimate interest (Art. 6(1)(f)) — you can object, see below | Until the site's owner removes it |
| Submissions: your email, website, AI tool and category | Sending a confirmation link and listing your site | Performing the service you asked for (Art. 6(1)(b)) | Email: replaced by a one-way hash once you confirm or the submission is rejected; unconfirmed submissions are deleted after 7 days. Website, tool and category stay public until removed. |
| Removal requests: your email | Sending the removal link | Performing the service you asked for (Art. 6(1)(b)) | Not stored — used only to send the email |
We never sell data, show ads, build profiles or make automated decisions about people. The score describes code, not persons.
Cookies
We only use cookies the site needs to work: an encrypted session cookie and a security token for forms (both end with your session), and the like cookie described above, which is set only after you click like. We use no analytics, advertising or tracking cookies, so there is no cookie banner. Fonts and favicons are served from our own server, so your browser doesn't contact third parties when you visit.
Who else processes data
- Hosting — OVHcloud (OVH SAS), EU data centre: stores the database and server logs on our behalf.
- Resend (Resend, Inc.): delivers confirmation emails. Emails are processed in Resend's EU region.
- Buy Me a Coffee: only a link. Nothing is shared unless you click it, and then their privacy policy applies.
Website owners
We only read what any browser can see on a public homepage, and we don't store the page itself. If you own a checked website, you can remove it: we delete its results, likes and submissions, and it won't be checked here again. This is also how to exercise your right to object (Art. 21).
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability (Art. 15–21 GDPR). Because we don't run accounts, please tell us what to look for (for example the website and email you used). Write to [email protected]. We answer within one month.
You can also complain to a data protection authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority in your own EU country.
Changes
If this policy changes, we'll update this page. Last updated: .