Draft: this page contains placeholders and has not been legally reviewed yet.

Privacy policy

Controller

[PLACEHOLDER: as in the imprint]

Data we process

Account: email address, language, agency name. Purpose: performance of contract (Art. 6(1)(b) GDPR).

Monitoring: client names, website addresses and expected texts you enter, and check results (status code, response time, error code, certificate expiry). Page content is processed only briefly for the check and not stored. Check results are deleted after 30 days; incident history is kept until the website is deleted.

Sign-in: sign-in links are stored only as hashes and deleted after one day; sessions expire after 30 days.

Server logs: [PLACEHOLDER: IP addresses in the reverse proxy log, retention e.g. 7 days]. Purpose: security and abuse prevention (Art. 6(1)(f) GDPR).

Cookies: only strictly necessary cookies for sign-in (sid) and language (lang). No tracking, no analytics.

Recipients and processors

Hosting: [PLACEHOLDER].

Email delivery: [PLACEHOLDER].

Payments: Stripe Payments Europe Ltd., Ireland. Card data is processed only by Stripe, never by us.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. Contact: [PLACEHOLDER].