WebTools

Privacy policy

Effective date: [EFFECTIVE DATE]

This policy explains what personal data WebTools processes, why, for how long, and what rights you have. WebTools is operated by [COMPANY NAME], [REGISTERED ADDRESS] (“we”), the data controller. Contact: [PRIVACY EMAIL].

What we process and why

  • When you use the website checker or the tools: the domain you enter, the time, and your IP address. We use your IP address in hashed form to apply daily limits and to stop abuse. Legal basis: our legitimate interest in running a secure, fair service (GDPR Art. 6(1)(f)). Tools marked “Runs in your browser” don’t send what you type to us at all.
  • When you create an account: your email address, a hash of your password (never the password itself), your sign-ins, the reports you run, the domains you monitor and your account activity. Legal basis: providing the service you signed up for (Art. 6(1)(b)).
  • When you buy Pro: Paddle.com, our reseller, processes your payment details and invoices as an independent controller under its own privacy policy. We receive your subscription status, the amounts paid and a customer ID, which we need to provide Pro and keep accounting records (Art. 6(1)(b) and (c)).
  • Emails: we send emails you ask for (invitations, password resets, monitoring alerts) and essential account messages. We don’t send marketing emails without your consent.
  • Screenshots of checked websites: to show a preview of the homepage you check, we send that page's public address (not your own data) to the WordPress.com mShots screenshot service run by Automattic Inc., which returns an image of the page.
  • Analytics and ads, only with your consent: if you accept cookies, Google Analytics measures how the site is used and Google AdSense may show personalised ads to free users (Art. 6(1)(a)). You can withdraw consent at any time with “Cookie settings” at the bottom of every page.
  • Security: server logs with IP addresses and request details help us detect attacks. Legal basis: legitimate interest (Art. 6(1)(f)).

How long we keep data

  • Usage counters for daily limits: 30 days.
  • Cached check results: a few minutes; saved reports in your account: until you delete your account.
  • Account data, activity log and monitors: while your account exists, then deleted within 30 days.
  • Payment records: as long as accounting law requires ([NUMBER] years in [COUNTRY]).
  • Server logs: [NUMBER] days.

Who processes data for us

  • Hosting: [HOSTING PROVIDER], [COUNTRY].
  • Cloudflare, Inc.: content delivery and protection against attacks.
  • Email delivery: [EMAIL PROVIDER].
  • Google Ireland Ltd. / Google LLC: Analytics and AdSense, only with your consent.
  • Paddle.com Market Limited: payments, as an independent controller.

Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, a copy in a portable format (your account page has a “Download my data” button), and you can object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time. Write to [PRIVACY EMAIL]; we answer within one month.

You also have the right to lodge a complaint with a data protection authority. In Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu); elsewhere in the EU, your local authority.

Children

WebTools isn’t directed at children under 16, and we don’t knowingly create accounts for them.

Changes

If we change this policy in a way that matters, we’ll update the effective date above and, for account holders, send an email.