Privacy policy

Last updated 17 September 2026.

Information we process

• The website address you ask us to analyse.
• The email address you provide at payment, so we can send you the report.
• Support messages you send via the contact form (email, optional name, topic, message, and any order id or URL you include).
• Payment status and Stripe’s reference for the payment. Card details are handled only by Stripe.
• Content of the public website you ask us to analyse (publicly available HTML and text), which is sent to a language model for analysis.
• Technical logs (IP address, timestamp) for up to 30 days for operations and abuse prevention.

Purpose and legal basis

Processing is necessary to fulfil the contract with you (GDPR art. 6(1)(b)). Logs are processed on the basis of our legitimate interest in secure operations (art. 6(1)(f)).

Processors

• Stripe – payments.
• Cloudflare – hosting, queues, D1 database, and report storage.
• Resend – sending email.
• OpenRouter and the selected model provider – analysis of the website’s content. We do not send your personal details to the model, only the content of the site being analysed.
• Google PageSpeed Insights – performance measurement of the URL.

Some providers process data outside the EEA. Transfers are based on the European Commission’s standard contractual clauses.

Retention

The report and order details are stored for 12 months so you can reopen the report, then deleted. Accounting records are kept for five years.

Cookies

The site does not use tracking or marketing cookies. Stripe sets necessary cookies on the payment page. A session cookie is set if you sign in.

Your rights

Write to the contact form or hello@webvitalist.com. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Controller

The controller is the owner of WebVitalist. Contact: hello@webvitalist.com.