Privacy policy
This site keeps as little as it can. There are no analytics, no advertising, no tracking cookies, and nothing is passed to anyone for marketing.
Who is responsible
The data controller is Nicolas Figueira Mahe, NIF Z0472715R, Carrer del Canigó, 5, 08800 Vilanova i la Geltrú (Barcelona), España. Write to nico@newo.me about anything in this policy. We process your data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).
What we handle, why, and for how long
| When | What | Why, and on what basis | How long |
|---|---|---|---|
| You scan a site | The address you enter, and your IP address as a counter | To run the scan, and to stop one visitor exhausting a free tool. Legitimate interest (GDPR art. 6.1.f). | The result is not stored. The counter lasts its time window — minutes — and is then deleted by routine clean-up. |
| You sign in | Your email address; a one-time link, stored only as a fingerprint; a session cookie, a second one marking the browser that asked for the link, and a third marking a browser you have signed in from; your IP address as a counter, and a daily count of the links asked for each address, overall and from each network | To let you into your account at your request. Steps before a contract (art. 6.1.b). The counters, the browser markers, and an email that tells us the address when more links are asked for it in one day than we allow: legitimate interest in keeping sign-in from being misused (art. 6.1.f). | The link and the browser marker: until used, and at most 15 minutes. The counters: 15 minutes for the IP address, 24 hours for the email address. The marker of a browser you have signed in from: one year. The session: 30 days, or until you sign out. That email to us: deleted once dealt with. |
| You use your account | Your email address, when you joined and were last seen, the sites you add, what our assessment records about them, our quotes and your answers | To assess your site and hold our quote. Steps before a contract, and the contract (art. 6.1.b). | For as long as your account exists, and deleted when you ask. Invoices, and the records behind them, are kept for as long as Spanish tax and commercial law require. |
| You write to us | Your message and your address | To answer. Legitimate interest, or steps before a contract. | As long as the conversation, or the resulting contract, needs. |
An assessment records how a site is built — plugins, theme, form fields, page counts — and nothing about the people who use it.
During an assessment or a conversion
Access to your server or your WordPress could show us the personal data of your site's users and visitors. During an assessment we do not open, copy or keep any of it: the assessment reads how the site is built, not who uses it. During a conversion you are the controller of that data and we are your processor, under the data processing agreement (GDPR art. 28) that comes with every quote. This policy covers neither; the agreement covers the second.
Who else handles it
- Cloudflare®, Inc. hosts this site and its database, as our processor. Cloudflare may process data outside the European Economic Area, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
- Brevo (Sendinblue SAS, France) delivers sign-in emails, as our processor.
Nobody else receives your data, and nothing is sold.
Cookies and storage
Three cookies, all strictly necessary for a service you asked for, so none
needs consent (LSSI-CE art. 22.2): ews_session, set only when
you sign in, to keep you signed in; ews_signin, set when you
ask for a sign-in link, so that opening the link in the same browser signs
you in at once — it holds a fingerprint of the link, never the link, and
lasts 15 minutes; and ews_known, set when you sign in, so that
this browser can still get a link if somebody else uses up your address's
daily allowance — it holds a code that cannot be turned back into your
address, signs nobody in, and lasts one year. If you choose a colour theme, the choice is kept in your
browser's local storage as ews-theme and is never sent to us.
There are no other cookies.
Automated decisions
The scan's verdict is produced automatically, but it is an opinion about a website, not a decision about you. Every quote is written by a person.
Your rights
You can ask to see, correct, delete, restrict, or take away the data we hold about you, and object to how we use it. Write to nico@newo.me; we answer within one month. You can also complain to the Agencia Española de Protección de Datos (AEPD).
Last updated 29 October 2026.