Privacy policy
This site keeps as little as it can. There are no analytics, no advertising, no tracking cookies, and nothing is passed to anyone for marketing.
Who is responsible
The data controller is [to be completed], NIF [to be completed], [to be completed]. Write to [to be completed] about anything in this policy.
What we handle, why, and for how long
| When | What | Why, and on what basis | How long |
|---|---|---|---|
| You scan a site | The address you enter, and your IP address as a counter | To run the scan, and to stop one visitor exhausting a free tool. Legitimate interest (GDPR art. 6.1.f). | The result is not stored. The counter lasts its time window — minutes — and is then deleted by routine clean-up. |
| You sign in | Your email address; a one-time link, stored only as a fingerprint; a session cookie; your IP address as a counter | To let you into your account at your request. Steps before a contract (art. 6.1.b); the counter, legitimate interest (art. 6.1.f). | The link: until used, and at most 15 minutes. The session: 30 days, or until you sign out. |
| You use your account | Your email address, when you joined and were last seen, the sites you add, what our assessment records about them, our quotes and your answers | To assess your site and hold our quote. Steps before a contract, and the contract (art. 6.1.b). | For as long as your account exists, and deleted when you ask. Invoices, and the records behind them, are kept for as long as Spanish tax and commercial law require. |
| You write to us | Your message and your address | To answer. Legitimate interest, or steps before a contract. | As long as the conversation, or the resulting contract, needs. |
An assessment records how a site is built — plugins, theme, form fields, page counts — and nothing about the people who use it.
During an assessment or a conversion
Access to your server or your WordPress could show us the personal data of your site's users and visitors. During an assessment we do not open, copy or keep any of it: the assessment reads how the site is built, not who uses it. During a conversion you are the controller of that data and we are your processor, under the data processing agreement (GDPR art. 28) that comes with every quote. This policy covers neither; the agreement covers the second.
Who else handles it
- Cloudflare®, Inc. hosts this site and its database, as our processor. Cloudflare may process data outside the European Economic Area, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
- Brevo (Sendinblue SAS, France) delivers sign-in emails, as our processor.
Nobody else receives your data, and nothing is sold.
Cookies and storage
One cookie, ews_session, set only when you sign in, to keep you
signed in. It is strictly necessary for a service you asked for, so it needs
no consent (LSSI-CE art. 22.2). If you choose a colour theme, the choice is
kept in your browser's local storage as ews-theme and is never
sent to us. There are no other cookies.
Automated decisions
The scan's verdict is produced automatically, but it is an opinion about a website, not a decision about you. Every quote is written by a person.
Your rights
You can ask to see, correct, delete, restrict, or take away the data we hold about you, and object to how we use it. Write to [to be completed]; we answer within one month. You can also complain to the Agencia Española de Protección de Datos (AEPD).
Last updated 18 September 2026.