Privacy policy

1. Data controller

The controller of personal data is REVIZE STUDIO sp. z o.o., ul. Młynarska 6, 59-800 Lubań, Poland, KRS 0001208852, tax ID (NIP) 6131598053 (“we”).

For anything related to personal data, write to kontakt@revize.pl.

2. Scope

This policy covers the sitelens website (“Website”), including the online audit, and contacting us. The sitelens terminal tool (“CLI”) runs on your computer and is described in a separate section.

3. What data, why and on what legal basis

• Visiting the Website: IP address, browser and device details, date and address of the visited page, technically recorded in server logs. Purpose: delivering the Website, its security and detecting abuse. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Online audit: the address of the checked website, IP address, technical data Cloudflare Turnstile needs to tell humans from bots, and technical data of requests to our proxy server (without content or results). Purpose: running the audit at your request and protecting against abuse. Legal basis: performing the service (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
• Content of the checked website: public pages may contain personal data, such as names and contact details. The proxy server fetches them only for the audit and stores nothing; the analysis runs in your browser. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Contact and complaints: email address, name and message content. Purpose: replying, handling complaints and defending against claims. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, for complaints, also performing the service and legal obligations (Art. 6(1)(b) and (c) GDPR).

4. What we do not do

We use no cookies, analytics tools or advertising pixels. We do not profile you, sell data or make automated decisions with legal effects about you (Art. 22 GDPR). The audit automatically assesses websites, not people.

5. Browser storage

In your browser storage (localStorage) we keep the theme you chose: light or dark.

If you enter your own Google PageSpeed Insights or Anthropic key, it stays in your browser: in sessionStorage until you close the tab, or in localStorage if you tick “Remember on this device”. We never send it to our server, and you can delete it at any time.

On the audit page, Cloudflare Turnstile may store data in your browser that is needed to confirm a human is using it.

This storage is strictly necessary for features you choose to use, so it does not require consent under Polish electronic communications law.

6. Recipients

• the Website hosting provider,
• Cloudflare, Inc. – the proxy server (Cloudflare Workers) and bot protection (Turnstile),
• Google LLC and Google Ireland Limited – the checked website address goes to PageSpeed Insights,
• Anthropic PBC – only when you use AI features with your own key; you then send the data straight from your browser and Anthropic processes it under its own terms,
• GitHub, Inc. – when you visit the sitelens repository,
• our email provider – for correspondence,
• public authorities – only where the law requires it.

7. Transfers outside the EEA

Cloudflare, Google, Anthropic and GitHub may process data in the United States. Transfers rely on the European Commission adequacy decision (EU-US Data Privacy Framework) for certified companies, or on standard contractual clauses approved by the European Commission.

8. How long we keep data

• content of checked websites and audit results – not stored at all,
• technical logs – for the period set by the hosting provider and Cloudflare, no longer than needed for security,
• correspondence and complaints – until the matter is closed, then until claims become time-barred,
• data in your browser – until you delete it.

9. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability (where processing is based on a contract) and to object to processing based on legitimate interest.

To exercise these rights, write to kontakt@revize.pl. We reply within one month.

You may also lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

10. Do you have to provide data

Providing the address of the website to check is voluntary, but we cannot run the audit without it. Providing data in correspondence is voluntary.

11. The terminal tool

The CLI runs entirely on your computer and sends us no data. The website address goes to Google only if you use the --psi-key option, and selected parts of the content go to Anthropic only with the --ai option. Downloading the package through npm is subject to the terms of npm, Inc.

12. Security

The Website runs over HTTPS only and has a strict content security policy (CSP). We collect only the data needed to provide the services, we do not store audit results, and the proxy server does not connect to addresses in private networks.

13. Changes to this policy

The current version is always available on the Website with its effective date. We announce material changes on the Website.