Privacy policy

Last updated: 21 July 2026

Privacy Checked is operated from the Netherlands ("we", "us"). This policy explains what personal data we collect when you use privacy-checked.com and our reporting service, why we collect it, and what rights you have.

What we collect

• Account data: email address and login credentials, stored with Supabase (hosted in the EU).
• Site-check data: the URLs you submit, the resulting scores, findings and screenshots.
• Payment data: handled entirely by Stripe. We never see or store your card details.
• Newsletter data: your email address, if you subscribe, processed by Brevo with double opt-in; the confirmation click is your consent record.
• Cookies and similar technologies: see our cookie policy for full detail.

Why we process it

• Contract performance: to create your account, run checks, and deliver reports you've requested or paid for.
• Consent: for the newsletter, and for analytics or marketing cookies, which only load after you choose to allow them.
• Legitimate interest: to keep the service secure, prevent abuse of the free tier, and maintain basic usage records.

Who we share data with

We use a small number of processors, each bound by a data processing agreement:

• Supabase (EU) for account data and site-check records.
• Stripe for payment processing.
• Brevo for double opt-in newsletter delivery.
• Google (GA4, Google Tag Manager) for analytics, only after you grant consent through the cookie banner.
• Our hosting provider, to serve the site itself.

We do not sell personal data.

International transfers

Our processors are EU-based or provide Standard Contractual Clauses where data may be processed outside the EEA.

How long we keep it

Account and site-check data is kept for as long as your account is active, plus a reasonable period afterwards to comply with legal, tax and security obligations. Payment records are kept as required by Dutch tax law. Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you can ask us to access, correct, delete, restrict or export your personal data, and you can object to certain processing. To exercise any of these rights, contact us at the address below. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Privacy Checked is a business tool and is not directed at children under 16.

Changes to this policy

We'll update this page if what we collect or why changes, and update the date at the top.

Contact

Questions or data requests: info@privacy-checked.com.