Privacy notice
Your data,
plainly explained.
This notice explains how Mathias Storm handles personal data when you use this website or request a website audit. It was last updated on 26 August 2026.
Who is responsible
Mathias Storm is the data controller for the information described here. Questions, access requests, corrections, deletion requests and consent withdrawals can be sent to hello@mathiasstorm.com.
What the audit collects
When you request the full audit plan, the service stores your email address, optional first name, submitted website URL, audit scores and findings, the date and time, available campaign parameters and referring page, and whether you separately chose to receive occasional marketing emails. The website does not ask for phone numbers, payment information or special-category personal data.
Why it is used
Your submitted website URL is processed to run the audit. Your email is used to deliver the report you requested and to respond about that audit. These activities are necessary to provide the requested service or take steps at your request. Marketing emails are a separate purpose and are only permitted when you actively select the optional consent box.
Service providers
Cloudflare provides website hosting and database storage. Google PageSpeed Insights receives the public website URL to perform the Lighthouse analysis. Resend processes the email address and report content to deliver the requested message. These providers process information under their own security and data-processing terms, which may include approved mechanisms for international transfers.
Retention
Unclaimed audit runs expire after 24 hours. Audit lead records and consent evidence are retained for up to 12 months, then removed during routine database maintenance. You can request earlier deletion at any time. If you withdraw optional marketing consent, future marketing stops; limited suppression information may be retained when necessary to respect that choice.
Your EU rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection. Consent can be withdrawn at any time without affecting earlier lawful processing. You may also complain to the Spanish Data Protection Agency or the supervisory authority where you live or work.
Automated decisions and cookies
The audit score is generated automatically from Lighthouse measurements, but it is informational and is not used to make a legal or similarly significant decision about you. The audit funnel does not require advertising cookies. If optional analytics or advertising tools are added later, this notice and the consent controls must be updated before those tools are enabled.