Privacy notice
Your data,
plainly explained.
This notice explains how Mathias Storm handles personal data when you use this website or request a website audit. It was last updated on 22 September 2026.
Who is responsible
Mathias Storm is the data controller for the information described here. Questions, access requests, corrections, deletion requests and consent withdrawals can be sent to hello@mathiassstorm.com.
What the audit collects
When you request the full audit plan, the service stores your email address, optional first name, submitted website URL, audit scores and findings, the date and time, available campaign parameters and referring page, and whether you separately chose to receive occasional marketing emails. The audit does not ask for phone numbers, payment information or special-category personal data.
Free redesign requests
When you request a free homepage redesign, we store your website URL, name, email address, optional phone number, submission time, request status and available UTM campaign parameters. We use these details to review your website and respond about the redesign. Cloudflare stores the request, and Resend sends an internal email notification when configured. This request does not subscribe you to marketing emails. Contact hello@mathiassstorm.com to request deletion.
Project estimates
When you request a free estimate, we store your project description, email, optional name and website, selected project types, submission time, landing URL, referrer and available campaign parameters. These details are used to review and respond to your enquiry. Cloudflare stores the request and Resend delivers the internal notification. Requesting an estimate does not subscribe you to marketing emails. Contact hello@mathiassstorm.com to request deletion.
Visibility check requests
When you request a free Google + ChatGPT visibility check, we store your business name, website, email, submission time, landing URL, referrer and available campaign parameters. We use these details to check your business visibility and reply personally. Cloudflare stores the request and Resend delivers the internal notification. This does not subscribe you to marketing emails. Contact hello@mathiassstorm.com to request deletion.
Contact form and video review requests
When you send a message through the contact form, we store your name, email address, optional phone or WhatsApp number, the topic you chose, your message, the page you sent it from and the submission time. When you request a video review, we store your name, email address, website address, any notes you add, the page and the submission time. Cloudflare stores the message, and Resend, our email provider, processes it to deliver it to Mathias’s inbox. These details are only used to reply to you and to review your website if you asked for that. Sending a message does not subscribe you to marketing emails. Contact hello@mathiassstorm.com to request deletion.
Why it is used
Your submitted website URL is processed to run the audit. Your email is used to deliver the report you requested and to respond about that audit. These activities are necessary to provide the requested service or take steps at your request. Marketing emails are a separate purpose and are only permitted when you actively select the optional consent box.
Service providers
Cloudflare provides website hosting and database storage. Google PageSpeed Insights receives the public website URL to perform the Lighthouse analysis. Resend processes the email address and report content to deliver the requested message. These providers process information under their own security and data-processing terms, which may include approved mechanisms for international transfers.
Retention
Unclaimed audit runs expire after 24 hours. Audit lead records and consent evidence are retained for up to 12 months, then removed during routine database maintenance. You can request earlier deletion at any time. If you withdraw optional marketing consent, future marketing stops; limited suppression information may be retained when necessary to respect that choice.
Your EU rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection. Consent can be withdrawn at any time without affecting earlier lawful processing. You may also complain to the Spanish Data Protection Agency or the supervisory authority where you live or work.
Automated decisions and cookies
The audit score is generated automatically from Lighthouse measurements, but it is informational and is not used to make a legal or similarly significant decision about you. The audit funnel does not require advertising cookies. The project enquiry and visibility check pages use Meta Pixel to measure page visits, clicks on the enquiry button and successful submissions. Meta receives event and browser information and may use cookies for advertising measurement. The event data we explicitly send does not include the contents of your enquiry.