What we collect, why, where it is stored, for how long, and what we have deliberately chosen not to collect.
The controller is the publisher of the site, identified in the legal notice, reachable at the contact address given there.
No data protection officer has been appointed: the activity does not fall within the cases making such an appointment mandatory. Requests relating to data are handled directly by the publisher.
We collect only what is necessary for the service to work.
Each processing operation rests on an identified legal basis.
| Purpose | Legal basis |
|---|---|
| Create and manage your account, run the analyses | Performance of the contract |
| Invoice, collect payment, keep the accounts | Legal obligation |
| Send the emails related to the service | Performance of the contract |
| Secure the service, prevent fraud and abuse | Legitimate interest |
| Produce aggregated statistics with no personal data | Legitimate interest |
| Measure the audience of the site | Consent |
Each analysis records the address of the site examined and the report produced, attached to your account, so that you can find them again and follow how they change.
Separately, the analyses feed a statistical data set designed from the outset to contain NO personal data: domain extension, country, language, content management system, commerce platform, score and detail of the checks. Neither email address nor IP address in clear form appears in it, and the link to the account is detachable.
This data set may be used to publish public studies on the state of readiness of websites. Its design guarantees that no user and no client can be identified in it.
Some data passes through the service without ever being stored.
We use the following providers, each accessing only the data necessary for its task.
| Provider | Role | Location of the processing |
|---|---|---|
| Hostinger International Ltd | Hosting of the site and of the database | Company established in Cyprus, servers located in the United States |
| Stripe | Payment processing and invoicing | European Union and United States |
| Titan | Sending of the emails related to the service | Depending on the provider's region |
| Sign in with a Google account, and audience measurement subject to consent | European Union and United States |
The servers hosting this site are physically located in the United States. Your account data and your reports are therefore stored there, outside the European Union.
These transfers are governed by the mechanisms provided for in chapter V of the General Data Protection Regulation, in particular the standard contractual clauses of the European Commission and, where applicable, the adequacy decision applicable to certified United States entities.
We prefer to write it plainly rather than leave it to be guessed: if hosting your data outside Europe does not suit you, do not open an account, and write to us, that information is useful to us.
Data is not kept indefinitely.
| Data | Period |
|---|---|
| Account and associated reports | Lifetime of the account, then deletion within thirty days after closure |
| Invoices and accounting records | Ten years, in application of accounting obligations |
| Technical server logs | Twelve months at most |
| Aggregated statistics with no personal data | No limit, this data not being personal |
| Proof of consent to cookies | Six months |
The site places two categories of files.
Your choice is kept in your browser's local storage, under the key r2g-consent, and not in a cookie sent to the server. You can change that choice at any time from the button further down this page.
Refusing causes no degradation: the site and all the tools work identically.
Exchanges are encrypted in transit by TLS. Passwords are stored as non reversible hashes. The access keys to third party services are encrypted in the database.
Access to the administration area is restricted and protected by authentication. No measure guarantees absolute security: in the event of a data breach likely to result in a high risk to your rights, you would be informed in accordance with article 34 of the Regulation.
You have the following rights over the data concerning you.
These rights are exercised by email to the contact address of the site. We reply within one month, extendable by two months for complex requests, in which case you are informed of it.
If a reply does not satisfy you, you may lodge a complaint with the competent supervisory authority. In France, this is the Commission nationale de l'informatique et des libertés. Residents of another Member State may refer the matter to the authority of their own country.
The service is aimed at professionals and is not intended for persons under sixteen. We do not knowingly collect data relating to minors. Should such collection be brought to our attention, the data would be deleted without delay.
This policy may be updated to reflect a change in the service or in the regulations. The date of the last update appears at the bottom of this page. A substantial change in the purposes would give rise to specific information and, if necessary, to a fresh collection of consent.
You can change your decision at any time. The bubble will reappear the next time a page loads.
Last updated: 13 October 2026