Privacy

What we keep, and why

The domain you measure, and its result

They are kept with the date. This is the domain’s public history: it lets you compare one measurement with the next. If a domain carries a person’s name, that person can ask for its history to be removed at the address below.

A screenshot of the measured homepage

During the audit, our browser takes a screenshot of the top of the homepage to show it to you. It may contain names or photos: it is deleted six hours later, and is never indexed.

A screenshot taken while you type

To save time, this screenshot may be taken as soon as you have typed a complete address, before you click. Only your connection can see it, and nothing is recorded as a measurement. It is deleted after ten minutes if you don’t start the audit.

A fingerprint of your connection

To limit the number of audits per visitor, your IP address is turned into an unreadable fingerprint. The address itself is not kept with the measurement.

Audience measurement

We count visits with a measurement tool installed on our own server, with no cookie and no personal identifier. Nothing goes to any advertising third party. To check that pages display quickly, we also measure, during your visit, the page’s display time, responsiveness and stability, with its path and the kind of element involved, and add them to this audience measurement. These are anonymous durations, with no cookie.

Your email address, if you ask for the ChatGPT test

It is used to send you the answers. To prepare them, the domain and public extracts of the site are sent to OpenAI, which runs ChatGPT. Your email address is never sent to it.

Your email address, if you ask for an alert

It is used to notify you when a domain’s measurement changes, after confirmation through a link sent to that address. No newsletter, no sales follow-up. Every message carries an immediate stop link, which erases the address.

Your messages through the contact form

Your name, email address and message are kept so we can answer you, with a fingerprint of your connection to slow down robots.

Server logs

They serve the security of the service and are never cross-referenced with measurements.

Your account, if you create one

Your email address, the language of your emails, your plan (the free account), the creation date and the date of your last visit. They are used to sign you in and to follow your sites: this is the performance of the service you ask for. The account is created the first time you sign in.

Sign-in codes

To sign in, without a password, you receive a six-digit code and a button by email. They are valid for ten minutes and work only once. We keep only an unreadable fingerprint of them.

Cookies

The site only sets strictly necessary cookies. All of them carry the __Host- prefix: they only apply to ovenir.com, only travel over https and cannot be read by the page’s scripts.

• __Host-session: keeps you signed in (thirty days without a visit, ninety days at most);
• __Host-defi: ties a sign-in code to the browser that asked for it (ten minutes);
• __Host-pk: for the length of a passkey sign-in (five minutes);
• __Host-oidc: for the length of a sign-in with Google or Apple (ten minutes).

None is used for advertising or analytics: they do not require consent.

What your browser keeps itself

A few settings stay in your browser and are never sent to us: the address you just typed, while you move from one tool to another, and the full-screen view (session storage, cleared when you close the tab); the date you answered “later” to the passkey suggestion (local storage). You clear them with the site’s data, in your browser’s settings.

Your followed sites and their audits

The sites you follow, and the audits run from your account or while you are signed in, are linked to your account so you can find your scores again.

The sign-in log

For the security of your account: the date of each code request, sign-in and sign-out, a fingerprint of your IP address and the type of browser. This is our legitimate interest in protecting your account.

Your subscription, if you take one

The plan, the interval (month or year), the status and the dates of the subscription, as Stripe reports them. Stripe sells the subscription as the official seller: it receives your email address and your account identifier, and processes the payment. We never see your card. When you ask for the subscription to start right away, we keep the date of that request and the version of the terms accepted.

Your sites’ history

The score of each measurement of your followed sites, the list of findings (to compare two measurements) and the notes you write.

Follow-up emails

A summary (every week, every month on a free account), and alerts on a paid plan. They are on by default; each message carries a link to turn them off in one click, and so do your settings.

The badge, if you place it

Agence plan: a followed site’s badge publicly shows its domain, its score and the date of its latest measurement, and leads to a verification page showing the same items. You can remove it at any time: it stops showing within the hour.

The public link, if you create one

Agence plan: anyone with the link sees, read only, the site’s latest full result for each tool. The link is not indexed by search engines. You can remove it at any time: it stops working right away.

Your measurement PDFs, and your agency’s brand

A measurement’s PDF is made on request and kept as long as the measurement exists. On the Agence plan, the name, color and logo you set (re-encoded, without its metadata) are used only in your PDFs; you can remove them at any time, and they go with the account.

Your team, if you form one

Agence plan: you invite up to two people by email. You see their address and their role; they see your followed sites according to that role, with their own account. An invitation is valid for seven days; a removed member loses access right away.

Your passkeys, if you create any

To sign in without a code, with the device you are holding. We keep each passkey’s public key, its identifier, a counter, the name you give it and its dates. Your fingerprint or face never leave your device. You can remove a passkey at any time; email always remains a way to sign in.

Signing in with Google or Apple, if you choose to

Google or Apple send us the identifier of your account with them and your email address, with the indication that it is verified; nothing else is kept. A verified address joins the Ovenir account of that address. If Apple hides your address, the account created uses Apple’s relay address, separate from any other account.

Each processing activity, its legal basis and retention

The retention periods below are applied every day by the service’s code, not just written here.

Measurements of a domain

To give you the result and keep the domain’s history. Legal basis: our legitimate interest in reading, for whoever asks, pages the site itself publishes. Retention: as long as the domain’s history exists. What the measurement copies from the site it reads (an email address, phone number or postal address the site publishes) is erased thirty days after a measurement made without an account.

Homepage screenshots

To show you the page that was measured. Legal basis: legitimate interest. Retention: six hours, or ten minutes for a screenshot taken while you type.

Connection fingerprint and request log

To limit the number of audits per visitor and to be able to answer a complaint about an audit. Legal basis: legitimate interest (security of the service and of the sites we read). Retention: thirty days.

Your account

Your email address, language, preferences, tracked sites and their measurements, to provide the service you opened. Legal basis: performance of the contract. Retention: until the account is deleted, which you do yourself from the account. On a free account, a tracked site’s history keeps thirty days of measurements (ninety days after a subscription ends). An account with no sign-in for twenty-four months is deleted, after a notice sent two months before.

Sign-in sessions

To keep you signed in. Legal basis: performance of the contract. Retention: thirty days without a visit, ninety days at most.

Sign-in log

The date, the event (sign-in, wrong code, sign-out), a fingerprint of the IP address and the browser, to spot access that isn’t yours. Legal basis: legitimate interest (account security). Retention: one year.

Free audits

A fingerprint of your email address and of your network, so that free audits are only taken once. Legal basis: legitimate interest (preventing abuse). Retention: two years for the address, thirty days for the network.

Subscription

The plan, its status and your Stripe customer ID, to open the paid features. Stripe is the seller: it keeps the invoice and the payment under its own obligations. Legal basis: performance of the contract. Retention: until the account is deleted.

Proof that you waived the withdrawal period

The date, the version of the terms, the plan chosen and a fingerprint of the IP address, without any email address. Legal basis: legal obligation to prove your express consent. Retention: five years.

The ChatGPT trial

Your email address, to send you the answers you asked for. Legal basis: carrying out your request. Retention: thirty days.

Domain alerts, without an account

Your email address, to write to you when a domain’s measurement changes. Legal basis: your consent, given through the confirmation link and withdrawn through the stop link in every message. Retention: until you stop them. An alert that is never confirmed is erased after thirty days.

Your account’s alerts and summary

To write to you when a tracked site changes, and to send you the summary. Legal basis: performance of the contract. Every message has a one-click unsubscribe link. Retention: until you unsubscribe or delete the account.

Contact messages

Your name, email address and message, to answer you. Legal basis: legitimate interest in answering you. Retention: one year.

Audience measurement

A measurement tool installed on our own server counts page views without cookies, along with each page’s display time, responsiveness and stability. Your browser sends them to our own server, which passes your IP address and browser to that tool to derive the country and a visit ID; the tool doesn’t keep the IP address. Legal basis: legitimate interest; according to the CNIL, the French data protection authority, anonymous audience measurement without cross-referencing needs no consent.

Backups

A copy of the database every day, to restore it after a failure. Legal basis: legitimate interest (continuity of the service). Retention: seven days on the server.

Technical logs

The addresses requested from the server, without the tokens they carry, for the security of the service. Legal basis: legitimate interest (security). Retention: thirty days.

Who has access

The publisher, and the providers who run the service:

• Hostinger, for hosting (company in Cyprus, server located in Malaysia);
• Brevo, for sending emails, including sign-in codes;
• Stripe, for selling and charging the subscription (official seller);
• OpenAI, for the ChatGPT test, which receives the domain but never your email address.

No data is sold or shared.

Data security, and if there is a breach

What the service does to protect the data:

• Every connection to the site is encrypted: https is enforced.
• Sign-in codes and links, sessions and keys are kept only as an unreadable fingerprint; in the service’s database, your IP address is never kept as it is, only its fingerprint.
• Card numbers never go through our servers: payment happens at Stripe.
• The retention periods above are applied every day by the service’s program.
• A backup copy is made and checked every day; the last seven are kept.

The server is in Malaysia, where personal data is protected by the Personal Data Protection Act 2010. Stripe and OpenAI may process data in the United States.

If a data breach is likely to affect your rights, we report it to the competent authority (the CNIL within 72 hours, and the Japanese personal data protection authority) and we write to your account address, saying what happened, which data is involved and what you can do.

Transfers outside the European Union

Some data leaves the European Union:

• Malaysia: the site’s server, at Hostinger, holds all the data described here. Malaysia has no adequacy decision from the European Commission.
• United States: Stripe, for selling and paying the subscription, and OpenAI, for the ChatGPT trial (the domain and public excerpts of the site, never your email address).
• Japan: the publisher is based there and reads the data from there. Japan has an adequacy decision from the European Commission.

Your rights

For data about you, you have the rights of access, rectification, erasure, restriction of processing, objection and portability. When processing relies on your consent, you can withdraw it at any time, without affecting what was done before.

From your account, you can download your data and delete the account. For anything else, write to contact@ovenir.com: we answer within a month. If the answer doesn’t satisfy you, the CNIL, the French data protection authority, takes complaints at cnil.fr.