I take your privacy seriously

Data controller and contact. John Andersen, Webstudiet, is responsible for the processing described here. Questions and privacy requests can be sent to ja@webstudiet.com or through the contact page at webstudiet.com/contact/.

Contact form and enquiries. When you use the contact form, I receive your name, email address, optional project URL, message, and selected language. Resend processes these fields to deliver the email. Cloudflare Turnstile may process the challenge token, IP address, and technical request data to prevent spam and abuse.

URL analyzer. When you submit a public URL, the analyzer fetches that page and checks its HTML, response headers, redirects, DNS, robots and sitemap signals. Your IP address is used temporarily to enforce a limit of five analyses per hour and may be sent to Cloudflare Turnstile for abuse prevention. Completed results, including the submitted and final URL, may be cached for up to 24 hours. The analyzer may request supporting evidence from Google PageSpeed Insights, MDN HTTP Observatory, Cloudflare DNS, and the website being analyzed. Do not submit private URLs, credentials, tokens, or addresses that should not be fetched by these services.

Browsing and security data. Cloudflare hosts and protects the website. Like other hosting and security providers, it may process IP addresses, request headers, timestamps, requested paths, and security events needed to deliver the site, prevent abuse, and diagnose faults.

Cookies and local storage. The site stores only your light or dark theme preference in local storage. It does not store contact-form entries in your browser. Cloudflare Turnstile may use technically necessary browser storage or cookies when performing a security challenge. No advertising, cross-site profiling, or audience analytics scripts are currently installed. If that changes, this policy and any required consent controls will be updated first.

Why the data is used. Contact details are used to answer your enquiry, prepare requested work, and communicate about a possible or active contract. Technical request data, rate limiting, caching, and Turnstile are used to secure and operate the website and analyzer. These activities rely on steps requested before a contract, performance of a contract, legal obligations where applicable, and Webstudiet's legitimate interests in providing a secure and reliable service. Consent is used only where a feature specifically asks for it.

AI-assisted work. I may use AI-assisted development or writing tools for analysis, code review, debugging, drafting, or summarising public and technical material. I do not intentionally send confidential client material, credentials, private customer data, or sensitive personal data to AI tools without agreement. AI output is reviewed before use, and no automated decisions with legal or similarly significant effects are made about clients or visitors.

Service providers and processors. The main providers used for the public website are Cloudflare for hosting, security, caching, DNS and Turnstile; Resend for contact-email delivery; Google PageSpeed Insights and MDN HTTP Observatory for optional analyzer evidence; and the operators of any website submitted to the analyzer. Providers may process data outside your country. Where data-protection transfer rules apply, the transfer relies on the provider's applicable contractual and legal safeguards. I do not sell personal data.

Data retention. Analyzer results are cached for no more than 24 hours. The IP-based rate limiter uses temporary runtime memory for one-hour counting windows; entries are overwritten after an expired window is used again or discarded when the runtime is recycled. Contact messages and project correspondence are kept only while needed to answer the enquiry, deliver the work, document the relationship, or meet applicable accounting and legal obligations. Provider security and delivery logs follow the provider's configured or contractual retention periods. Your theme preference remains in your own browser until you clear it.

Your rights. Depending on the law that applies, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent where consent is the legal basis. A request may be limited where retention or processing is required by law or necessary to establish, exercise, or defend a legal claim.

Complaints and questions. Send questions or requests to ja@webstudiet.com. You may also complain to the data-protection authority responsible for your location. In Denmark, that authority is Datatilsynet at datatilsynet.dk.

Policy updates. This policy was last updated on 20 July 2026. It will be revised when the website's processing, providers, or legal obligations change materially.