Privacy Policy
Last updated: 10 October 2026 (full report by email; PDF download added)
This policy explains how AuditMagnet (webaudit.jalcocertech.com) handles the information you submit when requesting a website audit. It is operated by JAlcocerTech – Jesús Alcocer Tagua, a sole proprietorship registered in Poland. For anything about your data: [email protected].
1. Information We Collect
When you request an audit, we collect:
- Name and email address
- The website URL submitted for analysis
- Audit scores, diagnostics, technical findings and generated report metadata
- Your choices: acceptance of the Terms and this policy (required to run an audit) and, separately, the optional marketing box
- The page you came from and the country your connection comes from (as reported by Cloudflare)
The audit engine fetches public pages, headers, robots.txt, sitemap.xml and linked public assets from the submitted website.
2. How We Use Information
- To generate the requested audit report and show it in your browser.
- To keep a record of the audits you requested (your details and an audit summary: overall and category scores, detected platform).
- To contact you about the submitted site in reply to your request.
- Only if you ask for the full report: to email you a confirmation link and, after you confirm, run a deeper audit (including a check of every link, up to three levels from the homepage) and email you a link to the report. Not asking for it never affects your audit.
- Only if you tick the optional box: to send occasional website tips and offers. You first get one email asking you to confirm (double opt-in); nothing is sent until you do, and every email has a one-click unsubscribe link. Not ticking it never affects your audit.
Legal bases (GDPR): your request (Art. 6(1)(b)) for the audit and the reply; your consent (Art. 6(1)(a)) for tips and offers; our legitimate interest (Art. 6(1)(f)) in running a secure service and in respecting unsubscribes.
3. Where It Is Stored
| Who | What for | Data |
|---|---|---|
| Our own server in Poland | Runs the audits and holds the temporary report files; keeps a backup copy of our lead records | Report files; a copy of your submission |
| Cloudflare, Inc. | Hosting/proxy, security, our central lead inbox (Workers KV): your submission and an audit summary (overall and category scores, detected platform) | Request data; your submission |
| Mailjet (Sinch Mailjet SAS, France) | Only if you asked for the full report or ticked the optional box: the confirmation emails, the report email and tips, from news.jalcocertech.com; open and click tracking switched off | Your email and the email’s content |
| Our own notification server | A heads-up that an audit was requested | The score and your email domain only |
Cloudflare may process data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Booking a call happens on consulting.jalcocertech.com, which has its own privacy policy (Cal.com, Stripe).
4. Retention
- Report links are tokenized and expire after 24 hours.
- Full reports by email are stored on our own server behind an unguessable link for 7 days, then deleted; the request record (your email and the audited site, used to send it) is deleted after 8 days.
- Generated report files are deleted automatically after 7 days.
- PDF copies: any report can be downloaded as a PDF while its link is valid. Our copy of the PDF is deleted together with the report; the file you download is yours to keep.
- Lead and audit records are kept for up to 24 months after your last audit, then deleted.
- Tips and offers: until you unsubscribe, then deleted 30 days later; sign-ups you never confirm are deleted after 30 days. After an unsubscribe we keep only a one-way fingerprint (SHA-256 hash) of your address so it is never emailed again.
5. Your Rights
You can ask for access, correction, deletion or a copy of your data, object to its use, or withdraw consent at any time by writing to [email protected]. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
6. Security
We apply reasonable technical controls, including server-side URL validation (no private or internal targets), rate limiting, expiring report tokens and environment-based secrets. No automated audit tool can guarantee that a website is secure or compliant.