Privacy policy
This policy describes what this service actually collects, where it is sent and how long it is kept. It was written by reading our own code, not from a template.
Last updated: July 27, 2026
1. Who controls the data
- Controller of the database: Dr. Digital, a sole licensed dealer (not an incorporated company)
- Licensed dealer (Israel) No.: 209546571
- Contact for privacy matters: aelgani.mhmd@gmail.com (email is our contact channel; the business has no premises open to the public)
- Phone / WhatsApp: 052-444-6528
2. What we collect, and why
| Data | When | Purpose |
|---|---|---|
| The website address you ask us to audit | When you start an audit, a comparison or a monitor | To run the audit and to produce and store the report |
| Your name, email address and (optionally) phone number | When you unlock a full report or send the consultation form | To deliver the report you asked for and to reply to your enquiry |
| The message and preferred contact method | Consultation form only | To answer the enquiry |
| The email address for monitoring | When you set up recurring monitoring | To send the scheduled result and score-change alerts |
| Your IP address | Every audit request | Rate limiting and abuse prevention (five audits per hour) |
| Your language choice | When you switch language | To show the site and the report in that language |
| Your accessibility and cookie preferences | When you set them | To keep the site the way you configured it |
We do not run analytics, advertising pixels, session recording, or profiling of any kind. We do not buy or sell personal data.
3. Who else processes the data
- Supabase — database and backend hosting. All audits, leads, consultation requests and monitors are stored there.
- Resend — transactional email delivery. Receives your email address and the contents of the report or alert email.
- Google PageSpeed Insights API — performance measurement. The address of the website you audit is transmitted to Google, which then fetches and renders that website in order to measure it. If you would rather Google did not see the address, do not audit it here.
- Cloudflare — serves the application itself; connection metadata such as your IP address is processed to route and protect the request.
4. Legal bases (GDPR)
- Performance of a contract — delivering the audit report, the comparison or the monitoring result you requested.
- Legitimate interest — rate limiting, abuse prevention and the security of the service; we keep your IP address only for as long as that purpose requires.
- Consent — sending you marketing or follow-up email beyond the report you asked for, and storing any non-essential preference. You may withdraw consent at any time; withdrawal does not affect processing carried out before you withdrew.
5. How long we keep it
- Audit reports and their findings: retained indefinitely, so that the permanent report link you were given keeps working and so that monitoring can compare against history. Ask us and we will delete a specific report.
- Lead and consultation details: retained while there is an active business relationship, and deleted on request.
- Monitoring records: retained until you unsubscribe, using the one-click link in every monitoring email; the record is then deactivated and deleted on request.
- IP addresses attached to audits: retained with the audit record. They are used only for the rolling one-hour rate-limit window.
Honest note: today the system has no automatic deletion job. Reports and the IP address stored with them stay until deleted on request. If you would prefer a fixed retention period with automatic deletion, tell us and we will implement it.
6. Your rights
You may ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, or withdraw a consent you gave. Write to aelgani.mhmd@gmail.com and we will respond within 30 days. You may also lodge a complaint with your supervisory authority.
7. Israeli privacy law — Amendment 13
Under the Protection of Privacy Law and Amendment 13 to it, in force since August 2025, we notify you of the following at the point of collection:
- Purpose of collection: to run the audit you requested, to send you the resulting report and monitoring alerts, to reply to your enquiry, and to protect the service from abuse.
- Identity of the controller of the database: Dr. Digital, licensed dealer (Israel) No. 209546571, contactable at aelgani.mhmd@gmail.com or 052-444-6528.
- Right of access: you have the right to inspect the information held about you and to demand its correction or deletion.
- Consequence of refusing to provide the information: you are under no legal obligation to give us any of it. If you do not provide the website address we cannot run an audit; if you do not provide an email address we cannot send you the report or monitoring alerts, and you can still read the report at its link on screen; if you do not provide a name or phone number we simply cannot contact you back. No other consequence follows from refusing.
8. International transfers
Our processors — Supabase, Resend, Google and Cloudflare — may store or process data outside Israel and outside the European Economic Area, including in the United States. Those transfers rely on the processors' standard contractual clauses and equivalent safeguards. Details of a specific processor's hosting region are available on request.
9. Cookies and local storage
This site sets no advertising or analytics cookies. It stores a small number of values in your browser's local storage in order to remember your language, your accessibility settings, your cookie choice and which reports you have unlocked. The cookie policy lists every one of them, with its purpose and its lifetime.
10. Security and changes
Data is held in an access-controlled database with row-level security; the personal fields on an audit record are not readable by the public report page. We may update this policy; the date below always reflects the current version, and a material change is announced in the cookie banner.
11. Marketing emails
Separately from the report itself, you may opt in to receive occasional practical tips on website speed, SEO and AI visibility. The checkbox is unticked by default and is never a condition of receiving your report or of booking a consultation — if you leave it unticked you still get everything you asked for.
- Legal basis: your consent (GDPR Art. 6(1)(a)) and the prior explicit consent required by section 30A of the Israeli Communications Law.
- What we record: whether you consented, the date and time, which form you used, and the exact wording you agreed to — that last item is what proves what was actually offered.
- Withdrawing consent: every marketing email carries a one-click unsubscribe link, and one click is enough — no login, no reason required. You can also write to aelgani.mhmd@gmail.com. Withdrawal takes effect immediately and does not affect anything you asked for before.
- If you did not consent, your details are still stored for the audit trail and so your report link keeps working, but you are excluded from every marketing list and export by default.
