Privacy Policy

Controller

Thomas Schwarz Ltd.
House 5
Drousia 8700
Paphos, Cyprus (CY)
Email: thomasschwarzltd.ai@gmail.com

Domain scan (home page / /scan)

When you run a scan we query only publicly accessible DNS records (SPF/DKIM/DMARC) and the status of public blacklists for the domain you entered. This request is NOT stored or logged server-side -- the results page is simply rendered back to you. Legal basis for the short-lived technical processing (connection data / IP address by Cloudflare as our hosting provider): Art. 6(1)(f) GDPR (legitimate interest in operating the website).

Feedback form

If you fill in the feedback form, we store the domain you entered, your message and -- if you provide it -- your email address in a Cloudflare D1 database (storage location within the EU or distributed worldwide depending on the Cloudflare configuration, see Cloudflare data processing below). Legal basis: Art. 6(1)(a) GDPR (consent, given by actively submitting the form). Retention period: feedback entries are deleted as soon as they are no longer needed for product development, and after 12 months at the latest.

Subscription waitlist

If you sign up on the results page via "Yes, tell me when the subscription launches", we store the email address you entered and optionally the scanned domain in a Cloudflare D1 database in order to contact you once the subscription is available. Legal basis: Art. 6(1)(a) GDPR (consent, given by actively submitting the form). Retention period: entries are deleted once either the subscription has launched and you have been contacted, or the idea has been dropped, and after 12 months at the latest.

Spam protection (Cloudflare Turnstile)

The feedback form is protected against automated abuse by Cloudflare Turnstile. In the process, technical characteristics of your browser are transmitted to Cloudflare (Cloudflare, Inc., USA). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in spam and abuse protection). Cloudflare acts as a processor on our behalf (Cloudflare's Data Processing Addendum); because Cloudflare, Inc. is based in the USA, this involves a transfer to a third country, safeguarded by the EU Standard Contractual Clauses.

Hosting (Cloudflare Workers)

This website is served via Cloudflare Workers. Simply loading a page means Cloudflare technically processes your IP address (for example for DDoS protection and routing), independently of the forms on this site. Here too Cloudflare acts as a processor, see above.

Your rights

You have the right to access, rectification, erasure and restriction of the processing of your data, as well as the right to lodge a complaint with a data protection supervisory authority. For contact details see the Legal Notice.