lastupdate.site

Privacy policy

Effective .

Identity and contact

This privacy policy explains how lastupdate.site processes personal data when you use the website at lastupdate.site, the URL assessment tool, and any associated email or support communications. The data controller for this processing is Skadi Oy (Finnish Business ID FI28085739), Helsinki, Finland.

For privacy questions or to exercise the rights described below, contact timo@skadi.chat.

What we collect

Assessment requests

When you submit a URL for assessment, we process: the URL itself, the email address you provide, the timestamp, your IP address (for rate limiting and abuse prevention), and any UTM parameters present on the submission. We use this data to run the automated assessment, deliver the resulting report by email, and protect the service from abuse.

Crawled content

Our automated crawler fetches the public pages of the URL you submit (the URL itself, its sitemap, and a small sample of internal pages). We store structured findings about that crawl — page count, detected CMS, framework signals, image and JavaScript weight, and disqualifier flags. We do not store the full HTML of crawled pages beyond the duration of a single assessment job.

Analytics

We use Glyphex, a privacy-first analytics service that does not set cookies and does not collect personally identifying information. Glyphex stores aggregate page-view counts and anonymous visit metadata only. There is no user-level tracking.

Email and support

If you email us or reply to one of our messages, we process the contents of that message and your email address to respond to you. We use Resend as the outbound email provider for transactional notifications (assessment-ready emails, verification links, failure notices).

Why we process your data

  • To deliver the service: running automated assessments, generating reports, and emailing you the result. Legal basis: performance of a contract or pre-contractual measures at your request.
  • To prevent abuse: rate limiting, IP-based throttling, and reject rules for unsafe URLs. Legal basis: legitimate interest in operating a stable service.
  • To improve the service: aggregate analytics on how the assessment tool is used. Legal basis: legitimate interest, balanced against the privacy-first analytics setup we use.
  • To respond to communications: answering your emails. Legal basis: legitimate interest.

Retention periods

  • Assessment records: retained for as long as the report is needed and for a reasonable period after, typically up to 24 months. If you opted in to public listing, the report becomes public 30 days after submission unless you opt out.
  • Email addresses: retained alongside the assessment record. On request, we will null the email field while keeping the assessment metadata for aggregate statistics.
  • IP addresses: retained for 30 days for abuse prevention.
  • Operational logs: retained for up to 30 days.

Sub-processors

We use the following sub-processors:

  • Cloudflare — hosting, CDN, edge compute (Workers), database (D1), KV storage. Data may be stored in Cloudflare's EU data centers.
  • Resend — outbound transactional email.
  • Glyphex — privacy-first analytics (cookieless, no PII).

Where personal data is transferred outside the European Economic Area, we rely on lawful safeguards such as adequacy decisions or standard contractual clauses.

Your rights under GDPR

You have the right to request access to your personal data, request correction of inaccurate data, request deletion, object to certain processing, request restriction of processing, and receive a portable copy of data you provided to us. To exercise any of these rights, email timo@skadi.chat with enough information for us to identify your assessment record.

If you believe our processing violates applicable law, you may lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or with your local supervisory authority elsewhere in the EU.

Cookies

lastupdate.site does not set cookies. Glyphex analytics is cookieless. We do not use third-party advertising trackers. The only browser-side state we maintain is what's strictly necessary to keep the polling page working during a live assessment, which uses no persistent storage.

Changes to this policy

We may update this privacy policy from time to time. The current version always carries the effective date at the top. If material changes are made, we will provide reasonable notice before the updated policy takes effect.