Privacy policy
The short version. The free checker reads only what your website already shows the public, and we don't store the address you type in. If you email us to watch your site, we keep your email so we can tell you if anything changes. If you buy the £49 check, Stripe takes the payment and we never see your card details. We only set analytics or advertising cookies if you say yes on the cookie banner.
1. Who we are
Digital Leeks is a trading name of Northin Ltd, a company registered in England and Wales, company number 11685697, registered office 8 Keeling House, Claredale Street, London E2 6PG. Northin Ltd is the "data controller" for the information described here, which means we decide how and why it is used.
Questions about privacy: hello@digitalleeks.com.
2. The free checker
When you type a web address into the checker and press "Check my site":
- The address is sent to our checker, which runs on Cloudflare's network. It visits your site the way a browser would and reads the information your site shows to anyone: the server's response headers, the page itself, and the PHP version if your site displays it.
- We do not store the address you check. The checker has no database and keeps no log of addresses or results. The result is shown to you and then gone.
- To stop automated abuse, Cloudflare counts how many checks come from each internet address (IP) for about a minute. That count is not kept beyond that.
- Cloudflare, as our hosting and network provider, may hold short-lived technical logs (such as IP addresses) under its own privacy policy.
- The page's typefaces are loaded from Google Fonts, which means your browser sends your IP address to Google to fetch them. Google's privacy policy is at policies.google.com/privacy.
The checker reads only public information and never logs in to anything.
3. "Watch my site" and other emails
If your result is green or your site is on a managed platform, we offer to keep an eye on it for free. You can pop your email into the small box under your result, or email hello@digitalleeks.com. Either way it simply sends us an email; there is no hidden sign-up and nothing is stored on the website itself.
- What we keep: your email address, the web address you asked us to watch, and the date you asked.
- What we do with it: re-check the site from time to time and email you only if its status changes or if we need to tell you something about that specific site. We don't add you to a newsletter and we don't share your details.
- Lawful basis: your consent (you asked us). Withdraw it any time by replying "stop" to any email from us, and we'll delete your details within 30 days.
If you email us with a general question, we keep the email thread for as long as we need to answer and for up to 12 months afterwards, then delete it.
4. Buying the £49 check and report
Payment
Payment is taken by Stripe through a Stripe Payment Link. Your card details go straight to Stripe and we never see or store your full card number. Stripe tells us your name, your email address, the amount and whether the payment succeeded. Stripe is an independent data controller for the payment itself; its privacy policy is at stripe.com/gb/privacy.
Doing the work
After payment we'll email you for your web address and, if you have them, your hosting company's name or your web person's contact details. Sometimes it helps if you give us a login to your hosting control panel. If you do:
- We use it only to read your site's PHP version and related settings. We don't change anything without asking you first.
- We recommend you create a temporary user for us and remove it when the job is done.
- We delete any login details you give us as soon as the written report is sent.
If we chase your hosting company on your behalf, we'll tell them your web address and that you've asked us to act for you. We don't give them anything else without your say-so.
Lawful basis and how long we keep it
We process this information to carry out the contract you've made with us. We keep a simple record of each job (your name, email, web address, host, dates and status) in a private spreadsheet in our Google Drive, which only we can see. We keep the correspondence and the report for 12 months in case you have follow-up questions, and payment records for 6 years because UK tax law requires it.
5. Cookies and similar tools
The checker itself works without cookies. We would like to use the following, but only if you agree on the cookie banner, as the Privacy and Electronic Communications Regulations (PECR) require:
| Tool | Who runs it | What it does |
|---|---|---|
| Google Tag Manager | Loads the tools below once you've said yes. Sets no cookies of its own. | |
| Google Analytics | Tells us how many people use the page and whether the checker is working, using an anonymous visitor ID. Cookies last up to 2 years. | |
| Google Ads conversion and remarketing | Tells Google when an ad led to a check or a purchase, and may show you our ad again on other sites. Cookies last up to 13 months. |
Changing your mind. Click "Cookie settings" in the footer of any page to switch these off, or delete cookies in your browser. You can also opt out of Google's personalised ads at adssettings.google.com. Saying no doesn't affect the checker or the service.
If you accept, Google may process this information in the United States. Google relies on the UK's data-bridge arrangements and standard contractual clauses for those transfers.
6. Who we share information with
- Cloudflare (runs the checker and the website).
- Stripe (payments).
- Google (fonts; and analytics and advertising only with your consent).
- Your hosting company, only if you've bought the check and only what's needed to chase them.
- Our email provider, to send and receive email.
We don't sell your information and we don't share it with anyone else unless the law requires it.
7. Your rights
Under UK GDPR and the Data Protection Act 2018 you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct it if it's wrong;
- delete it;
- stop or limit how we use it;
- give it to you in a portable form;
- stop using it for anything based on consent, which you can withdraw at any time.
Email hello@digitalleeks.com. We'll reply within one month and there's no charge.
If you're not happy with how we've handled your information, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. We'd appreciate the chance to put things right first.
8. Changes to this policy
If we change anything that matters, we'll update the date at the top. If we start keeping information we don't keep today, we'll say so here before we do it.