Legal
Privacy policy
2. Hosting
This website is hosted and delivered via Cloudflare (Cloudflare, Inc., USA). When you access the site, Cloudflare processes technically necessary data such as your IP address to deliver the page and protect against abuse. This may involve transferring data to countries outside the EU/EEA, based on the EU Standard Contractual Clauses under Art. 46 GDPR. Details are available in Cloudflare's privacy policy at cloudflare.com/privacypolicy.
3. Fonts
The fonts used on this website are delivered directly from our own server via our hosting provider (see section 2). No fonts are loaded from third-party providers, and no data is transmitted to third parties in the process. No cookies are set.
4. Getting in touch
If you contact me by email or through the call request form, your details (e.g. name, email address, phone number, preferred time, and message) are stored and processed solely to handle your inquiry. Your details are deleted once your inquiry has been dealt with, unless statutory retention obligations require otherwise. The legal basis is Art. 6(1)(b) GDPR (pre-contractual inquiry) or Art. 6(1)(f) GDPR (legitimate interest in responding).
5. Cookies, local storage & tracking
This website uses the technically necessary preference cookie “washed-theme” to remember your chosen light or dark appearance for one year on washed.dev and its subdomains. It contains no content data, is not used for analytics or advertising, and is not shared with third parties for tracking. No other cookies or analytics tools are used.
6. Free website check
For the website check, we process the domain and email address you provide to run the technical analysis, create the report, and send the report to you by email. The public target website is technically fetched for this purpose; selected technical content may be sent to the AI service OpenRouter for automated evaluation. Requests are pinned to the Google Vertex endpoint in the EU (google-vertex/eu) and limited to endpoints with zero data retention and no training on the content. As requests are routed through OpenRouter, a US-based provider, transferring data to countries outside the EU/EEA cannot be ruled out; only the technical content required for the evaluation is transmitted. The report is generated using Cloudflare services and stored in a Cloudflare D1 database; report data and the associated domain are automatically deleted after no more than 30 days. The email address is not added to the newsletter list for this purpose. The legal basis is Art. 6(1)(b) GDPR for providing the service you requested.
7. Newsletter
If you subscribe to the newsletter, we process your email address, subscription status, selected language, and technical confirmation data. Subscription uses a double opt-in process. The confirmation link expires after 24 hours; expired, unconfirmed records are deleted in the next hourly cleanup. After confirmation, the email address is stored until you withdraw your consent or unsubscribe, so we can send the newsletter and honor your unsubscribe request. Newsletter emails cover washed.dev, new tools, services, and offers and contain an unsubscribe link. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in the newsletter.
8. Cloudflare Turnstile and security checks
We use Cloudflare Turnstile to protect our forms against automated abuse. Technical information such as IP address, browser, and device data may be transmitted to and processed by Cloudflare. The security check is loaded only when a protected form is submitted. We also use Cloudflare services to run the analysis and deliver reports. More information is available in Cloudflare's privacy policy at cloudflare.com/privacypolicy.
9. Your rights
You have the right at any time to access, correct, delete, or restrict the processing of your personal data, as well as the right to object to processing and the right to data portability. You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. Please contact hello@washed.dev for this.