Privacy

This page explains what Tech Donut LLC ("Tech Donut", "we") collects when you use techdonut.com, ask for a website audit, contact us, or become a client, and what we do with it.

What we collect

• What you type into our forms: your name, email address, phone number, business name, website address and message, and whether you agreed to marketing email (a separate box, off by default).
• Audit requests: the website address you asked us to review and the business name. We also fetch the public pages of that website and keep screenshots, page details and performance measurements as evidence for the review.
• Clients: project details, the scope and terms you accepted, and billing records: Stripe customer, invoice, payment and subscription references. We never see or store your card number.
• Visits to this site: if you choose "Allow" on the analytics notice, an anonymous visitor id and which pages and campaigns brought you here. If you do not choose, or choose "Decline", we do not set that id and do not load Google Analytics.
• Technical records: a hashed form of your network address to limit abuse, and logs of delivery for the email we send you.

Why we use it

• To reply to you and carry out what you asked for: sending an audit, answering a question, delivering and caring for a website.
• To verify that you control the email address and website you give us before we send you a report.
• To send invoices and keep the financial records the law requires.
• To send marketing or outreach email only if you agreed, or, for a business we found ourselves, to introduce our service once, with a one-click way to stop.
• To understand which pages and sources lead to enquiries, if you allowed analytics.
• To keep the site secure and prevent abuse.

Who processes it for us

• Cloudflare: hosting, database, file storage, queues, staff sign-in and the email service that sends you messages. It also generates the screenshots of audited websites (Browser Run).
• Stripe: invoices, payments and subscriptions for clients.
• Google: Google Analytics, only after you choose "Allow", and PageSpeed Insights, which receives the public address of the website we audit.

We do not sell personal data.

How long we keep it

• Audit requests you never confirm: 30 days.
• Screenshots and page evidence from an audit: 180 days after the report is published, or 90 days if it was never published.
• What you typed into a form: 730 days, then it is anonymized, unless you became a client.
• Detailed analytics events: 90 days.
• Private report links and sessions: deleted 7 days after they expire or are revoked.
• Invoices, payments, signed agreements and the record of your consent: kept as long as the law and our accounts require.
• A scrambled record of your address, so we never contact you again after you opt out or ask for deletion.

Your choices

You can ask us to give you a copy of your data, correct it, or delete it. To delete it, use the deletion request form: we send a confirmation link to your address and a person reviews the request. For anything else, write to hello@techdonut.com. Every marketing or outreach email has an unsubscribe link, and you can withdraw analytics permission at any time from the analytics choices link in the footer. We keep what the law requires us to keep, such as invoices and signed agreements.

Cookies and analytics

We set up to three cookies of our own. td_consent remembers your analytics choice and works without your consent. td_aid, a random anonymous id, and Google Analytics are used only after you choose "Allow", and are removed when you choose "Decline". Choices are remembered for up to 180 days. Our client billing pages and private report pages set only the cookies they need to work and do not use analytics.

Where data is processed

Our providers operate globally, so your data may be processed in the United States and other countries where they have facilities. Each is bound by its own terms and security commitments.

Changes to this page

When we change this page we update its version and effective date. If a change affects how we use data you already gave us, we will tell you by email before it applies.