Privacy notice

Controller

NOX Silence Studio, Nikolai Laihanen, Helsinki, Finland. Privacy contact: [email protected].

Data we process

• The website address you enter into the free scan. It is passed to the scan function, which reads that site's public files. The result is stored: the domain, the time, the outcome of the six checks, the page language and the referring site's domain. We do not store who ran the scan: no IP address, no cookie, no identifier, and no query string from the referrer. A stored row cannot tell you the visitor — it can tell you the site that was scanned.
• Anonymous visit measurement: how long the page was open, how far it was scrolled, the viewport width, the referring site's domain, and how long each stop of the aisle was visible. It uses no cookies, stores no IP address and contains no identifier that could link a single visitor.
• Emails you send to [email protected]: your name, email address and the content of the message.

Purposes and legal bases

• Scan: providing the service you requested — legitimate interest (article 6(1)(f)).
• Visit measurement: improving the site and its content — legitimate interest (article 6(1)(f)). Not identifying anyone is a condition of that interest.
• Email: answering you and any resulting contract — pre-contractual steps and contract (article 6(1)(b)).

Retention

• The scan result (domain, time, check outcomes): 24 months, then the row is deleted. The result is the studio's own measurement corpus, and it is declared as such because it is data, not a by-product.
• Technical logs: at most 30 days, per the hosting provider's log policy.
• Visit measurement: technical logs for at most 30 days.
• Emails: 24 months after the last contact, unless a customer relationship requires longer (for example accounting law for invoices).

Recipients and transfers

• Cloudflare, Inc. (hosting of the site, the free scan, its functions and the scan-log database). Transfer to the United States relies on the EU–US Data Privacy Framework, to which Cloudflare is certified, and on the standard contractual clauses in Cloudflare's data processing addendum.
• Microsoft Corporation (email service Outlook.com).
• Cal.com, Inc. (booking): the name, email and message you enter, only if you book a call. Transfer to the United States under Cal.com's privacy terms (cal.com/privacy).
• Data is never sold or handed over for marketing.

Your rights

• Right of access to your data.
• Right to have inaccurate data rectified.
• Right to erasure.
• Right to restriction of processing.
• Right to object to processing based on legitimate interest.
• Requests to [email protected]. We answer within one month.

Right to complain

If you believe your data is processed unlawfully, you can complain to the Finnish Data Protection Ombudsman: tietosuoja.fi.

Automated decision-making

The site makes no automated decisions about you and does not profile visitors.