Privacy Policy

This policy explains how NoFPress handles personal data on nofpress.com and nofpress.pl. We try to collect as little as possible and to be specific about what happens to it.

Who is responsible

The controller of your personal data is the operator of NoFPress. Operator details are shown at the top of this page once confirmed. You can reach us about anything related to privacy using the contact email address in the site footer.

What we collect when you browse

This website is a set of static files. It does not use cookies, does not have user accounts and does not run advertising or cross-site tracking scripts.

Like any website, our hosting provider (Cloudflare) processes technical data needed to deliver pages and protect the service, such as IP addresses, browser user agents and request times, in short-lived server logs.

If we enable privacy-friendly analytics, it will be cookieless and limited to aggregated page statistics. We will update this section to name the provider before enabling it.

What we collect when you request an audit

When you submit the Free Audit form we receive:

• the website address you enter;
• your email address;
• the website type and project description, if you provide them;
• the language version of the site and the domain you used (added automatically);
• the time of the request and a randomly generated request ID.

We use this information only to review your website, reply to you and, if you ask for it, prepare a quote. We do not use it for newsletters or advertising, and we do not sell it.

To protect the form against spam and abuse:

• Cloudflare Turnstile checks that the request comes from a person. It processes technical signals from your browser for this purpose.
• Your IP address is used briefly to limit the number of requests. It is not stored with your request.
• A one-way hash of your email and website address is kept for 24 hours to recognize accidental duplicate submissions.

Legal basis

We process audit requests on the basis of your consent and to take steps at your request before a possible contract (GDPR Art. 6(1)(a) and 6(1)(b)). Technical data for delivering and securing the website is processed on the basis of our legitimate interest in operating a secure service (Art. 6(1)(f)).

You can withdraw your consent at any time by emailing us. Withdrawal does not affect processing that happened before it.

Who helps us process data

• Cloudflare, Inc. — website hosting and delivery, form processing (Cloudflare Workers) and spam protection (Turnstile).
• Google LLC — storage of audit requests in a private Google Sheets spreadsheet accessible only to authorized NoFPress staff.

These providers may process data outside the European Economic Area. Where they do, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

How long we keep data

• Audit requests that don't lead to a project are deleted 12 months after our last contact with you.
• If a request leads to a project, the related correspondence is kept for as long as needed for the project and any legal obligations, such as accounting rules.
• Duplicate-detection hashes expire after 24 hours.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To use any of these rights, email us from the address you used in the form.

You also have the right to lodge a complaint with a data protection supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO), or the authority in the country where you live or work.

Changes

If we change how we handle personal data, we will update this page and the date shown at the top.