GDPR · controller: Castomo prosta spółka akcyjna
Privacy policy
This site has no tracking cookies and no ads. Scripts only from this site and castomo's own servers. Visits are counted by our own analytics, which stores nothing on your device. It processes data in five situations: when you check a website, when you order a whole‑site check, when you write to us, when you visit it (visit statistics) and when you talk to the chat assistant. Below: what, why, for how long and on what basis.
Controller
Castomo prosta spółka akcyjna, ul. Powstańców Śląskich 5/212, 53‑332 Wrocław, Poland, KRS 0001188843, tax id PL 8993033031. Contact for data matters: hello@castomo.com.
Website check
| What | Why | How long | Basis |
|---|---|---|---|
| the address of the checked page, score, findings, measurements, screenshots, detected technologies, list of pages | performing the check and making the report available at a link | 90 days, then the report is deleted | art. 6(1)(b) GDPR (a service at your request) / (f) (legitimate interest: operating the service) |
| IP address (shortened — a cryptographic hash) | limits: 3 checks a minute, 20 a day; protection against abuse | 24 hours | art. 6(1)(f) GDPR |
| e‑mail (if given) | sending the report link; contact about an offer — only with the box ticked | 90 days with the report; with consent — until withdrawn | art. 6(1)(b) (sending the report); (a) (commercial contact — consent) |
| a non‑personal summary of the website: domain, address, date, score, grade, status, finding counts by weight, title, language, technologies, shop or not, accessibility information present, structured data present, HTTPS, number of pages, load time | Castomo's internal registry: aggregate accessibility statistics for the Polish web, comparing successive checks of the same site; not published — a given domain's result is seen only by whoever holds the report link, and by Castomo | 24 months from the last check; every new check restarts the period | art. 6(1)(f) GDPR — to the extent a website address is personal data at all (e.g. a domain containing a surname) |
The registry does not receive: findings, screenshots, e‑mails, IP addresses or page content. Individual domains' results are neither shared nor sold; we may publish only aggregates (e.g. the share of shops that meet the requirements), from which no single site's result can be read. The checker visits only public pages and refuses addresses on private networks. The checked page's content is processed by our own servers (castomapi‑utils, castomapi‑a11y) in the European Union; it is not passed to external providers.
Ordering a whole‑site check
E‑mail, number of pages, notes, domain, the linked report, invoice details — to perform the contract and issue an invoice (art. 6(1)(b) and (c) GDPR). Kept for the period required by tax law (5 years from the end of the year). Reports from the paid check — 90 days at a link, and longer on request.
Contact form
Name, e‑mail, subject, website address, message — to reply (art. 6(1)(f) GDPR, legitimate interest: correspondence, and (b) when you ask about an offer). Messages go to Castomo's internal operations inbox and are kept until the matter is closed, no longer than 2 years. The form has an invisible trap field for robots; filling it in causes the message to be rejected.
Analytics: Observer
We count visits with Observer, our own analytics, run by Castomo on its own server in Frankfurt. It sets no cookies and stores nothing on your device. For each page you open it records: the page address (of any query only campaign tags such as utm_source) and title, the site you came from, your browser, device type and operating system, your browser language, a rough screen‑size bracket, how long the page was actively open, how fast it loaded, any script error, and — as totals — where people click and how far they scroll. It takes no recording of your screen and reads no keystrokes.
Your IP address is used for a moment, together with your browser, to make a code that changes every day and is different on every site. The IP address itself is never stored, and the server that delivers Observer keeps no access log. The code lets us count one visitor once a day, and it cannot be used to link a visit to visits on other days or other sites. Raw records are deleted after 24 hours; only totals are kept, for 25 months. If your browser sends Do Not Track or Global Privacy Control, Observer sends no visit data.
We do this because we have a legitimate interest in knowing how our pages are used (Article 6(1)(f) GDPR). You can object at any time: hello@castomo.com.
Chat assistant
Every page has a chat button run by Castomo (chat.castomapi.com, servers in Amsterdam). Until you open the chat, the button stores nothing on your device and starts no conversation; loading the page only fetches the button's settings from our chat server, which, like any web server, records the request, including your IP address, in a rotating log that is overwritten as it fills.
When you open the chat, the chat window saves a visitor code and a few settings in your browser's local storage, and our server creates a visitor record: the code (kept only as a hash), a hash of your IP address, your browser type, language and time zone, the page you were on and where you came from, and everything you type — plus your name, e‑mail or phone number only if you give them.
The assistant is an AI, and it says so. Its answers are written by AI models run by OpenRouter (Google Gemini) and OpenAI, which receive what you type in order to reply; after a conversation ends the same text is sent to a model again to write a short summary. A person on our team can read the conversation and take it over. These providers may process data outside the European Economic Area.
We keep a visitor's record and conversations until 180 days after their last visit, then delete them. You can ask us to delete them sooner: hello@castomo.com. Please do not type anything you do not want us to have.
Settings in the browser
The theme choice and any test checker address are stored in your browser's localStorage. They are not cookies, are not sent to the server and do not identify you. You can remove them in the browser settings. Observer stores nothing on your device, and the chat saves a visitor code and a few settings in your browser's local storage only after you open it (see "Chat assistant").
Recipients
The site's hosting provider (seohost.pl, Poland) and the checker's server provider (UpCloud, data centre in the EU) — as processors. The AI models that write the chat's answers, OpenRouter (Google Gemini) and OpenAI, receive what you type in the chat (see "Chat assistant"). Public authorities — where the law requires. We do not sell or share data for third‑party marketing.
Your rights
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent (without affecting earlier processing), a complaint to the President of the Personal Data Protection Office (ul. Stawki 2, 00‑193 Warsaw, Poland). To delete a report before the 90 days are up, write with its link to the address above.
Changes
Changes to the policy are published on this page with a date. Last change: 5 September 2026.