Privacy Policy

How FiveStrangers handles your data. Last updated: 31. Juli 2026.

Controller

Caner Bozkurt
Septimerstr. 24
13407 Berlin
Deutschland
Email: cbo.caner@gmail.com

What we collect

• The website address you submit and the goal you select, so we can run the audit.
• Your email address, to deliver the report and to compare a later audit of the same site against your previous one.
• Audit results — scores, findings, screenshots taken during the audit, and the generated PDF report.
• Payment reference — the order ID from our payment provider. We never see or store your card details.
• Delivery records — when your report was generated and emailed, the email provider's message ID, a checksum of the PDF, and when the report page or PDF was first opened. We keep this to prove the service was delivered and to resolve payment disputes.
• Server logs — standard technical records (IP address, timestamp, requested page) generated when you visit the site.

Why we may process it (legal bases)

• Contract performance (Art. 6(1)(b) GDPR) — running your audit, delivering the report, comparing repeat audits.
• Legitimate interests (Art. 6(1)(f) GDPR) — keeping the service secure and functioning (server logs, abuse prevention).
• Legal obligations (Art. 6(1)(c) GDPR) — retaining records required by tax and commercial law.

Processors and recipients

We use the following services, each bound by a data processing agreement or equivalent safeguards:

• Lemon Squeezy, LLC (USA) — payment processing as Merchant of Record.
• OpenAI (USA) — analysis of the audited page's content and screenshots. Data submitted through the API is not used to train models.
• Google (PageSpeed Insights API) — performance measurement of the audited page.
• Resend — delivery of the report email.
• [HOSTING-ANBIETER EINTRAGEN] — hosting of the application and stored reports.

Transfers to providers outside the EU are based on the EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Report and email address: kept so your next audit of the same site can show what changed. Only the most recent report per site and customer is retained; the previous one is deleted automatically.
• Screenshots taken during the audit: temporary working files, deleted after the report is generated. Selected screenshots remain inside the PDF as evidence.
• Payment records: retained as required by tax law (generally 10 years in Germany, largely by our payment provider).
• Server logs: a few weeks.

Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing. To exercise any of these, email cbo.caner@gmail.com — we will delete your report and email address on request. You may also lodge a complaint with a supervisory authority.

Cookies and tracking

FiveStrangers sets no tracking or advertising cookies and uses no analytics profiling. Payment pages hosted by our payment provider may set cookies necessary for the transaction.

A note about the sites we audit

By submitting a URL you confirm you own that website or are authorised to have it audited. Our automated visitors browse the publicly accessible pages only, in the same way an ordinary visitor would.