What I collect,
and what I don't.

Who is responsible for your data

Landingpeak is a one-person web design studio. The person operating Landingpeak is responsible for the information described on this page; there is no agency or third party making these decisions. The contracting and invoicing details for a paid project are confirmed in writing before work begins.

Email hello@landingpeak.com or use the form on the contact page. WhatsApp is available there as a second route; its phone number is resolved only after a click and is not printed into this page. Any of these can be used to request access, correction or deletion.

What I collect, and why

When you fill in a form

The contact form can include your question, email, name, business, industry and website. Other forms may ask for an email and website. I use what you send to reply, assess fit, prepare an agreed engagement and keep a record of the conversation. Do not send passwords, payment-card data or confidential material through a public form.

When you run the free scanner

The scanner fetches the exact public URL you enter and its robots.txt, then calculates a diagnostic checklist score. No account or application database is created. The request and result can appear in Vercel function logs, and a configured owner notification receives the host, score and gaps so I can see usage and failures. The scanner does not use that address to start marketing contact. If you choose Save baseline, a report snapshot is stored in this browser's local storage; it is not uploaded as a saved report. Clear this site's browser data to remove it. Downloaded reports and cards are saved on your device. A copied live-check link includes the scanned URL and optional comparison URL, so do not share a link containing private query parameters.

A dated report link is self-contained: its URL includes a compressed copy of the date, checked URL and short evidence excerpts. It is not a private or authenticated record. Anyone you send it to can read or forward it; the report URL can also appear in browser history and hosting logs. Do not share URLs containing private tokens or confidential query parameters. Shared reports request no third-party assets and use a no-referrer policy. Clearing a browser baseline does not remove downloaded files or links already shared with other people.

When you simply read the site

This site sets no cookies and carries no advertising pixels, no Google Analytics, no Meta pixel and no cross-site trackers. It does use Vercel Web Analytics to count page views in aggregate: the page path, referrer, country, browser, operating system and device type. It uses no cookies; Vercel tells visitors apart with a hash of the incoming request that is discarded after 24 hours, and the statistics I see are totals, not individual visits. Query strings are stripped before a page view is sent, except campaign tags such as utm_source. The hosting platform and serverless functions may also keep standard technical logs, including request time, IP address and error details, for security and debugging.

Who else touches it

These services may handle the data required to operate the site:

• Vercel hosts the pages, runs the form and scanner functions, keeps their platform logs and provides the cookie-free, aggregate Web Analytics described above.
• Resend carries form notifications and automatic replies when the email integration is enabled.
• Telegram Bot API can receive owner-side site notifications when the integration is enabled. It is not offered as a visitor contact channel. A separate webhook may receive the same lead payload when configured.
• WhatsApp handles the conversation only after you click the private contact door.

I do not sell personal data, rent mailing lists or add you to a newsletter. WhatsApp conversations and automatic email replies have the retention and privacy rules of those providers too.

How long I keep it

Messages are kept only while they are useful for replying, administering an engagement or meeting an accounting/legal duty. Invoice records are retained for the period required by the applicable tax rules. Provider log retention follows the provider's settings and policies. You can ask what is held and request deletion where no duty requires retention.

Your rights

If you are in the EU or the UK, the GDPR gives you the right to see what I hold about you, to correct it, to have it deleted, to restrict or object to how it is used, and to receive a copy in a portable format. If you are in California, the CCPA gives you comparable rights, including the right to know and to delete — and the right to opt out of sale, which is trivially satisfied here because there is no sale.

Email hello@landingpeak.com (or use the contact page) and I will respond to a rights request within 30 days. You do not need a legal reason and I will not ask for one. If I ever handle this badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

International transfers

Vercel, Resend, Telegram, WhatsApp and any configured webhook may process data in countries outside your own. Their current data-transfer terms apply to that processing; ask me before sending anything that must stay in a particular jurisdiction.

Changes

If this policy changes in a way that affects anyone who has already contacted me, I email them. I don't quietly re-date the page and hope nobody notices.

LAST UPDATED 29 SEPTEMBER 2026 · QUESTIONS ABOUT ANYTHING ON THIS PAGE GO TO HELLO@LANDINGPEAK.COM OR THE CONTACT PAGE.