Privacy policy

The controller of your personal data is Dotsphere s.r.o., company ID (IČO) 19632983, registered at Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic, which operates flait.cz ("we").

For anything about your data, write to info@dotsphere.cz or to our Czech data box 7ya3wqv.

A check needs only the website's address. We download its publicly available pages and evaluate them; no sign-up or e-mail is needed.

We do not store your IP address. We keep only a one-way fingerprint of it, which tells us when too many requests come from one address and cannot be turned back into the IP address. We do this in our legitimate interest in protecting the service from abuse.

We keep the result so that its link keeps working. If you want it removed sooner, write to us.

For an account we store your name, e-mail, password (only in irreversibly hashed form) and language. We need them to perform our contract with you: so you can sign in and have your reports and subscriptions in one place.

Each sign-in records the time, the sign-in method, the IP address and the browser type, so that we can spot an account that is attacked or shared; this is our legitimate interest in security. We delete sign-in records after 180 days and failed attempts after 30 days. Sign-in links sent by e-mail are valid for 24 hours.

Payments go through the Stripe payment gateway. You enter your card details directly with Stripe; we neither see nor store them.

With an order we keep the e-mail, the amount, the payment status and the billing details you enter at payment: name, company name, company ID (IČO), VAT ID and address. Stripe issues the invoice on our company's behalf.

The legal bases are the performance of the contract and our legal obligations. We keep payment records and invoices for as long as accounting and tax law requires, including after an account is deleted.

When you write to us through the contact form or ask for a fix from a report, we store your name, e-mail, phone number (if given), the website address and your message. We use them only to reply and to handle the enquiry.

For the uptime monitor we store the monitored website's address and the e-mail addresses that receive outage alerts.

If we send you a personal discount code, the e-mail address it is valid for is stored with it.

If you connect Google Search Console in your account, we store your Google account's e-mail and a read-only access token for Search Console data, encrypted. The legal basis is your consent, which you withdraw by disconnecting it or deleting your account.

We do not sell data. We share it only with the processors the service cannot run without:

Amazon Web Services (servers and database in Frankfurt, e-mail sending through Amazon SES); Stripe (payments and invoices); Cloudflare (protecting forms from bots, which receives your IP address during the check); Google (traffic measurement only with your consent, Search Console only once connected, website speed measured from its address).

To analyse a website we send data and language-model providers information about the website: its address, the public content of its pages, the business description and keywords. These are DataForSEO and OpenRouter, through which we ask models by OpenAI (ChatGPT), Google (Gemini) and Anthropic (Claude). We do not send them your name or e-mail.

Some of these processors are based or process data outside the European Union, mainly in the USA. Transfers rely on the European Commission's adequacy decision (the EU-US Data Privacy Framework) or on standard contractual clauses.

Necessary cookies: the sign-in session and form protection against forgery (the session expires after 2 hours of inactivity), "stay signed in", and access to a report without an account (up to 30 days). Without them you cannot sign in or open a report, so they need no consent.

In your browser's storage the site remembers your choice about traffic measurement, access to reports you opened, a discount code you entered and an unfinished selection of fixes. This stays in your browser; clearing the site's data removes it.

Traffic measurement with Google Analytics 4 (through Google Tag Manager) starts only with your consent; only then does Google set its cookies. You can change your consent at any time with "Cookie settings" in the site's footer. We use no advertising cookies.

We keep account data, reports, websites and settings for as long as the account exists. You can delete the account yourself in its settings; its reports, websites, monitors, enquiries and the billing details we hold go with it. Only the payment records and invoices the law requires us to keep remain.

Messages sent through the contact form without an account and the results of free checks are deleted at your request.

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time; processing before that remains lawful.

Send requests to info@dotsphere.cz. We reply without undue delay and within one month at the latest.

If you are not satisfied, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz) or to the supervisory authority in your country.

We update this policy when the service or its processors change. The current version, with its effective date, is always on this page.