Privacy
Policy

In short

• We collect only what we need to answer you, run the free site check and send you the link to your report.
• We do not sell your data or share it with advertisers.
• We email you about our services only if you tick a separate box, and you can unsubscribe in one click.
• Analytics loads only after you accept cookies.

Contact requests

When you send a request through the contact form, the service request form or the form in the AI chat, we receive:

• your name, email and message;
• in the chat form, also your phone number, preferred messenger and the last messages of the chat.

We use them to answer you and discuss your project. Legal basis: steps you ask us to take before a possible contract (GDPR, Art. 6(1)(b)). Requests reach us as messages in Telegram. If we continue by email, the correspondence is kept in our mailbox.

AI chat

What you type in the chat is sent to OpenRouter, which passes it to the provider of the AI model that writes the answers. OpenRouter states that it does not use these messages to train models; the model provider handles them under its own terms. We do not keep chat history on our servers. Please do not enter anything in the chat that you would not want to share. Legal basis: answering your request (Art. 6(1)(b)).

Free site check

For the check, you give us the address of a website and, if you wish, the service you offer and your city. To open the report, you enter your email. We keep:

• the addresses of the websites you checked, the service and the city;
• your email and the language of the page;
• whether you ticked the box to receive emails, with the time and the exact wording next to the box;
• when you opened the report from our email, and when you unsubscribed.

We use them to run the check, show you the report and email you a link to it. Legal basis: providing the check you asked for (Art. 6(1)(b)). The email is required to open the report. The box is optional, and the report opens without it.

If you tick the box, we may write to you about the results, suggest how we can help and send you Stratosly news. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link or by writing to us.

The report describes the website, not you. Anyone who has the link can open it, so you can forward it to your developer. To measure the website's speed, Google PageSpeed receives only its address.

To protect the check from bots, Cloudflare Turnstile receives your IP address and data about your browser. We allow three checks a day from one IP address. To count them, we keep not the address itself but a code derived from it with a secret key, for 24 hours. Legal basis: our legitimate interest in keeping the service available (Art. 6(1)(f)).

Cookies and analytics

Google Analytics, through Google Tag Manager, loads only if you click “Accept” in the cookie banner. It sets the cookies _ga and _ga_<id>, kept for 2 years by default, and shows us how visitors use the site. Google keeps data about individual visitors for no more than 14 months. Legal basis: your consent (Art. 6(1)(a)). To change your choice at any time, click “Cookie settings” at the bottom of any page. If you decline after accepting, we delete the Google Analytics cookies.

Without your consent, we store only what the site needs to work:

• the NEXT_LOCALE cookie remembers your language, for 1 year;
• your choice in the cookie banner is kept in your browser's local storage.

On the site check page, Cloudflare Turnstile works under its own privacy terms.

Hosting

The site runs on Vercel. When you open a page, Vercel processes your IP address and browser data to deliver the page and protect the site from attacks. Legal basis: our legitimate interest in a working and secure site (Art. 6(1)(f)).

If you become a client

We process the contact and billing details needed for the contract and payments. Payment details are handled by the bank or payment service you use, under its own policy. Legal basis: the contract (Art. 6(1)(b)) and our obligations under tax and accounting law (Art. 6(1)(c)).

Who receives your data

We use these services:

• Vercel (USA): hosting the site;
• Upstash (USA): the database of the site check, with reports, emails, consents and limit counters;
• Cloudflare (USA): Turnstile, the bot check;
• Resend (USA): sending emails with report links;
• OpenRouter (USA) and the AI model provider it chooses: answers in the chat;
• Telegram: delivering requests from the forms and notes about site checks to us; a note includes your email only if you ticked the box for emails;
• Google (USA): Google Analytics after your consent, our mailbox, and PageSpeed, which receives only the website address.

We do not sell personal data and do not pass it to advertisers. We disclose it to authorities only when the law requires it.

Transfers to other countries

These services store data in the USA and other countries, so your data may be processed outside the country where you live. Vercel, Upstash, Cloudflare, Resend and Google are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection. OpenRouter uses the European Commission's standard contractual clauses. Write to us if you want details of these safeguards.

If you live in Russia: Stratosly is not a Russian company, and your data is stored outside Russia, on the servers of the services listed above.

How long we keep data

• Requests and correspondence: while we discuss your project. If you do not become a client, we delete them when the conversation is over, or right away if you ask.
• Client data: for the term of the contract, then as long as tax and accounting laws require.
• The site check report: 7 days from the check. After that, the link stops working.
• Your email from the site check, if you did not tick the box: 7 days after your last check.
• Your email, if you ticked the box: until you unsubscribe or ask us to delete it. After you unsubscribe, it is deleted 7 days later.
• Counters of checks per IP address: 24 hours.
• Google Analytics data about individual visitors: up to 14 months.

Our emails

• Everyone who leaves an email at the site check gets one email with a link to the report, because you asked for it.
• Other emails, about the results, our services and news, come only if you ticked the box. News comes only if the box you ticked mentioned it.
• Each such email ends with an unsubscribe link that works in one click. After that, we will not send them. Links to reports for new checks will still come, since you request them.
• We do not track whether you open our emails or click their links.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct it;
• delete it;
• restrict or stop its processing;
• send it to you in a machine-readable format.

You can withdraw your consent at any time. This does not affect what was done before. Write to hello@stratosly.com from the email address the request is about. We reply within 30 days, free of charge. You can also complain to the data protection authority of your country.

We make no automated decisions about you: the site check rates websites, not people.

Security

The site works only over HTTPS. Report links are long and random, and we keep only a code derived from them, so a database leak would not open the reports. We do not save IP addresses in our database. Access to the services where data is kept is limited to us.

Children

Our services are for adults. We do not knowingly collect data from people under 18.

Changes

When we change how we handle data, we update this page and the date at the top.

Who is responsible

Stratosly is run by Anthony Fox, who is responsible for personal data on this site (the data controller). Questions about your data: hello@stratosly.com. We provide the controller's legal details on request at this address. We work with clients worldwide; the Russian version of the site is for everyone who speaks Russian.