Legal
Website analysis privacy
What happens to your data when you analyse a site with our replatforming test. It adds to our Privacy Policy.
Who handles the data
The controller is Ensoul SRL, Via Villalta 72, 33100 Udine (Italy). For any request: hello@ensoul.it.
What we collect when you analyse a site
- the address of the site you enter and the result of the analysis (what it is built with, speed, accessibility, emissions, score);
- date, time and language of the page;
- a fingerprint of your connection, derived from your IP address with a hash function, and your shortened IP address, without its last part (for example 93.41.12.0): it shows the network you connect from, not you. We use them to prevent abuse, to find your analysis again if you reload the page and to see which networks the analyses come from. We don’t store the full IP address;
- where you came from: the referring page and any campaign parameters (utm);
- a picture of the analysed site’s home page.
We only look at the site’s public pages, as any browser would. We don’t enter restricted areas and we don’t install anything.
Why, and on what basis
- To give you the analysis you asked for: performance of your request (Art. 6(1)(b) GDPR).
- To protect the service from abuse and understand how it is used: our legitimate interest (Art. 6(1)(f) GDPR).
What we don’t do
We don’t use the address of the site you analyse to contact you or whoever runs that site. We don’t pass it on to anyone and we don’t use it for advertising. The score is a technical measure of the site, not an assessment of you.
How long
- Site address, analysis and shortened IP address: 60 days, then we delete them. We delete the shortened IP address after 60 days even if you left us your email.
- Picture of the home page: 30 days.
- Newsletter: until you unsubscribe.
- After 60 days we keep only statistics without the site’s address, for example how many analyses concern WordPress sites or the average score. They can’t be traced back to you or to the site.
If you ask for the report by email
We collect your name, email and any message, and link them to the analysis. We use them to send you the report and to reply to you, to perform your request (Art. 6(1)(b) GDPR).
In this case we keep the analysis together with your request for 24 months. After that we delete your name, email and message.
The report opens from a personal link: anyone with that link can see it, so share it only with people you choose.
Privacy notice and newsletter
Before the analysis starts, and again in the report form, we ask you to agree to this notice, and we record the date. It is how we know you were informed: it is not a consent to anything else.
In the report form there is a second box, for the newsletter. It is optional and unticked, and you get the report either way. If you tick it and leave your email for the report, we’ll use that email to send you Ensoul’s newsletter. The basis is your consent (Art. 6(1)(a) GDPR and Art. 130 of the Italian Privacy Code), and we record its date.
You can unsubscribe at any time by writing to hello@ensoul.it or by replying to any newsletter. We keep your email for the newsletter until you unsubscribe, then we keep the date you did, to show your request was honoured.
Who else sees the data
- Google (PageSpeed Insights) receives the site’s address to measure its speed. The request starts from your browser, so Google also sees your IP address. Google is certified under the EU-US Data Privacy Framework.
- The Green Web Foundation receives only the site’s name, to check whether it is hosted on renewable energy.
- Our hosting provider and our email delivery service, which process the data on our behalf.
We don’t sell or pass the data on to anyone.
Your rights
You can ask to see your data, correct it, delete it, restrict its use, object to processing based on legitimate interest and receive it in a readable format. Just write to hello@ensoul.it. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
For an analysis without an email, send us the address of the analysed site and the day of the test: that is the only way to find it, because we don’t know who ran it.
Latest update: October 29, 2026