Who is responsible
Jorge Horst, an independent SEO consultant based in Kraków, Poland, is the data controller for jorgehorst.com. Contact: [email protected].
What is collected
- Contact form submissions. Your name, email address, the topic you select and your message. Your country is recorded from the network request so I know which market an enquiry comes from. Nothing else.
- Free tools. The hreflang generator, the robots.txt generator, the local SERP checker, the SEO forecast calculator and the SEO ROI calculator do their work in your browser; the local SERP checker’s links open Google directly from your browser. The hreflang checker sends the URL you enter to a function on this site, which fetches the public pages that URL names and returns their hreflang signals. The robots.txt tester, when you test a live site, sends the address you enter to a function on this site, which fetches that site’s robots.txt and returns its rule lines.
- How the tools are used. Each tool records one row when you use it: which tool, the date and hour, the page language, and the choices it was given — which language and country codes, which crawlers, which preset, how many keywords or pages, whether a check found problems. The hreflang checker and the robots.txt tester also record the host you asked them to check, because they fetch that site’s public files; the AI visibility checker records the question you asked, because it is sent to the AI engines anyway. What you type is otherwise not recorded: no keyword lists, no Search Console exports, no revenue, margin or conversion figures, and no page or file contents. A row carries no IP address, user agent, referrer, cookie or visitor identifier, and no exact timestamp, so rows cannot be tied to each other or to you. Rows are kept until I delete them. Send a Do Not Track or Global Privacy Control signal and nothing is recorded at all.
- AI visibility checker. The question you type, with the country and engines you pick, is sent to a function on this site, which passes the question to the AI providers listed below so they can answer it with web search. The brand, website and competitor names you type stay in your browser and are never sent. This site records the question, the engines and the market as described above, and does not store the answers, or write them to its logs. To limit how many checks each visitor can run in a day, the function keeps a counter against a one-way hash of your IP address, made with a random value that is replaced every day; earlier days’ counters are deleted, together with that value, when the next day’s first check comes in.
- Server logs. The hosting platform records standard request data — IP address, user agent, requested URL — as part of delivering and protecting the site.
- Analytics. Where analytics are in use they are privacy-first and cookieless, measuring page views and referral sources without identifying you.
There are no tracking cookies, advertising cookies or third-party marketing tags on this site.
Why, and on what legal basis
- To reply to your enquiry and discuss possible work — legitimate interest, and steps taken at your request before entering a contract (GDPR Art. 6(1)(b) and (f)).
- To keep the site running and secure — legitimate interest (Art. 6(1)(f)).
- To run the free tools you use, and to stop them being abused — including the daily counter behind the AI visibility checker — legitimate interest (Art. 6(1)(f)).
- To see which tools are worth keeping and what to build next, from the usage rows described above — legitimate interest (Art. 6(1)(f)). You can object at any time by sending a Do Not Track or Global Privacy Control signal, which stops the recording before it happens, or by writing to me.
Your data is never sold, rented, or shared for anyone else's marketing.
Who processes it
| Processor | What they handle |
|---|
| Cloudflare | Hosting, content delivery, the functions behind the contact form and the free tools, and the database that holds the AI visibility checker’s daily counters. Processes request data including IP address. |
| Resend | Delivers contact form submissions to my inbox by email. |
| Anthropic | Answers questions sent through the AI visibility checker when Claude is one of the engines asked. |
| OpenAI | Answers questions sent through the AI visibility checker when OpenAI is one of the engines asked. The request is sent with OpenAI’s response storage switched off. |
| Perplexity | Answers questions sent through the AI visibility checker when Perplexity is one of the engines asked. |
| Google Fonts | Serves the typefaces used on this site. Google may log your IP address when fonts load. |
Each of these operates under its own privacy policy and, where required, a standard data processing agreement.
How long it is kept
Contact form submissions stay in my email for as long as the conversation is live and for a reasonable follow-up period afterwards — in practice up to 24 months, so I can pick up a thread you started last year. Ask me to delete it sooner and I will. Server logs are retained by the hosting platform on its own short rolling schedule. The AI visibility checker’s daily counters last until the next day’s first check, and this site keeps no copy of the questions; the AI providers handle them under their own API terms and retention policies.
Where it goes
The processors above may handle data outside the European Economic Area, including in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.
Your rights
Under the GDPR you can ask me to:
- Access the personal data I hold about you
- Correct anything inaccurate
- Delete it — the right to be forgotten
- Restrict or object to how it is processed
- Receive a copy in a portable format
Email [email protected] and I will action it within 30 days. If you think I have handled your data badly, you can complain to the Polish supervisory authority, the Urząd Ochrony Danych Osobowych (UODO).
Security
The site is served over HTTPS only. Form submissions travel encrypted and are delivered to a single mailbox. No method of transmission over the internet is perfectly secure, but nothing sensitive is requested here — please do not send credentials or confidential documents through the form.
External links
This site links to LinkedIn, X and Facebook. I am not responsible for what those platforms do with your data once you leave.
Changes
If this policy changes, the revision date at the top of the page changes with it.
Contact
Jorge Horst
Independent SEO consultant
Kraków, Poland — service-area business, no walk-in address
[email protected]