Privacy policy
Updated
This policy explains what personal data Perceivly collects, why, and what you can do about it. Perceivly is operated by BGAN Technologies Ltd., Kazanelson 131, 5327315 Givataim, Israel (“we”). We are the controller for the data described here. Questions go to [email protected].
In short
- We use no advertising or tracking cookies, and no tracking pixels. If you sign in, one essential cookie keeps you signed in.
- We never store your IP address. We keep a one-way, keyed hash of it to stop abuse of the free checker.
- We only email you after you confirm your address, and only send follow-ups if you tick the box for them.
- Data is hosted in the European Union.
What we collect and why
| Data | Why | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| The web address you check, the page title, the test results and screenshots of failing elements | To run the check and show you the results at a private link | Legitimate interests: providing the tool you asked to use (Art. 6(1)(f)) | 90 days, then deleted with the screenshots |
| Your account: name, email address, a one-way hash of your password, your sign-in sessions and your team | To give you an account and keep it secure | Contract (Art. 6(1)(b)) | Until you delete your account (email us; in-app deletion is coming). Sessions expire after 30 days |
| A keyed hash of your IP address, and counters of how many checks it ran | To limit abuse of the free checker | Legitimate interests: keeping the service available and safe (Art. 6(1)(f)) | Hash: with the scan (90 days). Counters: up to 2 days |
| Your email address, language, and when you confirmed it | To send the report you asked for | Steps at your request (Art. 6(1)(b)) | Unconfirmed: 7 days. Confirmed: until you ask us to delete it |
| Your consent to follow-up emails, with the time and the wording version | To send up to two follow-up emails and prove you agreed | Consent (Art. 6(1)(a)), which you can withdraw at any time | Until you unsubscribe, then as proof of consent for as long as claims are possible |
| A log of the emails we sent you (type, time, delivery status) | To make sure emails arrive and to answer questions about them | Legitimate interests (Art. 6(1)(f)) | 1 year |
The pages you check may themselves contain personal data, such as names on a team page. Screenshots show only the small area around each failing element and are deleted with the scan after 90 days.
Anyone with the link to a result can see it. Don’t share the link if the page you checked is confidential.
Bot protection
To tell people from bots, forms may use Cloudflare Turnstile. It processes your IP address and browser characteristics for that purpose only and sets no cookies on our site. See Cloudflare’s Turnstile privacy notice.
Analytics
We count visits with Plausible Analytics, which uses no cookies and collects no personal data. We see totals, such as how many people visited a page, never who they are.
Cookies and local storage
Public pages set no cookies. When you sign in, we set one strictly necessary cookie that keeps you signed in. It holds a random value, expires after 30 days or when you log out, and is never used for tracking, so it needs no consent. If you choose a light or dark theme, that choice is stored in your browser’s local storage on your device and never sent to us.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Railway Corporation | Hosting the website, database, scanning service and stored screenshots and reports | EU region (Amsterdam) |
| Cloudflare, Inc. | Content delivery, DNS and bot protection | Global network |
| Paddle.com Market Ltd | Payments, VAT and invoices when you buy a plan (Paddle is the merchant of record and also a controller for payment data) | United Kingdom |
| Postmark (ActiveCampaign, LLC) | Sending emails (no open or click tracking) | United States |
| Functional Software, Inc. (Sentry) | Error reports, without personal data, so we can fix bugs | EU region (Germany) |
| Plausible Insights OÜ | Cookieless visit statistics | European Union |
Each processor is bound by a data processing agreement. Where data may be accessed from outside the European Economic Area, transfers rely on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
Your rights
You can ask us for a copy of your data, to correct it, delete it, restrict or object to its use, or to receive it in a portable format. You can withdraw consent to follow-up emails at any time with the unsubscribe link in every email. Write to [email protected]; we answer within one month. You can also complain to your data protection authority.
Changes
If we change how we use your data, we update this page and the date below it. If a change needs your consent, we ask for it first.