Privacy policy
Last updated 9 September 2026.
Data controller
Andersen Innovations Studio, a sole proprietorship operated by Rafal Andersen, organisation number 871228-7971, Packhusgatan 33 lgh 1301, 216 47 Limhamn. Phone +46 76 004 69 77.
The contact form
Through the contact form we collect name, email address, company, message and - if you choose to provide it - phone number. The details are used only to answer and follow up your enquiry. The form is protected against abuse with rate limiting among other measures; submitted details are sent to and processed by our shared company contact backend and with the providers we use for web operations, data storage and email delivery. A confirmation is sent to the email address you provide.
Enquiries and legal basis
Details you provide by phone or through the contact form are used only to answer and follow up your enquiry, with legitimate interest or pre-contractual steps as the legal basis. The details are not used for marketing without separate consent.
Your rights
You have the right to request access, rectification, erasure and restriction of processing, and to object to processing. Contact us by phone. Complaints can be lodged with the Swedish Authority for Privacy Protection (IMY).
Booking a call
The "Book a free 20-minute call" button takes you to our Google Calendar appointment schedule on Google's own site (calendar.google.com or calendar.app.google) in a new tab; it is never embedded on this website. Choosing a time there is handled entirely by Google under Google's own privacy policy, and a Google Meet video call is created for the appointment. We only see the appointment once it has been booked; no analytics, cookie or tracking data from that booking page is shared with or received by this website.
Storage
Technical operation logs at the platform provider are handled by the provider as part of operating the service. Details from phone enquiries and the contact form are kept no longer than needed to answer and follow up the enquiry. Your cookie-consent choice is stored in your browser's local storage - not a cookie - for up to 180 days and can be changed at any time via "Cookie settings" in the footer. If you accept analytics, the _ga and _ga_<container id> cookies described below are themselves set to expire after the same 180 days, matching your stored choice. That cookie lifetime is separate from Google Analytics 4's own retention setting for the event and user-level data it collects, which is configured to 2 months from collection.
Automated website checks
If this site offers a homepage check, submitting a website address starts an automated technical review. A website address and technical identifiers may be personal data. We process the website address you submit, the technical results produced (measured using Google PageSpeed), a record identifier and timestamps for the request, and a pseudonymous identifier used only to limit abuse and repeated requests. This processing runs on our shared company backend, hosted with Cloudflare, with results stored using Supabase. The submitted address, the technical results, any report and the email address you provide are never sent to Google Analytics, and starting a check does not enrol you in any marketing. Before analysis, we reduce the address to the public homepage, removing any path, query string and fragment; addresses containing login credentials are rejected. Google PageSpeed receives that homepage address to perform the measurement.
Google PageSpeed and international processing
Only the public homepage address is sent to Google to run the PageSpeed measurement. Google processes it as an independent controller under its own applicable API and privacy terms, not under any Google Workspace agreement of ours. The measurement can run from a Google data centre in Europe, North America or Asia, so this step is not limited to the EU. Where a transfer outside the EU/EEA takes place, Google's own contractual safeguards apply as required; we do not certify or guarantee that this step stays within the EU. Google's privacy policy is at https://policies.google.com/privacy.
Why we process check data
We rely on our legitimate interests in providing the technical check you request and protecting it against misuse. We use the website address and technical results to produce and retain your report, and a pseudonymous identifier to limit repeated or abusive requests. If you request a report by email, the same basis covers using your email address to send that requested copy and keeping the necessary delivery records. These interests do not include marketing or profiling you for advertising. You can object to this processing by contacting rafi@anderseninnovations.com; we will consider your circumstances and stop unless we have overriding legitimate grounds or need the data for legal claims.
Report by email
Email copies are currently unavailable. If this option is enabled, providing an email address to receive a copy of the check result will be optional. Before any report is included in an email, it will be verified again on our server. We will send the requested copy through Resend and keep operational records of whether the provider accepted the message, the attempt failed, or sending was blocked. Provider acceptance will not confirm delivery to your mailbox - a request being recorded as received will not mean the email has actually been delivered.
Review data retention
Records created by these automated checks are kept only as long as needed to run and support the service. Application reports and queue items that have reached a final state are normally eligible for cleanup 7 days after creation; records used to limit repeated attempts become eligible for cleanup after 24 hours; and send logs kept only for reviewing this service become eligible for cleanup after 30 days. Work that is still active or whose outcome is uncertain is kept until it is resolved, and cleanup runs in batches, so a backlog can delay when older records are actually removed. These timeframes do not cover other contact details you provide separately, shared suppression records, or backups kept by our providers. Suppression records are kept for as long as needed to continue honouring a block on sending.
Cookies and local storage in detail
"ai_cookie_consent" is not a cookie - it is stored in your browser's local storage, which stays on your device and is never sent to us or to Google with a page request. The two Google Analytics 4 rows are real cookies, and only apply once you have accepted analytics.
| Name | Type | Purpose | Provider | Duration |
|---|---|---|---|---|
| ai_cookie_consent | Local storage (not a cookie) | Remembers your cookie choice | Andersen Innovations (first-party, essential) | 180 days |
| _ga | Cookie | Distinguishes visitors for aggregate usage statistics | Google Analytics 4 (only if you accept analytics) | 180 days (set by this site to match your cookie-consent choice, not Google's own default) |
| _ga_<container id> | Cookie | Persists session state for Google Analytics 4 reporting | Google Analytics 4 (only if you accept analytics) | 180 days (set by this site to match your cookie-consent choice, not Google's own default) |
Data controller
Andersen Innovations Studio (Rafal Andersen), Packhusgatan 33 lgh 1301, 216 47 Limhamn, Sweden. Organisation number 871228-7971. Phone +44 7949 714063.
Contact is by phone or through the website's contact form.