Privacy notice

Who we are

RDA Digital is the controller of the personal data described here. You can reach us through our contact page, by phone at (410) 308-9300, or by post at RDA Digital, 201 International Cir., Suite 230, Hunt Valley, MD 21030, USA.

What we collect and why

• Your request: name, company, role (optional), work email, and website. We use these to produce your report and to contact you once about your results. Our legal basis is our legitimate interest in responding to the request you made and following up on it.
• Marketing consent: only if you tick the box, we send you occasional insights and event invitations, and record when you agreed and which version of this notice you saw. Our legal basis is your consent, which you can withdraw at any time using the unsubscribe link in any email, or by contacting us.
• Abuse prevention: a salted hash of your IP address and of a random device identifier, and whether you came through an event link, so we can limit how many reports one person, network, or event can request each hour. We never store your raw IP address. Our legal basis is our legitimate interest in keeping the service available and preventing abuse.
• The report: the public pages of the website you entered, analyzed into scores and findings, plus the company name you gave. Reports are about websites, not people, but a site's pages can mention people (a team page, for example).

We don't use analytics, advertising, or tracking scripts on this site, and we don't sell your data.

Report links

Anyone with a report's link can open it, so share it only with people you want to see it. Reports show the website and the company name you entered, never your name, role, or email, and search engines are asked not to index them. You can ask us to delete a report at any time (see below).

Cookies and browser storage

• ccr_device: a random identifier set when you submit the form, used only for the hourly request limit. It lasts a year and is strictly necessary for that purpose.
• ccr_event: set only if you open an event link while the event is on, so everyone on an event network can request reports. It expires when the event ends.
• ccr_staff: set only on RDA's own devices, so our team can run demonstrations. It lasts 30 days.
• Your light or dark theme choice, kept in your browser's local storage. Your form entries may also be kept briefly in session storage if the page reloads while you're submitting. Neither is sent to us.

Who processes your data

We use these service providers, each under a data processing agreement:

• Netlify hosts the site, runs the analysis, stores report PDFs, and keeps short-lived request logs, which include IP addresses.
• Neon hosts the database that holds requests and reports.
• Anthropic, through Netlify's AI gateway, reads the text of the analyzed pages and the company name to assess clarity. It doesn't receive your name, role, or email.
• Google's Chrome UX Report receives the website address only, to look up its real-user performance data.

These providers process data in the United States. Where the GDPR or UK GDPR applies, transfers rely on the EU-U.S. Data Privacy Framework (and its UK extension) or on Standard Contractual Clauses.

How long we keep it

• Hashed IP and device identifiers: 24 hours.
• Your request details (name, company, role, email, consent): 12 months from when you submitted the form. After that the report stays available at its link, no longer linked to you.
• Reports: until you ask us to delete them.
• Deletion requests: 12 months after we resolve them, as a record that we did.

Your rights

Depending on where you live, you can ask to access, correct, or delete your data, restrict or object to how we use it, receive a copy in a portable format, or withdraw consent. You can also complain to your local data protection authority.

To delete a report and the details submitted with it, use the deletion request form. For any other request, contact us using the details above. We answer within 30 days.

Changes

If we change this notice, we'll update the date at the top. We record which version was in place when you submitted your request.