Daniils Visnakovs

Legal

Privacy policy

Last updated: 8 October 2026

1. Controller

The controller responsible for processing under the GDPR is:

Clickspire LLC
30 N Gould St
82801 Sheridan
Email: kontakt@visnakovs.de

2. Contact and booking

If you contact me or book a consultation, I process the details you provide (such as name, email, company, phone number, message and appointment details) to answer your request or deliver the appointment. The legal basis and retention period depend on the request and the applicable contract, pre-contractual relationship or consent. Depending on the function, Resend handles email, Google Calendar handles appointments, and a configured Google Sheet is used to process the enquiry. The long-lived lead row in that Google Sheet stores neither the request IP address nor the user agent. Those details may be processed separately and transiently for hosting, abuse prevention and Cloudflare Turnstile, but they are not copied into the lead record. Result, report, download and enquiry emails do not subscribe you to a newsletter. Only a form explicitly labelled as a newsletter adds your address to that audience. Newsletter consent can be withdrawn at any time for the future by emailing kontakt@visnakovs.de.

Contact, speaking, newsletter and booking requests are also saved in a private intake register in the Google Sheet before delivery checks. It contains the submitted contact details and content, requested appointments, random receipt identifiers, timestamps and handling status. Requests flagged for abuse review may also be retained there; this does not confirm a booking or newsletter subscription. CAPTCHA tokens, IP addresses and browser identifiers are not stored in this register.

To review flagged requests, a shortened version of the content with recognizable contact details and credentials removed may be assessed by OpenAI (GPT-6 Luna). Processing in the United States may occur. The assessment and handling status are stored in the private intake register; the site owner receives an email with the submitted details and review note. The assessment assists human review and does not automatically block, delete, reply to or book a request.

Optional WhatsApp appointment messages

If you explicitly opt in when booking an SHK appointment, you will receive a confirmation, reminders and, if you miss the call, a message to arrange another appointment through WhatsApp. You can book without this consent. This choice does not subscribe you to marketing messages. I process your phone number, appointment details, consent record, delivery information and replies for this purpose. Messages are transmitted through the WhatsApp Business Platform; the information needed to manage the appointment and handle your replies is also stored in our protected messaging system. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw it at any time for the future by replying STOP or contacting kontakt@visnakovs.de. I retain the opt-out so that you receive no further automated WhatsApp appointment messages. See the WhatsApp Privacy Policy for information about WhatsApp's processing and international data transfers.

3. Cookies and measurement

Google Tag Manager and the analytics and marketing services below start only after your choice in the cookie banner. Both categories stay off until then; necessary site functions remain available after either choice. You can accept all or choose analytics and marketing separately under Settings. Your choice is stored in the vis_consent cookie: full acceptance for up to six months, a refusal for up to 30 days. You can change it any time through Cookie settings in the footer. Withdrawal stops further measurement from the next page load.

To understand use of the cookie banner, we count banner displays, Settings opens, departures from the page without a choice and choice clicks through a request to this website even if you decline Analytics and Marketing. A separate ToolStats tab in the existing Google Sheet stores only the UTC calendar day, language (German/English) and event type (display, Settings opened, left without a choice, first choice or later change). The statistics row contains no visitor identifier, cookie, page URL, IP address or precise time. The technical request to our host processes connection data like other page requests; see Server log files above. The reported acceptance rate is per banner display, not per person: repeated displays before a choice can increase the denominator. A departure without a choice is counted only when the browser delivers the request during navigation; it is not a deliberate dismissal.

UTM campaign parameters, referrer, landing page and first and last campaign contacts are stored in the browser only after the relevant category choice and may accompany an enquiry or booking. They can include advertising click identifiers such as GCLID, GBRAID, WBRAID, FBCLID, OpenAI's oppref and Reddit's rdt_cid. Without marketing consent, the site also removes these click identifiers from retained page URLs. Existing category decisions, timestamp and version remain separate from campaign attribution in the lead record. Without a choice, no consent is recorded as granted.

  • Analytics: PostHog for events, experiments, session replay and heatmaps. Google Analytics 4 through Google Tag Manager starts only when both Analytics and Marketing are allowed because the shared Google tag involves both categories. Data may include URLs, referrers, events, device and browser details, IP addresses and pseudonymous identifiers. Dealfront/Leadfeeder provides company-level visit analysis, described in section 6.
  • Marketing: Google Ads tags, Meta Pixel, TikTok Pixel and OpenAI's ChatGPT Ads Measurement Pixel measure ad interactions and conversions. Depending on the tag, cookies, click and event data, URLs, IP address, user agent and configured hashed contact data may be transmitted. Google's ad_personalization and personalization_storage signals remain denied. Since August 2026, Google also uses received EEA IP addresses for ad measurement and personalisation. See Google's Business Data Responsibility.
  • ChatGPT Ads Pixel and Conversions API (OpenAI): The Pixel measures page views, completed tool uses and confirmed lead forms and appointments, and attributes them to eligible ChatGPT ad interactions where possible. Confirmed conversions are also sent through the server-side Conversions API; a shared event ID supports deduplication. Data may include the Pixel ID, visited URL, page title, event and timestamp, click references oppref and __obref, IP address, browser and device details and pseudonymous identifiers. Email addresses and phone numbers are normalized and SHA-256 hashed; only the hashes are sent to OpenAI through these measurement paths. The purposes are conversion attribution, campaign measurement and optimisation. Processing in the United States may occur. See the OpenAI Ad Tools Data Processing Addendum.
  • Reddit Pixel and Conversions API (Reddit, Inc.): Like the other marketing services, the Reddit Pixel starts only after your marketing consent in the vis_consent cookie; no Reddit script loads without it. The Pixel measures page views and confirmed lead forms and appointments, and attributes them to a Reddit ad click where possible. Confirmed leads are also sent server-side through the Reddit Conversions API, only with marketing consent; a shared event ID supports deduplication. Data may include the Pixel ID, URL, event and timestamp, the click ID rdt_cid, the browser ID from the _rdt_uuid cookie, IP address, browser and device details and the SHA-256 hashed email address. Reddit may set its own cookies. The purposes are conversion attribution and campaign measurement. Processing in the United States may occur. See Reddit's privacy policy.
  • Server-side measurement: Confirmed contact and booking events may be sent to GA4, OpenAI's Conversions API and Reddit's Conversions API. A GA4 conversion is sent only when it can be associated with a valid, current browser session. No such transmission occurs without consent for the relevant measurement category.
  • Bot protection: Cloudflare Turnstile protects configured forms against abuse. Technical browser and connection data may be sent to Cloudflare.
  • Embedded YouTube videos: Talk videos initially appear as a local preview. Only after your active click does the site load a video from youtube-nocookie.com. YouTube/Google may then process your IP address, browser and device information and the page viewed. “No-cookie” mode does not prevent every form of storage or further processing.
  • Embedded Wistia videos: Some explanatory videos initially appear as local previews. Clicking loads the Wistia player. IP address, browser and device details, page and playback data may be sent to Wistia, Inc. (USA) and its playback measurement service Mux Data (litix.io).

For processing questions or an objection, email kontakt@visnakovs.de.

4. Hosting and external services

The site is hosted by a technical hosting provider. Depending on the tool or form you use, data may be processed by providers such as Resend (email), Google (calendar, measurement and PageSpeed), Notion (optional follow-up checks), Microlink or image.thum.io (optional page previews), and Cloudflare (Turnstile). The relevant service is only called for the feature you use; applicable processor agreements and transfers must be assessed for the current deployment.

5. Anonymised evaluation of the free tools

The details you enter into the free tools on this website — for example a website address you have checked or figures you have typed in — may be evaluated in anonymised, aggregated form in order to produce general statistics (for example “X % of the pages checked measure no conversions”). For that purpose the details are separated from you and from your email address and are only considered as a total across many checks. Only such aggregate figures are ever published; individual domains, URLs, entries or other details that can be attributed to a person or a company are neither published nor passed on to third parties. The legal basis for the anonymisation step is Article 6(1)(f) GDPR (legitimate interest in improving and benchmarking the services offered on this website); the anonymous dataset that results no longer permits any reference to a person. Results that remain attributed to a person — such as a report requested by email — continue to be governed by sections 2 and 4.

Concretely, the server-side checking tools (landing page check, tracking check, Google Fonts checker) store one single statistics row per check. It contains only: the date without a time, the name of the tool, the language of the page, the result in short form (for example “external detected”, or a grade), and a few counts describing the finding. The suffix of the checked address is stored as well, for example de or ch, so that evaluations can be separated by country. The checked URL, the domain name, your IP address, your browser identifier and your e-mail address are not stored in that row. It cannot be traced back to you or to the website that was checked. The rows are kept in a separate table, apart from enquiries and contact details.

6. URL checks and the services used

Landing page check

The free “landing page check” (/en/tools/landing-page-check) examines a website address you enter. The following services are involved:

  • E-mail notification (Resend, USA): the address you entered and the result are sent to me by e-mail so that I can contact you about critical findings. For the preview in that e-mail, a screenshot of the checked page is produced via microlink.io (USA). Legal basis: Article 6(1)(f) GDPR (legitimate interest) or (b) (steps prior to a contract).
  • Live analysis (Google PageSpeed Insights, Google LLC, USA): only if you actively start the optional live analysis by clicking, the address you entered is transmitted from your browser to Google in order to determine load time and a rendered screenshot; your IP address is transmitted to Google as well. image.thum.io (USA) may be called as a screenshot fallback. Legal basis: Article 6(1)(a) GDPR (consent given by actively starting it).
  • Report by e-mail (Resend, USA): if you actively provide your name (optional) and your e-mail address through the optional “report by mail” form, I send you the requested report once. That does not add you to the newsletter list. The legal basis is handling your request under Article 6(1)(b) GDPR or, where applicable, your consent under (a).
  • Optional re-check (Notion, USA): if you enable the “check again in a week” option, your e-mail address, the checked URL and the grade given are stored in a database at my provider Notion, the page is checked again automatically after about 7 days and you receive a single result e-mail. Legal basis: Article 6(1)(a) GDPR (consent); withdrawal possible at any time.

These services may involve a transfer to the USA (third-country transfer, Articles 44 et seq. GDPR). Where applicable, the transfer relies on the EU standard contractual clauses or the EU-US Data Privacy Framework.

Google Fonts checker

With the free “Google Fonts checker” (/en/tools/google-fonts-check) you enter a publicly reachable website address. The query string and fragment of your input are removed before the fetch, so that identifiers or credentials contained in them are not sent to the target page. The fetch happens server-side, without cookies or credentials belonging to the person submitting it. The target server sees the scanner IP and the clearly labelled scanner user agent, not the IP address of the person submitting. The application examines the HTML and a limited number of the stylesheets linked from it, including ones on other hosts, and returns the technical finding directly to your browser. The URL and the result are neither stored as a lead nor sent by e-mail, and the anonymous statistics row described in section 5 does not contain them either. The hosting log data described in the server logs section, a short-lived abuse-protection counter and Cloudflare Turnstile may be processed temporarily. The purpose is providing and securing the check you expressly started; depending on the individual case, Article 6(1)(b) or (f) GDPR may serve as the legal basis. This technical description does not replace a legal review of the specific processing.

7. Server logs and company-level analysis

Technical request data such as IP address, browser, URL, referrer and timestamp may be processed to operate and protect the site.

Dealfront/Leadfeeder

After your analytics consent, Dealfront/Leadfeeder may receive the IP address, timestamp, URL, referrer, browser and device information, location and usage data, and pseudonymous identifiers to associate a visit with a possible company and the pages it viewed. The script is loaded through Google Tag Manager; this is not a local-only lookup. The purpose is company-level audience analysis, service improvement and preparation of B2B outreach. Dealfront says processing takes place primarily in the EU, with safeguards for processing outside the EEA. See the Dealfront Privacy Center. The exact retention period depends on the active Dealfront plan and account settings and must be confirmed, together with processor terms, transfer safeguards and the final legal basis, before production use.

Self-hosted company-visit measurement

An additional self-hosted company-visit measurement path stays disabled. It sends no visit events to our server. This is separate from the Google, PostHog and Dealfront measurement described above.

8. Your rights

Subject to the applicable requirements, you may request access, rectification, deletion, restriction, portability or object to processing. You may also lodge a complaint with a data-protection supervisory authority. For questions, email kontakt@visnakovs.de.