Privacy policy

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Dalkiran & Ayirtman GbR (trading as Seafrey)
Akazienstraße 3A, 10823 Berlin, Germany
Email: hello@seafrey.de

2. The short version

• We do not use cookies, tracking, analytics or advertising tools on this website.
• Fonts and images are hosted by us. No data goes to Google Fonts or similar services.
• We only receive personal data if you contact us, run the website scan or order a report.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit, the hosting provider's servers automatically process technical data: your IP address, date and time, the page requested, the referring page, your browser and operating system, and the response status. This is necessary to deliver the website securely and to protect it against abuse.

Legal basis: our legitimate interest in a secure and reliable website (Art. 6 (1)(f) GDPR). The data is kept only as long as needed for these purposes.

Transfers to the USA: we have a data processing agreement with the provider. Transfers to the USA rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

4. Contact form and email

If you send us a message through the contact form or by email, we process the details you give us (for example name, business name, email or phone number, and your message) to answer your enquiry and to prepare a possible agreement.

The form sends your message by email through our email delivery service Resend (Resend, Inc., USA). We also receive emails in our mailbox at our email provider. Both act on our behalf under data processing agreements; transfers to third countries rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Legal basis: Art. 6 (1)(b) GDPR for pre-contractual steps you ask for, otherwise our legitimate interest in answering enquiries (Art. 6 (1)(f) GDPR).

Storage: we delete your enquiry once it is dealt with and no contract follows, unless we are legally required to keep it. Where a contract follows, statutory retention periods apply (generally six to ten years for business records).

5. The free website scan and the full report

When you use the website scan, we receive the address you enter and send passive requests to that public website, the way a search engine would: we read the homepage, its security headers, robots.txt, sitemap.xml, llms.txt and a few internal links. We do not log in, fill in forms or probe for hidden files. The result is shown to you and kept in the server's working memory for up to 10 minutes so that repeated scans of the same site do not hit it again; we do not store it in a database. To measure loading speed and accessibility we also send the address to Google PageSpeed Insights (Google Ireland Ltd., Dublin), which loads the public page like a visitor would; Google receives the website address, not your IP address. To suggest AI solutions for the business, we send the text of that public homepage to Anthropic (Anthropic PBC, USA), whose AI model writes the ideas; Anthropic receives the page text, not your IP address or email. Your IP address is used for up to 10 minutes to limit the number of scans (legitimate interest in preventing abuse, Art. 6 (1) (f) GDPR).

When you use “No website yet”, we send the description you type to Anthropic (Anthropic PBC, USA), whose AI model writes the plan. Anthropic receives the description, not your IP address or email, and we do not store it. The optional profile handle stays in your browser unless you send it to us with the contact form. Your IP address is used for up to 10 minutes to limit the number of plans (legitimate interest in preventing abuse, Art. 6 (1) (f) GDPR).

If you order the full report, we receive your email address and the website address and send them to ourselves by email through Resend (Resend Inc., USA), to prepare and deliver the report (Art. 6 (1) (b) GDPR). Payment is handled by Stripe (Stripe Payments Europe Ltd., Ireland), which receives your email address and payment details directly; we do not see your card details. We keep order records for as long as tax law requires.

6. Links to other websites

Our pages link to websites of our clients and to our own products. When you click a link you leave our website, and the privacy policy of the target site applies.

7. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you can withdraw it at any time with effect for the future. To use your rights, email hello@seafrey.de.

You also have the right to complain to a data protection authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

8. Security

This website is served over an encrypted HTTPS connection. You can recognise it by the lock symbol in your browser's address bar.

9. Changes

We update this policy when our website or the legal situation changes. The current version is always on this page.