Skip to content
Privacy

Privacy policy

Last updated 9 September 2026.

Data controller

Andersen Innovations Studio, a sole proprietorship operated by Rafal Andersen, organisation number 871228-7971, Packhusgatan 33 lgh 1301, 216 47 Limhamn. Phone +48 450 120 210.

Analytics, cookies and operations

This site can optionally run Google Analytics, with no advertising and no cross-site tracking, to help us understand how visitors use the site and to improve it. Analytics stays off until you actively turn it on in the cookie banner or the footer's Cookie settings; declining or ignoring the prompt keeps it off, and you can change your choice at any time in Cookie settings. If analytics is not currently available on this website, no analytics request of any kind is made, and Cookie settings say so plainly. When enabled, Google Analytics stores a pseudonymous identifier in cookies named _ga and _ga_<property>, which expire within 180 days unless you withdraw your choice earlier, in which case they are removed straight away; your own consent choice is separately remembered on this device for up to 180 days before you are asked again. Analytics records the pages you view, a general, low-detail category of where you arrived from (for example a search engine or an AI assistant, never the exact referring page or address) and which of our country sites you are on; it never receives your name, email address, phone number, contact-form contents, the exact URL you submitted, or any query string you typed. If you successfully submit the contact form, we also record, as a single pseudonymous event with no form content attached, that a message was received - this only confirms our system accepted your submission, not that we have replied or that any email has been delivered. If you click the "Book a free 20-min call" link, we similarly record, as a single pseudonymous event, that the link was clicked - this only records that intent, never that a call was actually booked or held. Google signals, ads personalisation and enhanced measurement (automatic form, scroll, outbound-click and video tracking) are all turned off. Per Google's own documentation, Google Analytics does not log or store your individual IP address, although your device's request is still necessarily processed by Google's infrastructure to deliver the service. Inside the Google Analytics account, individual event- and user-level data is deleted automatically after 2 months, with the reset-on-new-activity option switched off; this 2-month window applies only to that underlying event/user-level data, not to the separate aggregated reports Google Analytics produces, which are unaffected by it. The website is hosted on the Lovable platform; the platform's own hosting-level visitor analytics is disabled, a configuration last verified on 6 September 2026, and as the hosting provider it may still process strictly necessary technical logs, security logs and infrastructure cookies required to operate and protect the service.

The contact form

Through the contact form we collect name, email address, company, message and - if you choose to provide it - phone number. The details are used only to answer and follow up your enquiry. The form is protected against abuse with rate limiting among other measures; submitted details are processed in our own systems and with the providers we use for web operations, data storage and email delivery. A confirmation is sent to the email address you provide.

Optional booking via Google Calendar

If you choose the "Book a free 20-min call" option instead of the contact form, you leave our website and follow an external link to a Google Calendar booking page provided through our Google Workspace account, under Google's own terms and privacy policy. Google provides and operates the booking page itself. Once you book a slot, we receive the name, email address and time you provide, plus any language or topic you choose to add, so that we can prepare for and hold the meeting. We do not receive analytics or tracking data about your visit to that page. The call itself takes place on Google Meet.

Enquiries and legal basis

Details you provide by phone or through the contact form are used only to answer and follow up your enquiry, with legitimate interest or pre-contractual steps as the legal basis. The details are not used for marketing without separate consent.

Your rights

You have the right to request access, rectification, erasure and restriction of processing, and to object to processing. Contact us by phone. Complaints can be lodged with the Swedish Authority for Privacy Protection (IMY).

Storage

Technical operation logs at the platform provider are handled by the provider as part of operating the service. Details from phone enquiries and the contact form are kept no longer than needed to answer and follow up the enquiry.

Automated website checks

If this site offers a homepage check, submitting a website address starts an automated technical review. A website address and technical identifiers may be personal data. We process the website address you submit, the technical results produced (measured using Google PageSpeed), a record identifier and timestamps for the request, and a pseudonymous identifier used only to limit abuse and repeated requests. This processing runs on our shared company backend, hosted with Cloudflare, with results stored using Supabase. The submitted address, the technical results, any report and the email address you provide are never sent to Google Analytics, and starting a check does not enrol you in any marketing. Before checking, the address you submit is normalised to its origin plus a single slash: any path, query string or fragment is removed, and addresses containing embedded login credentials are rejected, so only the public homepage address is ever checked.

Google PageSpeed testing

The public homepage address is passed to Google PageSpeed to measure page performance. Google acts as an independent data controller for this processing under its own applicable API and privacy terms, see https://policies.google.com/privacy. Tests may run from Google infrastructure in Europe, North America or Asia, and the relevant contractual safeguards for international transfers apply to this processing.

Legal basis for automated checks

We process this data on the basis of legitimate interests: carrying out the technical check you have actively requested and protecting the service from misuse. The technical results are used to produce and retain the report, and the pseudonymous identifier is used only to limit abuse; none of this is used for marketing or advertising profiling. You can object to this processing by contacting rafi@anderseninnovations.com. We will consider your circumstances and stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need it to establish, exercise or defend legal claims.

Report by email

Email copies are currently unavailable. If this option is enabled, providing an email address to receive a copy of the check result would be optional. Before any report is included in an email, it would be verified again on our server. We would send the requested copy through Resend and keep operational records of whether the provider accepted the message, the attempt failed, or sending was blocked. Provider acceptance would not confirm delivery to your mailbox. A request being recorded as received would not mean the email has actually been delivered.

Review data retention

Records created by these automated checks are kept only as long as needed to run and support the service. Application reports and queue items that have reached a final state are normally eligible for cleanup 7 days after creation; records used to limit repeated attempts become eligible for cleanup after 24 hours; and send logs kept only for reviewing this service become eligible for cleanup after 30 days. Work that is still active or whose outcome is uncertain is kept until it is resolved, and cleanup runs in batches, so a backlog can delay when older records are actually removed. These timeframes do not cover other contact details you provide separately, shared suppression records, or backups kept by our providers. Suppression records are kept for as long as needed to continue honouring a block on sending.

Data controller

Andersen Innovations Studio (Rafal Andersen), Packhusgatan 33 lgh 1301, 216 47 Limhamn, Sweden. Organisation number 871228-7971. Phone +48 450 120 210.

Contact is by phone or through the website's contact form.