Privacy and cookies

In force from 1 November 2026. This is the English version of our privacy notice; it is being reviewed and may still be clarified.

In short: for a redesign we ask for your website address and your email, and we download your current website to take its content. For a new website we ask for your name, email and your answers in the questionnaire. We need both to build your designs. If you don't choose a design, we delete everything: the designs within thirty days, files uploaded in the questionnaire within 120 days. We don't sell your data to anyone and don't use it for anything else.

Who is responsible

The controller is UDT s.r.o., Horníkova 2965/32f, 628 00 Brno-Líšeň, Czech Republic, Company ID 28288670. You can write to us at hello@slashsite.com.

What we collect from you and why

We don't write your IP address into the database. Only a fingerprint of it is stored (HMAC-SHA256) with a key that isn't in the database; the address can't be put back together from the fingerprint. In the same way, the request store doesn't hold the link from the confirmation email itself, only its fingerprint.

For each attempt to send the redesign form we keep the website address and email entered for 90 days, so we can spot misuse of the form. Then we delete them and only a record that the attempt happened remains.

The legal basis is the performance of a contract, or steps taken before entering into it; for limiting the number of requests, our legitimate interest in the form not being misused.

The confirmation email

For a redesign, after you send the form one single message goes to your address. It contains a link with which you confirm the request. It deliberately contains no prices, deadlines or the word free. It is not a sales offer; it is a check of the address.

If you don't click the link, the request lapses by itself after 48 hours and you won't hear anything more from us. We send at most three such messages to one address a day.

For a new website we send a code to your email, with which you confirm the address in the questionnaire.

Your current website

To check that the email belongs to the website, we download the home page and a few pages where businesses usually have their contact details, and look for the address you entered. We never give back addresses found on someone else's website; otherwise the form would be a tool for harvesting contacts. Only a yes or no goes back to the browser.

After confirmation we take the content from the website, that is texts, prices and photos, and build two designs from it. We use photos from your website even with people who can be recognised in them; we assume they have already agreed to be shown on your website. From photo libraries we only take pictures in which nobody can be recognised. We don't put other people's logos in the designs.

If you don't have a website yet

In the questionnaire for a new website you answer questions about your website and can upload a logo, photos and a photo of a leaflet or business card. We store them with us and use them only for the designs of your website. If you send us a link to your profile on Google Maps or Facebook, we take the address, opening hours and a description of your services from it. We don't use photos from the profile; customers often uploaded them, not you.

When we delete it

• An unconfirmed redesign request lapses after 48 hours.
• An unfinished request for a new website lapses at the latest 7 days after the last change, unless you send it.
• We delete designs you didn't choose after thirty days, together with everything we downloaded from your website.
• We keep confirmed requests for 90 days, so we can find them if you get in touch later.
• We delete files uploaded in the questionnaire after 120 days if you don't order and pay for a website.
• Change requests and comments on designs that you write to us in the client area or directly on a design preview we keep for the duration of the contract, so it's possible to trace what changed on the website and when.
• Attachments to them (photos, PDFs, documents) we delete 90 days after the request is closed; unfinished uploads after two days. Whatever we use from them on the website stays on the website.
• For customers we keep data for the duration of the contract and then for as long as the law requires: accounting documents for 10 years.
• We delete everything sooner if you ask; just write to us.

Who receives the data

• Cloudflare: hosting, database, file storage and the network the website runs on.
• Microsoft: outgoing email.
• Stripe: card payment when you order. It receives the amount, your email and the payment details; you enter your card number directly with Stripe, we never see it.
• Ollama: a language model that answers as Ren and recommends parts of the website in the questionnaire. It receives the text of the conversation, and in the questionnaire only what you do (trade, services, how people get in touch with you, the name of a club, band or event), without contact details.
• Anthropic: a language model that builds designs and edits websites. It receives the materials for your website: texts, photos, contact details and answers from the questionnaire.
• GitHub: storage for our source code, which also holds the website designs and their materials.
• The domain registrar: for a new website, registering the domain in your name. It receives the domain holder's details: name, address, email and phone number.

Cloudflare, Microsoft, Ollama, Anthropic, GitHub and Stripe are American companies, so the data we pass to them may leave the European Union and the United Kingdom.

We don't pass data to anyone else, don't sell it and don't use it for profiling or targeting advertising.

Cookies and measurement

The website has no advertising or analytics cookies and no cookie banner, because it doesn't need one. The browser only keeps an identifier of your conversation with Ren, so the chat holds together, and your progress in the questionnaire.

Visits to the designs and websites we build for you we count ourselves: from each page view we store only a fingerprint of the address and browser (HMAC-SHA256 with a key that isn't in the database), the page shown, the country, the type of device and where you came from. From that we can tell how many people visited and what interested them, but not who exactly they were.

In the questionnaire for a new website we only record which step someone is on, what type of website they chose, whether they are on a phone or a computer, and how long they spent on the step. We don't store the content of the answers or an address fingerprint with it; it only tells us where people leave the questionnaire.

When someone sends a form, we record that an attempt happened and how it turned out, so we know how many visits ended in a real enquiry. The content of the form doesn't go into the statistics; we only keep data from it as described above.

Your rights

You have the right to know what we hold about you, to have it corrected, to have it deleted, to restrict processing, to take your data with you and to object. Just write to hello@slashsite.com; we will get back to you within thirty days.

If you feel we are handling your data wrongly, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), or to the data protection authority in the country where you live; in the United Kingdom that is the Information Commissioner's Office.