This policy explains what personal data Silent Peak Labs collects through silentpeaklabs.com, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Silent Peak Labs, Rome, Italy. Privacy requests: legal@silentpeaklabs.com. Everything else: info@silentpeaklabs.com.
What we collect
Instant checks: the website address you scan. We fetch only public pages of that website; the result is kept briefly to avoid repeat scans.
The free audit: the website address you give us. We read up to five public pages of that site and its public files (robots.txt, sitemap, llms.txt, and the files that describe it to AI agents). We also ask for its homepage the way a few AI crawlers do, under their name with ours added, where its robots.txt allows them, and look up its AI-agent entry in public DNS through Cloudflare; we ask for no name, email or other personal data.
Emails and Telegram messages you send us: your address or Telegram name and whatever you choose to write. On Telegram, Telegram’s own privacy policy also applies to the conversation.
Technical data: our hosting provider processes IP addresses and request metadata to deliver the site, limit abuse and verify that requests come from people (Cloudflare Turnstile).
We use no cookies and no advertising trackers. If you accept in the cookie notice, we count visits with Cloudflare Web Analytics: which pages are viewed, where visitors come from (the referring site), country, device and browser type, and how fast pages load. It sets no cookie, does not identify you and does not follow you across other sites; if you decline, it never loads. Choosing a language by hand stores one flag in your browser’s local storage, as does your answer to the cookie notice, and an automatic switch to Italian sets one flag in session storage; all of them stay on your device and never reach us.
Why, and on what legal basis
To run the audit you asked for and to reply to you — steps taken at your request before a possible contract (Art. 6(1)(b) GDPR).
To keep the site secure and free of spam — our legitimate interest (Art. 6(1)(f) GDPR).
To understand, in aggregate, how the site is used (Cloudflare Web Analytics) — your consent (Art. 6(1)(a) GDPR), which you can withdraw from the footer at any time.
We never add you to a newsletter, and we never sell or share your data for marketing.
How long we keep it
Emails and messages you send us are kept for up to 12 months, unless you become a client, in which case they become part of our client records. Audit results are cached on our servers for up to one hour and are not linked to you. Our server logs which public website was audited and that the Telegram button was used — never who you are — and hosting logs are kept by our provider for a short period (days) for security and these counts.
Who processes it for us
Cloudflare, Inc. hosts the site, runs the free audit, provides Turnstile bot protection and, only with your consent, Cloudflare Web Analytics. Where data is transferred outside the EU, it is protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
Your rights
You can ask to access, correct, delete, restrict or port your data, or object to its processing, by emailing legal@silentpeaklabs.com. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
Changes
If this policy changes, we update this page and the date above.