Privacy policy
Last updated: 11 September 2026
1. Who is responsible
- Operator
- Holmbridge Labs
- Address
- Lindevej 14
4700 Næstved
Denmark - hello@rampcheck.eu
- CVR number
- 40791191
2. What we process and why
Websites you scan
When you start a scan we store the address you entered and the results, so we can run the scan and show you the result. Legal basis: Art. 6(1)(b) GDPR. The results describe a website, not a person.
Abuse prevention
To stop the free scan being misused, we derive a one-way, daily-changing code (a hash) from your IP address and use it to limit how many scans can be started. We don’t store the IP address itself, and we delete the code within 24 hours. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in keeping the service available).
Purchases
Payments are handled by Lemon Squeezy, LLC as merchant of record: it sells the audit to you, processes your payment and billing details, and issues your invoice. For this it is an independent controller; see its privacy policy. Lemon Squeezy tells us your order number, the amount, your email address and the website to audit. We store your email address only as a one-way hash, so you can retrieve your report with your email and order number. We don’t send you marketing. Legal basis: Art. 6(1)(b) GDPR.
Which ads work
If you arrive through one of our ads or links, the address contains campaign labels such as utm_campaign. We store these labels with your scan so we can see which campaigns lead to scans and orders. They describe the ad, not you: we set no cookie for this, use no tracking pixel, and share nothing with advertising networks. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in knowing which advertising works).
Hosting
Our servers are operated by Hetzner Online GmbH in Germany, which processes data on our behalf under a data processing agreement. We do not keep web server access logs.
3. Cookies
We set exactly one strictly necessary cookie, rc_scan, and only when you go to checkout, so we can show you your report after payment. It contains a random scan identifier and expires after 7 days. We use no analytics, advertising or tracking cookies.
4. How long we keep data
Free scan results: 30 days. Full audit reports and order records: 12 months. IP-derived codes: 24 hours.
5. Your rights
You have the right to access, rectification, erasure, restriction of processing, objection and data portability. Email us to exercise them. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the authority in your own country.
We do not make automated decisions within the meaning of Art. 22 GDPR.