Privacy policy

Version 1 · Effective 14 September 2026

1. Who is responsible

Webkonsulenterne A/S is the data controller for CacheCrawler and for cachecrawler.net. Company details are at the foot of this page.

We have not appointed a data protection officer; the scale and nature of our processing do not require one.

If you have a question about anything in this policy, write to the address below. We answer within one month.

2. What we process, and why

Account data: your name, email address and password. The password is stored only as a salted hash and cannot be read by us. The basis is performance of our contract with you.

Billing data: billing email, chosen package and payment status. Card and bank details go straight to the payment provider and never pass through our systems.

The sites you ask us to watch: the domain, the addresses we fetch, and for each fetch the status code, every response header, where any redirect points, the response time, and the page's title and meta description. Titles and meta descriptions are content from your pages; we store them because they are what the report on broken and empty pages is built from. We do not store page body text, images or other content.

We fetch publicly reachable pages only. We do not log in to your site and we do not submit forms. If a page is behind a login, we never see it.

Enquiries: what you write to us in support or by email, so that we can answer.

Audit trail: who did what in the dashboard, with a timestamp and IP address. The basis is our legitimate interest in being able to see what happened on an account.

Service email: notice when a crawl fails, when a page stops caching, when a trial is ending. These cannot be opted out of while the service is active, because they are part of what you bought.

3. Your visitors' data

We fetch your pages the way an ordinary visitor would and keep the response. We do not run on your server, have no access to your database, and receive nothing about your customers, their orders or their behaviour.

If a publicly reachable page contains personal data — a staff page with names, say — it may appear in the title or meta description we store. You choose which addresses we fetch, and you can remove a site at any time, after which its data is deleted.

4. Who receives data

Our hosting provider and our email delivery provider, both under data processing agreements. Every sub-processor is named, with what it receives and where it is, at cachecrawler.net/sub-processors.

Our payment provider, once payment is active on your account.

Authorities, where we are legally required to.

We do not share personal data with advertisers or data brokers, and we do not sell it.

5. Transfers outside the EU/EEA

CacheCrawler runs from Denmark. Where a provider processes data outside the EU/EEA, the transfer rests on an adequacy decision or on the European Commission's standard contractual clauses.

6. How long we keep it

Account data: for the life of the account, then deleted within 30 days.

Crawl data for a site: governed by the retention period on your package, and anything older is deleted automatically. Remove a site and its data goes with it.

• Enquiries: 12 months after the last exchange.
• Audit trail: 2 years.
• Server logs: 30 days.
• Accounting records: 5 years after the end of the financial year they belong to, as Danish bookkeeping law requires.

7. Cookies

The front page and the legal pages set no cookies.

When you sign in we use strictly necessary cookies only: a session cookie, a security token against form abuse, and a "remember me" cookie if you choose it. They do not track you, which is why there is no consent banner.

8. Security

Passwords are stored as salted hashes. Traffic to and from the service is encrypted. Access to production systems is limited to the staff who need it, and actions in the dashboard are written to the audit trail.

If a personal data breach occurs that poses a risk to you, we notify the Danish Data Protection Agency within 72 hours, and you directly where the risk is high.

9. Your rights

You have the right to ask for access to the personal data we hold about you, for its correction or deletion, for restriction of or objection to processing, and for a copy in a machine-readable format.

Write to the address at the foot of this page. We answer within one month.

You can complain to Datatilsynet, the Danish Data Protection Agency, at datatilsynet.dk, if you are unhappy with how we handle your data.

10. Changes

Material changes are announced by email before they take effect. Every version carries its own effective date, and earlier versions are available on request.