What we collect, and what we use it for

Who is responsible

The data controller for anything collected on this site: GeoMono.

The data controller's registered trade title and address will be published on this page once the company's registration completes.

Quote and contact forms

The forms on this site submit three fields, and only those three are stored:

• Your email address — required. It is the only way we can reply.
• Your web address — optional. Carried over if you arrived from the free scan.
• Your note — optional free text. Whatever you write is what is stored.

What it is used for

To reply to your request, agree the scope and send a quote. The record is kept in our own database; where a notification channel is configured, the same fields are also delivered to our team as a notification.

We do not send marketing newsletters to addresses left in these forms, and we do not sell this data to third parties.

The free scan

When you enter a web address, we request that address and read what the server already serves publicly: HTML, headers, robots and sitemap files. We do not enter anything that requires a login.

The scan also puts a few sample questions about the brand name derived from that address to an AI engine and reads the answer. Those questions go to that engine's provider; they carry no personal data, only a brand name and a general question.

The scan result is stored along with a shareable link. Anyone holding that link can read the result, which is why scan results are excluded from search engines (noindex). No email address is required to run a scan.

Report links, the panel and sign-ins

When you open a report link we sent you, or the panel, your browser sends a short reading signal to our own server: the address of the page opened (without its query string; in the panel, the page's template), a random visit id, how long the page stayed visible, how far it was scrolled and how many headings were seen. To tell visits from the same browser apart, a random reader id is kept in your browser's own storage.

When you sign in to the panel with an account, and when you press Sign out, we record that too: your account (its email address, role and organisation), the time, only the family of your browser and operating system (for example Chrome, iOS), the device type, and only the network part of your IP address (the first three parts of an IPv4 address, the first three groups of an IPv6 address). Failed sign-in attempts are not recorded.

These records are kept for two reasons: security (to notice a sign-in nobody expected) and service quality (to see whether the reports we send are read and which parts of the panel are used). Only the platform owner sees them. Your full IP address, your browser identification string, your password, your session keys and the link itself are not stored, and no third-party analytics tool is used. The records are deleted automatically after 180 days.

Limiting automated requests

To limit repeated requests from one source, an IP address is used briefly, in server memory, as a counter key. It is not written to the database alongside your form record.

Cookies and visit measurement (Google Analytics 4)

On this site's public pages, Google Analytics 4 runs only if you choose "Accept" in the cookie banner. Before you agree, no request is sent to Google and no analytics cookie is written. "Reject" is as easy as "Accept", and nothing is pre-selected.

If you agree, Google Analytics writes cookies starting with _ga in your browser, and the following is sent to Google: the address of the page you view, which site you arrived from (for example an AI assistant), your device and browser type, the approximate location Google derives from your connection (city level), and your interactions on the page. This data is processed on Google's servers.

We reduce the addresses we send: of the query parameters only campaign tags (utm_) are kept, and the address you type into the scan is not sent. Shared scan results, client reports, sign-in and the dashboard are never measured.

Besides page views, a few interaction events are sent (a free scan being started and its result being shown, the sample report being opened, and contacting us by email, booking link or the contact form); they carry only fixed labels such as the section of the page or the kind of result, and never anything you typed (an address, an email, a name).

Advertising storage and ad personalisation are always off; we run no ads on this site.

IP addresses: according to Google, Google Analytics 4 does not log or store IP addresses.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal and do not show the banner.

To withdraw consent, open "Cookie preferences" at the bottom of the page and choose "Reject". Measurement stops at once and the _ga cookies Google Analytics wrote on this site are deleted from your browser. Your choice is stored only in your browser; if you clear its data, we ask again.

In Google Analytics, event and user data tied to cookies is set to be kept for 14 months; a new visit from the same browser restarts that period. Google deletes data once the period ends. Aggregated reports (not tied to a person) are not affected by it.

Cookie preferences

What this notice does not yet state

A retention period for form submissions, an itemised list of the infrastructure and notification providers we use, and the procedure for handling data requests are not published on this page yet. Rather than invent them, we say they are missing.

If you want your data deleted or corrected, or want to know what record we hold, write to the address below; requests are handled by hand.