Privacy

We collect as little as we can. You can read this website without giving us anything. We only get personal data when you have your website checked, ask for a preview or write to us, and, if you allow it, through Google Analytics, PostHog and Google Ads. PostHog also counts visits without cookies (see “PostHog” below).

Who is responsible

MSGP GmbH, Stallburggasse 2/37, 1010 Vienna, Austria. Email: hello@telljohnny.com. Full details are in the Imprint.

Hosting

This website is delivered by a hosting and content delivery provider based in the USA and certified under the EU-US Data Privacy Framework (an adequacy decision of the European Commission). When you open a page, it processes your IP address, the page you ask for, the time and your browser’s details, so it can deliver the page and protect it against attacks. Legal basis: our legitimate interest in a fast and secure website (Art. 6(1)(f) GDPR). We name the provider on request.

Fonts are stored on our own server. Your browser does not connect to Google Fonts or any other font service.

The website report

When you enter your website address on this site and have it checked, the address goes to our app at app.telljohnny.com, which builds the report. This policy covers that too. For the report we process:

• the website address you enter,
• your IP address and your browser’s details, to keep bots out and limit the number of checks per visitor,
• your email address, if you unlock the full report: you get a code by email and are signed in with it,
• where you came from: the campaign tags in the link that brought you here (utm values) and the domain of the site you came from, such as google.com, so we can count which ways lead to a report (our legitimate interest, Art. 6(1)(f) GDPR). No cookie is set for this.
• only if you allowed advertising cookies: the click ID of the ad you came from, kept with the report for up to 90 days (see “Google Ads” below).
• only if you allowed statistics cookies: your Google Analytics ID and the ID of your visit, kept with the report for up to 90 days (see “Google Analytics” below).
• only if you allowed statistics cookies: your PostHog ID and the ID of your visit, kept with the report for up to 90 days (see “PostHog” below).

The app loads the website as any visitor sees it, takes screenshots, measures its speed through Google’s PageSpeed Insights (Google LLC, USA; Google is certified under the EU-US Data Privacy Framework) and has an AI model from OpenAI (OpenAI, L.L.C., USA; standard contractual clauses) judge its content. Google receives the website address, OpenAI the website’s public text. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in a service without abuse (Art. 6(1)(f) GDPR). Only check a website that is yours or whose owner you act for.

We keep the report for 7 days and the screenshots for 90 days; then they are deleted. If someone checks the same website again within a day, they see the same report. The report’s hosting, bot protection and database run at providers we name on request.

The preview form

When you ask for a free preview, we receive:

• your website address,
• your email address,
• a note, if you write one,
• the language and the page you sent it from.

We use this to build your preview, send it to you, and answer your questions about it. Legal basis: steps you ask for before a contract (Art. 6(1)(b) GDPR). The form sends the request to our server at telljohnny.com, at our hosting provider. From there it goes as an email to our inbox, sent by our email service Resend (Plus Five Five, Inc., San Francisco, USA), which is certified under the EU-US Data Privacy Framework and bound by standard contractual clauses as well. Nothing from the form is stored on the website.

We delete your request at the latest 90 days after we sent the preview, unless you become a customer. We only email you about your preview. You can ask us to delete your request at any time.

Email and the contact form

When you write to us, by email or with the contact form on our About page, we use your name, your address, the subject and your message to answer you (Art. 6(1)(b) GDPR for questions about a contract, otherwise Art. 6(1)(f) GDPR). The contact form also sends the language and the page you sent it from. It takes the same way as the preview form: to our server at telljohnny.com, then as an email to our inbox, sent by Resend. Nothing from the form is stored on the website. An email provider runs our mailbox for us as our processor; we name it on request. We delete your message once your question is settled, unless the law requires us to keep it longer.

Cookies

We set one cookie that every visitor needs: it remembers your cookie choice. All other cookies are only set after you allow them in the cookie banner. You can change your choice at any time under “Cookie settings” at the bottom of every page.

Legal basis: the necessary cookie, § 165(3) of the Austrian Telecommunications Act (TKG 2021) and our legitimate interest (Art. 6(1)(f) GDPR); all other cookies, your consent (Art. 6(1)(a) GDPR).

Google Analytics

We use Google Analytics to see how visitors use our pages: which pages they open, where they come from (a search engine or an ad, for example), which device and browser they use, roughly which country and city they are in, and whether they have their website checked, unlock the report or ask for the free preview. The address and email you enter there do not go to Google. Google Analytics stores no IP addresses. The Google tag only loads after you allow statistics cookies (Google Consent Mode v2, basic mode). Before that, your browser does not contact Google.

You unlock the report and ask for the free preview in our app (app.telljohnny.com), which loads nothing from Google. If you allowed statistics cookies, the website passes your Google Analytics ID (from the _ga cookie) and the ID of your visit on to your report. We keep both with the report for up to 90 days and, under them, tell Google Analytics from our server that the report was unlocked or the preview requested, with the time. Your email, your website’s address and the report itself do not go to Google.

Google processes the data for us as our processor and keeps the data on single visits for 2 months. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time under “Cookie settings” at the bottom of every page.

PostHog

We use PostHog to see how visitors use our pages and the website report: which pages and parts they read, how far they scroll, what they click and where they leave. PostHog runs through our own servers; your browser does not contact PostHog. What you type into a form, your email address and the click ID of an ad never go to PostHog, and of a page’s address only the campaign tags (utm values).

Without your consent, PostHog counts visits without cookies and stores nothing in your browser. To tell visits apart, PostHog’s servers form a hash of your IP address and your browser’s details with a value that changes every day and is deleted after the day; PostHog does not store your IP address. A visit on another day counts as a new one. In the report on app.telljohnny.com, PostHog never stores anything in your browser and records nothing. Legal basis: our legitimate interest in knowing how our pages are used, so we can make them better (Art. 6(1)(f) GDPR).

If you allow statistics cookies, PostHog sets its cookie (see the table above) and keeps its state in your browser’s storage, so it recognises your browser on later visits, and it records your visits to this website as a replay of the page: what you see, scroll and click. Everything you type is hidden in the recording, and the email fields are left out. When you then have your website checked, the website passes your PostHog ID and the ID of your visit on to your report, so the website and the report count you as one visitor. We keep both with the report for up to 90 days. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time under “Cookie settings” at the bottom of every page; the cookie and the stored data are then deleted.

PostHog processes the data for us as our processor, under a data processing agreement, and keeps it for at most one year. Provider: PostHog Inc., USA; the data is stored on PostHog’s servers in Frankfurt (EU). Should PostHog access it from the USA, the EU standard contractual clauses apply.

Google Ads

We advertise with Google Ads and count how many website checks, unlocked reports and requests for the free preview come from an ad. Google Ads only runs after you allow advertising cookies (Google Consent Mode v2, basic mode); before that, it sets no cookies and learns nothing about your visit.

You unlock the report in our app (app.telljohnny.com), and you ask for the preview there too. If you came from an ad and allowed advertising cookies, the website passes the ad’s click ID (gclid) on to your report. We store it with the report and tell Google Ads from our server that a report was unlocked or a preview requested after that click, with the time. Your email and your website’s address do not go to Google.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA; Google is certified under the EU-US Data Privacy Framework. How Google uses data from sites like this one:policies.google.com/technologies/partner-sites. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time under “Cookie settings” at the bottom of every page.

Your rights

You can ask us what data we hold about you, and have it corrected, deleted, restricted or handed to you in a common format. You can object to processing based on our legitimate interest, and withdraw any consent for the future. Write to hello@telljohnny.com.

If you think we handle your data unlawfully, you can complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).