Privacy policy
Data minimisation is a product rule here, not only a policy. Reviewed 18 August 2026.
Last updated · Written and reviewed by Jonatan Tensetti · Tensetti Tools
Who is the controller
Jonatan Tensetti, Swedish sole trader, organisation number 19910516-5253, Lilla Beddinge byaväg 176-0, 231 98 Klagstorp, Sweden, is the controller for personal data processed on this site. Contact jonatan@tensetti.se.
What is collected
- Account data — email address, and the name and profile picture your identity provider returns if you sign in with Google. Legal basis: performance of a contract.
- Assessment answers — the structured choices you make in the CRA and EUDR checks, plus short labels you type. No uploads, no free-text incident detail and no confidential supply-chain evidence are accepted.
- Purchase records — the payment provider's customer, session and subscription identifiers, the product bought, the amount and the invoice data required by Swedish accounting law. Legal basis: contract and legal obligation.
- Technical logs — request metadata needed to run and secure the service. Answer values are never written to analytics or application logs. Legal basis: legitimate interest in a functioning, secure service.
What never leaves your device
The technical writing checker parses and analyses your text inside your browser, in a web worker. Document content, including files you open locally, is never transmitted to this service or to any third party. Free assessments in progress are held in your browser's local storage until you finish or clear them.
Payments
Card data never touches this service. Checkout is hosted by the payment provider, which acts as an independent controller for payment, fraud prevention and tax obligations. Only the identifiers needed to reconcile a purchase and grant access are stored here.
Retention
- Anonymous, incomplete assessments: deleted after 30 days.
- Account and entitlement records: kept while the account exists, then deleted.
- Accounting records: kept seven years, as required by Swedish law.
- Support email: kept two years, then deleted.
Sub-processors
The service uses a hosting and application platform, a managed database and authentication provider, a payment provider and an email provider. They are listed, with their role and location, in the data processing terms.
Transfers outside the EU/EEA
Data is stored in the EU. Where a sub-processor's support or payment operations reach outside the EEA, transfers rely on the European Commission's standard contractual clauses together with the provider's supplementary measures.
Your rights
You have the right to access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent where processing relies on it. Email jonatan@tensetti.se and you will get an answer from a named person within two working days. Do not include incident or supply-chain details in the message. You may also complain to the Swedish Authority for Privacy Protection (IMY).
Cookie policy
This site sets no advertising, profiling or cross-site tracking cookies, and runs no analytics scripts. Everything stored on your device is strictly necessary to deliver a page or a feature you asked for. The full list is below.
| Name | Type | Purpose | Retention |
|---|---|---|---|
| __cf_bm | Cookie (Cloudflare) | Distinguishes humans from bots so pages and forms stay available. | 30 minutes |
| sb-*-auth-token | Local storage (Lovable Cloud auth) | Keeps you signed in so paid packs and your account page load. | Until sign-out or expiry |
| __stripe_mid / __stripe_sid | Cookie (Stripe, checkout pages only) | Fraud prevention during payment. Set only when a checkout is open. | Session to 1 year |
| tensetti-theme | Local storage | Remembers your dark, light or system appearance choice. | Until you clear it |
| tensetti-*-state | Local storage | Saves in-progress assessment answers on your device so you can go back a step. | Until you clear or reset the assessment |
Why there is no cookie banner
Under the ePrivacy rules, consent is required for storage that is not strictly necessary for a service you requested. Every item above is either required to keep you signed in, to protect the site and payment pages from abuse, or to remember a choice you made in the interface. None of it is used to profile you or to follow you across other sites, so no consent banner is shown. If tracking or analytics is ever added, a consent banner will be introduced before it loads and this section will be updated first.
Controlling storage
You can clear or block this storage in your browser settings at any time. Blocking it means you cannot stay signed in, cannot complete a payment, and in-progress assessment answers are lost when you close the tab.
Changes
Material changes are recorded on the corrections page. Sources and legal references on this site were last reviewed 17 August 2026.