Privacy Policy
Last updated: 12 June 2026
1. Who runs this site
Check My Setup is operated by Marcin Lewandowski, trading as Depthia — a sole trader registered in the United Kingdom.
Registered address: Depthia, 66 Paul Street, London EC2A 4NA, United Kingdom.
Contact for privacy matters: privacy@checkmysetup.online.
Under UK GDPR I am the data controller for any personal data processed through this site. I am registered with the UK Information Commissioner's Office under registration number ZC164548.
2. What I process, and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Your public IP address | Look up approximate location, ISP, and ASN so the page can display them to you. The lookup is sent through a small server-side helper that calls a third-party geolocation API (see Section 3). | Legitimate interests (running the service you just asked for) |
| Browser details — user-agent, screen size, language, timezone | Read in your browser and displayed back to you. Never sent to my server. | Legitimate interests |
preferredLang in localStorage |
Remember which language you chose so the site doesn't reset every visit. Strictly necessary for the language switcher. | Strictly necessary — no consent required |
| Advertising cookies and identifiers set by Google AdSense | Show ads on the page. May be used for personalisation depending on your AdSense settings. | Consent (EEA/UK/Swiss visitors) via Google's Funding Choices CMP; legitimate interests elsewhere |
| Server request logs (IP, user-agent, timestamp) | Standard Vercel hosting logs. Used only for abuse detection. Auto-purged on the provider's schedule. | Legitimate interests (security) |
What I don't do: no Google Analytics, no Meta Pixel, no Hotjar, no fingerprinting beyond what your browser already exposes to every site, no email list, no profiling, no automated decisions.
3. Who else sees your data (processors and sub-processors)
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the static site and the IP-lookup helper function. | United States (UK Addendum to EU SCCs in place) |
| ip-api.com | Looks up the geolocation for your IP when the server-side helper is used. | Germany |
| ipapi.co | Browser-side fallback for the same lookup if the server helper is unavailable. | United States (UK Addendum to EU SCCs) |
| Google LLC — AdSense | Shows ads only after you accept the consent banner. See how Google uses advertising data and the policy for partner sites. | United States (UK Addendum to EU SCCs) |
| Google LLC — Funding Choices | Google's IAB TCF v2.2 certified consent management platform (CMP). Shows the consent banner to EEA, UK and Swiss visitors and signals your choice to AdSense. | United States (UK Addendum to EU SCCs) |
Fonts (DM Sans / DM Mono) are self-hosted on this site's own domain, so no font request — and no IP address — is sent to Google for font delivery.
4. International transfers
Some providers above are based outside the UK. Transfers are protected by the UK Addendum to the EU Standard Contractual Clauses, published by the ICO. Where a provider offers a UK adequacy regime equivalent, that is used instead. No transfer relies on the recipient self-certifying alone.
5. How long data is kept
- Your IP lookup result: cached at the edge for 60 seconds, then discarded. Not stored in any database.
- localStorage value (
preferredLang): kept on your own device until you clear it. - AdSense cookies: per Google's documented retention — see Google's cookie policy and Google's advertising technologies overview.
- Vercel request logs: per Vercel's standard retention (typically 30 days).
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data I hold about you
- Have inaccurate data corrected
- Have your data erased
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time — EEA/UK/Swiss visitors: click "Cookie settings" in the footer to re-open the Google CMP and change your choice. Elsewhere, contact us at privacy@checkmysetup.online for an opt-out.
- Lodge a complaint with the UK ICO — ico.org.uk/make-a-complaint
To exercise any of these rights, email privacy@checkmysetup.online. I'll respond within one month. Because I don't hold accounts or persistent user data, most requests can be answered immediately.
7. US residents — state privacy rights
This site is operated by a UK sole trader and does not meet the thresholds that make the California Consumer Privacy Act (CCPA/CPRA) or similar US state privacy laws (Virginia, Colorado, Connecticut, Utah and others) legally binding on it. I extend equivalent rights voluntarily.
- What's collected from US visitors: the same as everywhere else — your IP address (for the lookup you requested, cached for 60 seconds) and, where ads are shown, the cookies and identifiers Google AdSense sets for ad delivery and measurement.
- "Sale" or "sharing" of personal information: I don't sell your data and never have. Serving personalised ads through Google may count as "sharing" for cross-context behavioural advertising under the CPRA. You can opt out of ad personalisation directly with Google at adssettings.google.com, or industry-wide via optout.aboutads.info (DAA) and optout.networkadvertising.org (NAI).
- Global Privacy Control (GPC): if your browser sends a GPC signal, Google's ad systems process it for US state-law purposes where configured. You can also simply reject cookies or use the opt-outs above.
- Right to know / delete / correct / non-discrimination: email privacy@checkmysetup.online and I'll honour the request on the same one-month timeline as UK GDPR requests. Since the site keeps no user database, there is usually nothing held to disclose or delete.
This site does not knowingly collect personal information from children under 13 (see Section 11), and no data is used in ways requiring COPPA parental consent.
8. Cookies and similar technologies
The site uses only the following:
| Name | Type | Purpose | Duration |
|---|---|---|---|
preferredLang | localStorage | Language preference | Until cleared |
Google Funding Choices cookies (e.g. FCCDCF, __gpi) | 1st-party / 3rd-party | Stores your consent choice. Set by Google's IAB TCF v2.2 certified CMP. | Up to 13 months |
Google AdSense cookies (e.g. __gads, IDE, NID) | 3rd-party cookies | Ad delivery and (if your AdSense settings allow) personalisation | Up to 24 months — see Google |
You can change your choice at any time: open Cookie settings. (EEA, UK and Swiss visitors only — the banner doesn't show elsewhere.)
9. Security
TLS/HTTPS is enforced site-wide via Vercel. There is no user account system, no password store, no personal database — so most attack surface that exists on conventional SaaS simply isn't present here.
10. Data breaches
If a breach affecting personal data occurs and presents a risk to anyone's rights, I will notify the UK ICO within 72 hours, and notify affected users where the risk is high.
11. Children
This site isn't aimed at children. If you're under 13, please ask a parent or guardian before using it.
12. Changes to this policy
If this policy changes I'll update the "Last updated" date at the top and, for any change that materially affects your rights, ask you to re-confirm your cookie choice the next time you visit.
13. Contact
Marcin Lewandowski t/a Depthia — sole trader (UK)
ICO registration ZC164548
Depthia, 66 Paul Street, London EC2A 4NA, United Kingdom
Email: privacy@checkmysetup.online