This notice explains what data Leidur collects, why, who it is shared with and the rights you have under the GDPR.
Last updated: July 28, 2026
Leidur is a free website-audit tool at leidur.com, operated by Sequence OÜ (reg. code 11371952, Pirnipuu pst 170-1, 74117 Maardu, Estonia) ("we", "us"). We are the data controller for the personal data described here.
For any privacy question or request, contact us at viktor@sequence.ee.
When you run an audit, we process the website address (URL) you submit and your IP address. The IP is used only to prevent abuse and rate-limit requests. We do not ask for your name or email to run an audit.
When you sign in with Google, we receive your email address, name, profile picture and Google account identifier from Google, so we can authenticate you and keep the list of sites saved to your account.
We keep basic technical logs (request time, status, approximate page load) needed to run and secure the service.
We store the audits generated for the URLs entered, so results can be shown and improved.
• To run the audit you request: our legitimate interest in providing the service, and performing the request you made.
• To secure the service and prevent abuse (IP-based rate limiting): our legitimate interest in keeping Leidur available and safe.
• To authenticate you when you sign in: necessary to provide the account feature you asked for.
We do not use your data for advertising, and we do not sell it.
To produce a report, the URL you enter (and content read from that public page) is sent to third-party services that act as our processors or independent controllers:
• Google: PageSpeed Insights (speed test on the URL), Knowledge Graph, favicon service, and Sign-in with Google.
• AI providers: Google (Gemini) and Groq, to analyse content and generate the AI-visibility report.
• Jina AI (r.jina.ai): to fetch and read public page content.
• Reddit: public search, to check off-page mentions of a brand.
• Our hosting provider in the European Union (Zone Media / zone.ee).
These providers receive the data needed for their function only. We do not send them your account email as part of an audit.
Some processors (Google, Groq, Jina AI, Reddit) may process data outside the European Economic Area, including the United States. Where that happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
IP-based rate-limit records are short-lived and cleared automatically (within about an hour). Technical logs are kept for a limited period for security. Audit results are kept while they are useful to run and improve the service. Account data is kept while your sign-in exists and is deleted on request.
Leidur uses strictly necessary and functional cookies, plus, only with your consent, one analytics tool:
• Session and login cookies (set only when you sign in): keep you authenticated. HttpOnly, Secure, SameSite=Lax.
• A short-lived cookie during the Google login flow to protect against request forgery.
• A language-preference cookie that remembers your chosen interface language.
• Analytics (only with your consent): we use Google Analytics 4 to understand how the site is used, pages viewed, approximate region, browser and device type. IP addresses are anonymized and analytics data is retained for 14 months. Until you click Allow in the cookie banner, no analytics cookies are set and Google receives only anonymous, cookieless signals (Consent Mode).
You can change or withdraw your choice at any time via the Cookie settings link in the footer. A full list with cookie names and lifetimes is at leidur.com/cookies. We do not use advertising or cross-site tracking cookies. Fonts are self-hosted, so viewing the site does not send your IP to a font CDN.
Creating an account does not subscribe you to anything. Service emails about your own reports are possible, and they always say why you received them.
Product emails (new checks, changes in how AI assistants read websites, occasional Leidur news) go only to people who ticked the box on the sign-in screen. We store that choice together with the date, the IP it came from and the version of the wording agreed to, so consent can be proven, as GDPR art. 7(1) requires. The legal basis is your consent, GDPR art. 6(1)(a).
Every such email carries an unsubscribe link that works in one click without logging in. You can also switch it off in your account, or write to viktor@sequence.ee.
We do not sell or rent addresses and we do not pass them to advertising networks.
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, and to data portability. To exercise any of these, contact viktor@sequence.ee.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.
We may update this policy as the service evolves. The date at the top shows the latest version.