Privacy policy

Last updated: 18 October 2026

This site is built to collect as little data as possible. No cookies, no advertising trackers, no Big Tech analytics: the data you share with us stays on our own server. This page explains, without jargon, what is collected, why, for how long, and how to exercise your rights.

At a glance

• No cookies, and nothing is stored on your device to track you. That is why you see no consent banner: there is nothing to accept.
• No third-party trackers: no Google Analytics, no advertising pixels.
• Your data on our own server, administered by Imad Oufrid himself.
• Never sold, never used for advertising.
• The free tools run in your browser: your files are not sent to anyone.

Data controller

Imad Oufrid, independent web developer and digital marketing consultant based in Morocco (brand name OUFRID).
Email: contact@oufrid.com · Phone / WhatsApp: +212 661 29 76 13.
See also the legal notice.

Where your data is hosted

The site and its data are hosted on a virtual private server (VPS) rented from Hostinger International Ltd (Cyprus) and administered directly by Imad Oufrid. Hostinger provides the machine; it does not use your data.

1. Contact, quote, appointment and SEO audit report forms

Data collected: name, email, phone / WhatsApp (optional), company (optional), current website, country, services selected, budget range, deadline, message, chosen appointment slot, the page you sent the form from, and time zone.

Why: to answer your request, prepare a quote and book your appointment.

Legal basis: steps taken at your request before entering into a contract, together with your consent, given through a mandatory checkbox.

How: your request is stored on our server. A notification is emailed to Imad Oufrid's mailbox (contact@oufrid.com) and you automatically receive a confirmation email.

Retention: 3 years after the last contact if you did not become a client. For clients, for the duration of the contract and then as long as accounting and legal obligations require.

2. Free SEO audit tool

When you enter an address, our server fetches the corresponding public page to analyse it. The address and the result of the analysis are not stored. The only exception: if you ask for the detailed report, your request becomes a contact request as described in section 1.

2a. Domain check, speed test and conversion audit

For these tools, our server only reads public information: the domain's DNS records, its certificate, its headers, or the page you enter, opened in a browser on our own server. The analysed address and the result are kept in memory for at most 10 minutes, to avoid repeating the same analysis, then erased; nothing is written to disk.

2b. Newsletter

If you subscribe, we keep your email address, the chosen language, the page you subscribed from and the dates of subscription, confirmation and, where applicable, unsubscription. The subscription is only active once you confirm it through the link sent by email (double opt-in). Every email contains a one-click unsubscribe link. Your address is never sold or used for anything else. After you unsubscribe, the address is kept only so that we do not write to you again; you may ask for its complete deletion at any time.

2c. Client reviews

A review can only be left by a client, through a personal link sent to them. We keep the name, role and company given, the rating, the text and the date. The review is only published after being read, without the email address, and with only the first name and initial if you choose so. You may ask at any time for it to be changed or removed.

3. Visitor statistics, without cookies

To learn which pages are useful, we use our own measurement tool, with no cookies and nothing stored on your device. Each day, it counts:

• the number of page views;
• the number of unique visitors, computed from a fingerprint (hash) of the IP address and browser identification, mixed with a random "salt" that changes every day and is never written to disk, so you cannot be recognised from one day to the next;
• the pages viewed, the referring site (domain name only), language, device type (mobile, tablet, desktop) and time zone;
• a few useful events (quote sent, WhatsApp click…).

No IP address is stored. Measurement is switched off if your browser sends a Do Not Track or Global Privacy Control signal. Statistics are kept for 400 days, in aggregated form only.

Because no cookies or trackers are used, no consent banner is needed. We would rather not track you than ask for your permission to do so.

4. Server logs

Like any web server, ours keeps technical logs (IP address, requested page, date, browser). They are used only for security (detecting abuse and attacks) and are deleted after 14 days.

5. The free tools

The tools run in your browser: your photos, documents, messages, passwords, recordings and keys are not sent to anyone. The libraries are hosted on this site. Exceptions, all needed for the service you ask for:

• AI models (background removal, ID photo, transcription, translation, "drawing" upscaling): downloaded once from Hugging Face, which sees your IP address as for any download. None of your data is sent.
• Maps (land measurement, topo, photo metadata): tiles come from OpenStreetMap, which receives the displayed area and your IP address.
• Elevation profile (topo): the route coordinates are sent to Open-Meteo to get the elevations.
• Password leak check: only the first 5 characters of the password's SHA-1 hash are sent to Have I Been Pwned (k-anonymity); the password never leaves your device.
• Exchange rates: our server fetches them every day from ExchangeRate-API and publishes them on this site; your browser only contacts this site.
• Votes for upcoming apps: a vote is sent to our server, no account needed. To count one vote per person, the server keeps an anonymous fingerprint (a salted hash of your IP address, which cannot be reversed), never the address itself.
• Scam reports, ideas and bugs: sent to our server, with no account and no email. The site refuses a submission that contains an email address, a card number or an IBAN. Scam reports are reviewed by hand before being published as a file on the observatory; ideas and bugs are never published. To have a submission deleted, send us its number.

Storage on your device: the site keeps your preferences and drafts in your browser (local storage, not cookies): language, theme and text size, saved GPS points (topo), daily challenge streak, the family mode relative's name and number, CV draft (photo included), prayer times city and settings, latest exchange rates, a flag so the club invitation is shown only once and, to work offline, downloaded pages, libraries and AI models. This data is never sent to us; you can clear it all in your browser settings (site data).

Check it yourself: the "How we protect your files" page shows every network request of the site live.

6. Testers club

Sign-up for the Android app testers club goes through a Google Forms form: Google's privacy policy applies to that form. It collects the email of your Google account, your phone's brand, model and Android version, the app families you are interested in, your language and, if you provide them, your first name or nickname, your country and whether you agree to appear in the Hall of Fame.

This data is used only to send you test invitations (and, if you agreed, to show your first name or nickname in the credits). When you join a test, your email appears in the developer's Google Play Console, as for any Google Play test. Legal basis: your consent. It is kept until you leave: reply STOP to any email to leave the club at any time.

7. WhatsApp

The WhatsApp button opens the WhatsApp app, operated by Meta. The conversation that follows is governed by WhatsApp's privacy policy. On our site, only the click itself is counted, anonymously (see section 3).

Sharing your data

Your data is never sold, rented or used for advertising. It is shared only with our hosting provider (for the technical operation of the server) and, when a project requires it, with a third party only with your agreement.

Your rights

You can at any time ask to access, correct, delete or port your data, and object to its processing. Simply write to contact@oufrid.com; we reply within one month.

• In Morocco: your data is protected by Law No. 09-08 on the protection of individuals with regard to the processing of personal data. The competent authority is the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).
• In the European Union: you have the rights provided by the GDPR and may lodge a complaint with the data protection authority of your country (for example the CNIL in France).

Changes

This policy may change as the site evolves. The date of the last update is shown at the top of the page. Any question? Get in touch.