Privacy Policy

Last updated: October 11, 2026

Fast Dev 24 builds fixed-price websites for small businesses. This page explains exactly what I collect, why, and how to have it removed. It is short because I collect very little.

I am responsible for your data. The data controller is fast24.dev, and you can reach me at [email protected].

What I collect

What you type into the forms on this site:

• a description of your business, in your own words;
• what you want a visitor to do on the site;
• an email address, so I can send you the price;
• if you give them, your phone number, current website and referral code.

Partner accounts also store your payout details.

My hosting provider also records the country your request came from, as part of normal traffic handling. I do not ask for, and have no use for, payment card details, government identifiers, or any other sensitive data.

Why I collect it

To reply with a price and, if you accept it, to build and deliver the website you asked for. Nothing else. I do not sell, rent, or share your information with advertisers or data brokers.

Legal basis

The legal bases come from Article 6 of the EU General Data Protection Regulation (GDPR):

• your request, the price, the work on your site, the client area and the partner account: taking steps toward a contract with you and then carrying it out (Art. 6(1)(b));
• a reply to a question you asked in the chat, by email or through the check form, even if no order follows: my legitimate interest in answering the person who wrote to me (Art. 6(1)(f));
• the cookie-free visit counter: my legitimate interest in knowing which pages people read and where the site is hard to use (Art. 6(1)(f));
• the ref cookie with a partner code: your consent, given when you press “Remember” (Art. 6(1)(a)); you can withdraw it by deleting the cookie in your browser;
• invoices and payment records: a legal obligation under Polish tax law (Art. 6(1)(c)).

Where I rely on legitimate interest, you can object, and I will stop unless I have a stronger reason to continue.

Where it goes

If you use the form on this site, your message goes to my own working chat, hosted by Telegram. If you write to me directly, it arrives in my email inbox at Google. Either way it reaches me, and the service is only the channel I read it through. No third party receives your details for their own purposes, and I do not publish your messages anywhere.

Free website check

On the check page you enter only a website address. The address and the check result are stored on my server in Cloudflare storage for 30 days, so that the result opens from its link, and then they are deleted automatically. The site being checked is opened the same way an ordinary visitor would open it.

If you ask for a manual review and leave your email (the form on the home page and on the check page), the site address and your email reach my working chat on Telegram and are kept like any other request: if you do not become a client, I delete them within 90 days. I use your email only to send you the review.

Transfers outside the EEA

Some of the services your data passes through are based outside the European Economic Area: Cloudflare (hosting, storage, analytics), Google (email, Google sign-in) and Resend (email delivery) are US companies, and Telegram (my working chat) is registered outside the EEA. Your data may therefore be processed in the United States and other countries. Cloudflare and Google take part in the EU-US Data Privacy Framework and use the European Commission’s Standard Contractual Clauses. If you would rather your message did not pass through Telegram, email me instead of using the form.

How long I keep it

If you do not become a client, I delete your message within 90 days. If you do, I keep the project correspondence for as long as I support the site, so that I can honor what was agreed. Invoices and payment records are kept as long as Polish tax law requires: five years from the end of the year in which the tax payment was due. A partner’s payout details are kept while the partner program runs, and after that for the same tax period.

Client area

When I build a site for you, you get a private client area at fast24.dev/brief/ with questions about your business. It keeps your answers, your name and the contact you give me. If you set a password, it keeps your email and a one-way hash of the password, never the password itself. If you link Google, it keeps the ID and email of that Google account.

Signing in sets one cookie. It only keeps you signed in, is sent only to the client area and expires after 30 days or when you sign out. The Google sign-in button, when shown, loads from Google's servers. Your browser also keeps a copy of your answers on your own device.

Only I read the answers. When you press send, they reach my order chat on Telegram and my inbox, and the email copy is delivered by the email service Resend. If you do not become a client, I delete the client area within 90 days. If you do, I keep it while I support your site, and delete it sooner if you ask.

Cookies and analytics

The public pages of this site set no cookies, and nothing you do here follows you to other sites. I do count visits, and I would rather say plainly what that means. My own analytics script records the page you opened, the country your request came from, your browser language, whether you are on a phone or a desktop, where you arrived from, and a handful of named events: a page view, reaching the pricing section, opening a piece of work, clicking a contact button. Your IP address is never stored: to tell one visitor from another I keep a short one-way hash of it combined with your browser string and the date, which cannot be turned back into an address and is useless the following day. Daily summaries and the single flag that says whether you have visited before are deleted automatically after 45 days. I also run Cloudflare Web Analytics, which is cookie-free and collects no personal data; the counts are stored on Cloudflare's infrastructure, which hosts this site. I use no Google Analytics, no advertising pixels and no third-party trackers, and I sell or share none of this with anyone.

Partner links are the one exception. If you open the site through a partner’s link (an address with ?r= and a code), a bar at the bottom of the page asks whether to remember the code. Only if you press “Remember” do I set one cookie, ref: it holds the partner’s code in this browser for up to 400 days, so that the partner discount stays for your next visits. If you decline or ignore the bar, nothing is stored on your device, and the discount does not depend on your answer. After your first paid order with a partner code, I keep a one-way hash of your email, phone or Telegram name linked to that partner’s code, so that you keep the discount and your orders count for that partner while the partner program runs. I delete this link if you ask. The visit itself is counted for the partner without a cookie, using the same one-day hash described above.

Embedded YouTube videos

My weekly picks page shows video thumbnails and can play videos in place. The thumbnails are image files loaded from YouTube servers, so opening that page means your browser contacts Google infrastructure. The player itself is not loaded until you press play on a card: only then does an embedded frame appear, and it uses the youtube-nocookie.com address. Once a video is playing, YouTube and Google receive your request data and may set their own storage under their terms. What happens there is governed by Google's privacy policy, not mine. If you never press play, no player is loaded.

Your rights

Write to [email protected] and ask for any of your rights:

• a copy of what I hold about you;
• correction of inaccurate data;
• deletion of your data;
• restriction of processing while a dispute about it is settled;
• your data in a machine-readable format, so you can take it to someone else;
• objection to processing based on legitimate interest;
• withdrawal of consent where processing relies on it. Withdrawal does not make earlier processing unlawful.

I will reply within one month, and I will not ask you to justify the request.

If you believe I process your data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in the country where you live or work.

Children

This service is for businesses. I do not knowingly collect information from anyone under 16.

Changes

If this policy changes, the date at the top changes with it. I will not quietly broaden what I collect.

Who to contact

Fast Dev 24 is operated by an independent contractor based in Poland, serving clients in the United States and the United Kingdom. For any question about this policy, write to [email protected]. I read it myself and usually reply within a few hours.