Privacy policy

1. Who we are

PerfHawk is a web-performance monitoring service operated by Click&Mortar from France, within the European Union. Click&Mortar is the data controller for the personal data described below.

PerfHawk measures the loading performance and Core Web Vitals of the web pages you choose to monitor. It does this through Google's public PageSpeed Insights API (Lighthouse lab data) and Chrome UX Report API (CrUX field data). PerfHawk does not run its own crawler and does not collect data directly from your site's visitors.

2. Data we collect

• Account data — when you create an account, your name, email address, and password (stored hashed). For an organisation, the name you give it.
• Monitored URLs — the website and page URLs you add to PerfHawk, and the performance results we retrieve for them. These URLs are sent to Google's APIs so that performance data can be returned.
• Billing data — if you subscribe to a paid plan, the billing details needed to process your payment. Payment is handled by our payment provider; we do not store full card numbers.
• Usage & technical data — server logs (IP address, browser type, timestamps) needed to operate and secure the service, plus privacy-friendly, cookieless usage analytics.
• Messages you send us — the content of the contact form or emails you send to our support address.

The performance figures PerfHawk displays — Lighthouse scores and CrUX field metrics — describe the page, not an identifiable visitor. CrUX field data is aggregated and anonymised by Google and contains no individual user data.

3. How we use your data

• To provide and operate the monitoring service and your account.
• To run scheduled Core Web Vitals checks and send you alerts when performance regresses.
• To process subscriptions and payments.
• To respond to your questions and provide support.
• To keep the service secure and prevent abuse.
• To meet our legal and accounting obligations.

4. Legal bases (GDPR)

• Contract — to provide the service you signed up for and manage your account.
• Legitimate interests — to secure the service, prevent abuse, and understand aggregate usage, provided those interests do not override your rights.
• Legal obligation — to keep billing and accounting records.
• Consent — where we ask for it explicitly; you may withdraw it at any time.

5. Sharing & sub-processors

We do not sell your personal data. We share it only with the service providers needed to run PerfHawk:

• Google — the PageSpeed Insights and Chrome UX Report APIs. The URLs you monitor are sent to Google to retrieve performance data, under Google's privacy policy. Google Fonts are also served by Google.
• Cloudflare — Turnstile anti-abuse protection on our public forms (privacy policy).
• Hetzner Online GmbH — hosting of the application and data, in Germany (EU).
• Self-hosted Umami — cookieless product analytics that we run ourselves; no data is shared with a third party.
• A payment provider and an email-delivery provider for billing and transactional messages, where applicable.

6. International transfers

We store and process your data within the European Union. Some providers (for example Google and Cloudflare) may process data outside the EU; where they do, transfers are governed by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention

We keep account data for as long as your account is active, and afterwards only as long as needed for our legal, accounting, and security obligations. Performance history is retained for the duration of your subscription. Server logs are kept for a limited period for security and troubleshooting.

8. Your rights

Under the GDPR you may exercise the following rights over your personal data:

• Access, rectification, and erasure.
• Restriction of, and objection to, processing.
• Data portability.
• Withdrawal of consent, where processing is based on consent.

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the French supervisory authority, the CNIL.

9. Cookies

PerfHawk uses only strictly necessary cookies, and no tracking or advertising cookies. See our Cookie policy for the full list.

10. Changes

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date above.

11. Contact

Questions about this policy or your data? Email [email protected].