Privacy Policy

The short version:

• We don’t use analytics, ads or tracking tools. We set cookies only in the client panel, and only the ones you need to stay logged in.
• Apart from the basic technical data every website receives when you open a page, we only get information you send us: when you report an issue, click “Send email” in a guide, check a domain or email setup, use the client panel or email us.
• When you click “Send email”, a copy of that email reaches the PerfoState team right away, even if you never send it from your mailbox.
• We don’t sell your information or share it for advertising.

1. Who are we?

The website is run by RENDPRO LIMITED, a company registered in England and Wales under number 12485411, with its registered office at 167-169 Great Portland Street, Fifth Floor, London W1W 5PF, United Kingdom. PerfoState is a brand of RENDPRO LIMITED. In this policy, “we” and “us” mean RENDPRO LIMITED.

As a company based in the United Kingdom, we also apply the UK General Data Protection Regulation (UK GDPR) to the personal information we handle.

This policy and any disputes about it are governed by the law of England and Wales.

2. How can you contact us about your information?

By email: kontakt [at] rend.pro. Write to us about anything in this policy, including requests to see, correct or delete your information (section 9).

3. What information do we collect and why?

We collect personal information only when you use one of the features below or write to us. Here is what each one collects and what we use it for.

The “Report issues or errors” window

• What: the description you type, the page and the spot on it you report from, your screen size (and whether it’s a touch screen), and your browser’s technical identifier (browser name and version, operating system and, on some phones, the device model). We don’t ask for your name or email; if you type them in the description, we receive them too.
• Why: to fix the error or the content you point out. Screen size and browser help us reproduce the problem.
• Where it goes: a notification in a private PerfoState team channel on Discord (section 5).

The “Send email” button in our guides

Some guides have email templates with fields that fill in the email for you. The “Send email” button does two things:

1. It opens your mailbox with the email ready to go. You send it yourself, from your own mailbox, and you can edit it first.
2. At the same moment, it sends a copy to the PerfoState team, even if you end up not sending the email.

• What we get in the copy: the subject and body, the recipient and CC addresses, the guide and step, the page address, and anything you type into the fields above the template, such as your domain, the company where your domain is registered, your signature (name and company) and, in some templates, the name, email and phone number of the person who manages your domain (section 4).
• Why: so we know right away what you need help with and can prepare an answer faster, for example the DNS records for your domain. We use your device’s IP address only to limit the number of copies, so nobody can abuse the button. We don’t store it permanently.
• Where it goes: the copy goes to a private PerfoState team channel on Discord. The email you send goes to the recipient you choose, and to our mailbox when we are the recipient or in CC.

If JavaScript is turned off in your browser, the button only opens your mailbox and doesn’t send us a copy.

The “Don’t know where your domain is?” tool

• What: the domain name you enter and your device’s IP address.
• Why: we look up the domain in the public domain registry and show only the name of the company where it was bought. We don’t fetch or show any details about the domain owner. We use your IP address only to limit the number of lookups, so nobody can abuse the tool. We don’t store it permanently.
• The registry gets only the domain name from us, nothing about you.

The “Don’t know where your email is?” tool

• What: the domain you enter and your device’s IP address. If you type a full email address, your browser sends us only the domain, the part after the @ sign. We never receive, store or pass on the full email address.
• Why: we check the domain’s public settings (DNS) and show which company runs its email, with links to that company’s webmail and admin panel. We use your IP address only to limit the number of checks, so nobody can abuse the tool. We don’t store it permanently.
• DNS servers get only the domain name from us, nothing about you.

Client panel

Clients we build a website for get access to a client panel at app.perfostate.com. It shows how the work is going and what comes next. Only clients we give a login to can use it.

• What: your company name, tax ID (when the contract needs it), email address (if you give it to us), the project name, project steps with statuses, dates, short notes and links (for example to your site preview or contract), the company on your invoice, the reports you send with the “Done” button, and your login. We store your password only as a one-way hash, so nobody can read it back. When you log in, the server also sees your device’s IP address.
• Change log: we record who changed your account or project data and when: you (for example signing in, a report or a password change) or us. The log holds no passwords and no IP addresses.
• Protection against password guessing: after a failed sign-in, a failed password change and each “Done” click, we store the time and a one-way hash of the IP address and of the login, which can’t be turned back into the address or the login. We delete these records automatically, at the latest 2 days after they are made.
• Why: to show you the progress, next steps and guides, to make sure only people with the login and password can see the project, and to be able to check who changed what and when. We use the IP address only to limit sign-in attempts and reports.
• The “Done” button: when you click “Done” on one of your steps, we save your report in the panel and get a notification in a private team channel on Discord with your company name, login, project name and step, and in the invoice step the company you picked for the invoice. We don’t pass on your IP address or email address. On the demo account, only your browser remembers the report (section 6).
• Where it is: in the client panel database on servers in Frankfurt, Germany, with our database and hosting providers (section 5). It can be seen by you and anyone you share your login with. On our side, only the PerfoState owner can access the panel data, through a separate admin account.

Email

• What: whatever you include when you write to us, usually your name, email address, company name and what you need.
• Why: to reply, prepare a quote or do the work you ask for.

If we work together, our contract describes the information we need to do the work and to bill you. Invoices come from RENDPRO LIMITED. We don’t send newsletters.

Visiting the site

• What: every time you open a page, the server receives your IP address, the date and time, the page address and basic information about your browser and operating system. Every website works this way.
• Why: to show you the page, keep the site running and protect it from attacks.
• Our hosting provider sees this information (section 5). We don’t use it to identify you.

4. What about information about someone else?

In the guide for changing your domain settings, you can enter the name, email and phone number of the person who manages your domain, such as your IT person or the company that built your old site. You can also email that person from a template, with us in CC.

We use that information only to arrange the domain change you asked for. Please share it only if that person knows about it or can expect it, for example because they manage your domain. The email template for that person includes a link to this policy, and we tell them about it no later than our first contact with them.

5. Who do we share your information with?

Only people on the PerfoState team who handle your request see your information. We also use these service providers:

• Vercel Inc. (United States): hosts the website, the client panel and the server functions that handle reports, email copies and domain and email checks. The client panel functions run on servers in Frankfurt, Germany. It processes information on our behalf.
• Neon, LLC (United States, part of Databricks): runs the client panel database on servers in Frankfurt, Germany. We use it through Vercel. It processes information on our behalf.
• GitHub, Inc. (United States): stores the code of our website and client panel in private repositories. It processes information on our behalf.
• Discord, Inc. (United States): the team chat where a private channel receives issue reports, email copies from guides and “Done” clicks from the client panel. Discord also handles this information under its own privacy policy.
• Our email provider: runs the mailbox your emails arrive in.

Your information may also go to:

• the person you email from one of our templates (for example, whoever manages your domain),
• our legal and accounting advisers, when we need their help,
• courts, government agencies and other authorities, only when the law requires it.

We don’t sell your information and we don’t share it for advertising.

6. Do we use cookies?

Only in the client panel (app.perfostate.com). When you log in, we save one session cookie (ps_panel) in your browser so you don’t have to log in on every visit. It holds only your login, an expiry date and a signature that protects it from forgery. Scripts on the page can’t read it. It expires after 30 days or when you click “Log out”.

The admin panel, used only by the PerfoState owner, has a separate session cookie (ps_admin) that lasts 12 hours.

Apart from that, the site and the panel set no cookies and use no analytics, advertising or tracking pixels. That’s why there is no cookie banner.

We also use your browser’s own storage in two cases:

• When you pick an option in a display switch (for example, how a comparison of services is shown), the browser remembers it in the memory of that tab (sessionStorage), so the next pages look the same. It’s gone when you close the tab.
• When you click “Done” on the demo account of the client panel, the browser remembers that you reported the step (localStorage), so it can show it as reported. It holds only the project and step and, if you picked one, the company on the invoice. On a regular account, reports are saved in the panel (section 3), not in your browser.

None of this storage is sent to us. These cookies and stored choices are strictly necessary for features you choose to use. To remove them, clear the site’s data in your browser settings.

7. How do we respond to Do Not Track signals?

We don’t track visitors over time or across third-party websites, and we don’t use analytics, advertising or tracking technologies. Because no such tracking takes place, our site doesn’t change its behavior when your browser sends a Do Not Track signal.

We don’t allow other parties to collect personally identifiable information about your online activities over time or across different websites when you use our site.

8. How long do we keep your information?

Once a month we delete chat notifications older than 12 months. When a period ends, we delete the information or keep it only in a form that can’t identify you.

9. How can you review, correct or delete your information?

Email us (section 2) and tell us what you’d like to do. You can ask us to:

• show you the personal information we have about you and give you a copy,
• correct information that’s wrong or out of date,
• delete your information, unless we need to keep it for a contract with you or to meet a legal obligation,
• stop using your information for a particular purpose.

We may ask you to confirm who you are before we act. We reply without undue delay and within one month at the latest. Making a request is free, and we won’t treat you differently because you made one.

10. How do we protect your information?

The site and the client panel work only over an encrypted connection (HTTPS). You log in to the client panel with a login and password; we store passwords only as hashes and limit login attempts. On our side, only the PerfoState owner can change panel data, through a separate admin account. We accept reports and email copies only from our own site, with a limit on how many can be sent. Only the team members who need it can see the notifications and our mailbox.

No system is completely secure. If a security breach affects your personal information, we’ll let you know as the law requires.

11. Is the site meant for children?

No. The site is for businesses and isn’t directed to children under 13. We don’t knowingly collect personal information from children. If you think a child has sent us information, email us and we’ll delete it.

12. What about links to other websites?

The site links to other websites, for example to providers’ dashboards in our guides, to our other brands in the footer and to AI assistants in the “Work with AI” section. You go there only when you click a link, and we don’t pass on your information. The prompts we prepare for AI assistants contain only public information, such as the guide title and address and our contact details. Once you leave our site, that website’s privacy policy applies.

13. Information for California residents

This policy is written to meet the California Online Privacy Protection Act (CalOPPA). In short, for California residents:

• Section 3 lists the categories of personal information we collect, and section 5 the categories of third parties we share it with.
• Section 9 explains how to review and request changes to your information.
• Section 7 explains how we respond to Do Not Track signals and confirms that no other parties track you on our site.
• Section 14 explains how we tell you about changes to this policy.
• We don’t sell or share your personal information, we don’t use it for targeted advertising, and we don’t disclose it to third parties for their own direct marketing purposes.

14. Can this policy change?

Yes, for example when we add a new feature to the site or switch providers. The current version is always on this page. Before a material change takes effect, such as a new purpose or a new recipient of your information, we’ll notify you with a notice on this page.