Who we are
The data controller is MB Tvarkom ("Tvarkom", "we", "us"), a small partnership (mažoji bendrija) registered in Lithuania, registered office Gedimino g. 22A-14, 44319 Kaunas, Lithuania. For anything about your data, email [email protected].
Free store audit on tvarkom.com
When you request a free audit with the form on our homepage, we collect:
- your store's address;
- your email address, to send you the report;
- your IP address, to limit how many audits one network can request.
We use this to run the scan and email you the report. A copy of the report goes to our own inbox so we can answer your questions about it. Legal basis: taking the steps you asked for (Art. 6(1)(b) GDPR); for the IP address, our legitimate interest in preventing abuse of a free service (Art. 6(1)(f)).
What the scan reads
Our scanner loads your store's public pages the way a visitor's browser would: it measures response times, page size and caching, and reads response headers and public platform markers. It doesn't log in, submit forms, place orders or read anything that isn't public. The results describe your website, not people.
Checkout Speed Audit for WooCommerce plugin
The plugin sends nothing until an administrator clicks Run free audit. Then:
- Registration (first audit only): your store's address and the report email. We check that the request comes from your store by fetching a one-time token from your store's REST API, then issue a key for your domain.
- Each audit: your store's address, its cart and checkout page addresses and the report email.
- Store data, only if you tick Include store data in my audit: PHP, WordPress and WooCommerce versions; database, options table and autoloaded options sizes; number of active plugins; object cache type; background task and cron counts; and the number of orders in the last 30 days as a range (for example 50–200). The plugin shows you this data before you send it. It never includes customer data, order contents or revenue.
- Pro audits (with the same box ticked): the names and sizes of the 20 largest autoloaded options (never their contents); names, sizes and row counts of database tables no active plugin seems to use; PHP memory, time-limit and OPcache settings; failed background tasks by name, with their last error message after emails, links, IP addresses and long numbers are removed; and the names and times of late scheduled tasks (never their arguments). For the checkout profile, the plugin loads your checkout page once from your own server, with one product in a temporary cart that is never saved (nothing is ordered), and sends plugin, theme and hook names with their timings, database query shapes with every value replaced by “?”, the host names of outside services called during that page load, object cache hit and miss counts and peak memory.
- Plan status: when you open the plugin's page, it asks us for your plan, license expiry and usage.
Legal basis: taking the steps you asked for (Art. 6(1)(b)); for store data, your consent (Art. 6(1)(a)), which you can withdraw at any time by unticking the box.
Buying Pro
Pro is a one-time payment through Stripe for 4 detailed audits, to use within 12 months. Stripe processes your card or bank details; we never see them. We receive your email address, the amount, the currency and a reference to your store, and we use them to activate Pro for your store and email you a confirmation (and a license key if your store wasn't registered yet). Legal basis: performing our contract with you (Art. 6(1)(b)), and our legal obligations for accounting records (Art. 6(1)(c)).
When you email us
We keep your messages and contact details to answer you and, if you become a client, to do the work. Legal basis: taking steps at your request or performing a contract (Art. 6(1)(b)), or our legitimate interest in answering enquiries (Art. 6(1)(f)).
Analytics and cookies
We use Google Analytics 4 only if you click Accept in the cookie banner. It then sets cookies and measures visits, the buttons you click and the sections you view, so we can improve the site. Ad features are turned off. Your choice is stored in your browser's local storage, and you can change it with Cookie settings at any time. Legal basis: your consent (Art. 6(1)(a)).
Who processes data for us
- Fly.io: hosts our website, API and scanner, on servers in Amsterdam, Netherlands.
- Cloudflare: DNS and network protection for tvarkom.com.
- Resend: sends our report and license emails.
- Stripe: takes payments for Pro licenses.
- Google: Google Analytics (only with your consent), and Google Workspace for our [email protected] mailbox.
Some of these providers are based in the United States. Where data leaves the EU, they process it under an EU adequacy decision, such as the EU-US Data Privacy Framework, or Standard Contractual Clauses. We don't sell your data or use it for advertising.
How long we keep it
- Audit requests (store, email, IP address and time): 24 months, for abuse limits and our records.
- Plugin registrations (store and report email): while your store uses the plugin, then 24 months after its last audit. Unfinished registrations are deleted after 7 days.
- Pro license records (store, email, amount and dates): while the license runs, then deleted with the store's registration as above. Payment and invoice records are kept in Stripe and our accounts for as long as Lithuanian accounting law requires.
- Store data sent by the plugin: used to build your report and not stored separately. The report itself stays in our inbox with your emails.
- Emails and reports in our inbox: 36 months after our last contact, longer if we work together and the law requires it.
- Google Analytics data: 14 months.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. Email [email protected] and we'll reply within one month.
You can also complain to the Lithuanian supervisory authority, the State Data Protection Inspectorate (vdai.lrv.lt), or to the authority where you live.
Changes
If we change how we handle your data, we'll update this page and the date at the top.