Legal
Privacy
Short version: no trackers and no advertising. Lookups are cached for 24 hours. Accounts are optional and only store what they need. The free browser extension sends nothing anywhere.
Controller
Lucas Kleipödszus (lkmedia), Felchenstraße 21, 76437 Rastatt, Deutschland. E-mail: lucas@lkmedia.net
Visiting howitsbuilt.fyi
The site is served by Cloudflare, Inc. (Cloudflare Workers) as our processor. To deliver pages and protect against abuse, Cloudflare processes your IP address, the requested URL, user agent and timestamps in short-lived server logs (Art. 6(1)(f) GDPR, legitimate interest in operating a secure website). We use no analytics or tracking. If you sign in, we set a strictly necessary session cookie.
Looking up a website
When you look up a domain, our server fetches that website and stores the domain with its detected technologies for 24 hours so repeat lookups are fast. To enforce the daily limit of 20 new lookups, we store a counter keyed by your IP address (for IPv6, its /64 network prefix) for the current day; counters are deleted after the day ends (Art. 6(1)(f) GDPR). Result pages for public websites may be indexed by search engines.
Accounts
To sign in you give us your email address. We send a one-time sign-in link via Amazon Web Services (Amazon SES, region EU (Ireland)) as our processor. We store your email, account creation date, your sessions (with IP address and browser, to keep you signed in and protect your account) and, if you buy Pro, your Stripe customer and subscription status (Art. 6(1)(b) GDPR, contract). Admin actions on accounts are logged for accountability (Art. 6(1)(f) GDPR). Sign-in links expire after 10 minutes. To prevent abuse of sign-in emails we keep, for one day, counters keyed by a one-way hash of the email address and by IP address. You can ask us to delete your account at any time.
Payments
Pro subscriptions are processed by Stripe Payments Europe, Ltd. Stripe collects your payment and billing details directly; we never see your card number. We receive the subscription status, billing country and invoices needed for accounting. Stripe acts as an independent controller for payment data; see stripe.com/privacy. Legal basis: Art. 6(1)(b) and (c) GDPR (contract, tax retention duties).
The browser extension
The free extension detects technologies locally in your browser and transmits no data. If you connect it to your account, it stores a session token locally and asks us for your plan; Pro “Details” sends the domain of the current tab when you open them. Its full source code is public: github.com/Livvux/howitsbuilt-extension.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Contact us at lucas@lkmedia.net. You may also lodge a complaint with a supervisory authority, for example the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.
Last updated: 8 October 2026.