Controller
The data controller is Mahtca Global S.R.L., a limited liability company registered in Romania.
Our full company identification details — registered address, Trade Register number and tax identification code — are published in our legal notice.
Purposes and legal bases
| Purpose | Data | Legal basis and legitimate interest pursued |
|---|---|---|
| Delivering the pages you request | IP address, request details | Art. 6(1)(f) — our legitimate interest in operating a website and responding to the request you made |
| Checking a URL you submit | The submitted address and its redirect chain | Art. 6(1)(f) — our legitimate interest in providing the tool you chose to use |
| Preventing abuse of the checker | Keyed hash of your IP address, per-destination counters | Art. 6(1)(f) — our legitimate interest in keeping the service available and preventing it being used to direct traffic at other websites |
| Security and fault diagnosis | Server access logs, which contain IP addresses | Art. 6(1)(f) — our legitimate interest in operating a secure, working service |
| Replying to your email | Your email address and message | Art. 6(1)(f) — our legitimate interest in answering correspondence |
No automated decision-making or profiling within the meaning of Article 22 takes place.
Recipients and transfers
| Recipient | Role | What reaches them | Location |
|---|---|---|---|
| SC ROMARG SRL | Our processor for web hosting and email | Page requests and server access logs | Romania; the provider states data is held in Romania and/or the European Economic Area |
| The website you ask us to check | Independent third party, not acting on our behalf | The address you submit, which may itself contain personal data or a secret token. Your own IP address is not sent. | Wherever that site is hosted, which may be outside the EEA |
Checking a URL necessarily sends a request to it — that is the service. Because you choose the address, you also choose who receives that request, including a server outside the EEA. We have no agreement with, and no control over, the destination, and we cannot provide a transfer safeguard for it.
We engage no other processors: no analytics provider, advertising network, content delivery network, geolocation service, newsletter platform, or support tool.
International transfers
Our hosting provider, SC ROMARG SRL (Brașov, Romania), states in its own privacy policy that customer data is stored and processed in principle in Romania and/or the European Economic Area, that it engages subprocessors — including IT subcontractors under signed data processing agreements — and that where it does transfer data outside the EEA it relies on the mechanisms in Articles 44–49 of the GDPR.
We initiate no transfer outside the EEA ourselves, and we have selected no processor outside it. We rely on our provider's statements above rather than on our own verification, and its current subprocessor list and transfer safeguards are available from the provider directly. If we become aware of a change, we will update this notice.
Retention
| Data | Retention period or criteria |
|---|---|
| The address you submit and its redirect chain | Not stored; held in memory for the duration of the request only |
| Keyed hash of IP address and destination counters | Up to 3 minutes |
Do you have to provide data?
- Your IP address and request details — not something you choose to provide. They are technically necessary for our server to send a page back to your device; without them the site cannot function at all.
- A URL to check — entirely optional. Nothing obliges you to submit one, but the checker cannot run without it.
- Your email address — entirely optional, and needed only if you write to us and want an answer.
None of this is a statutory or contractual requirement, and you are not obliged to provide it. The only consequence of withholding it is that the corresponding function is unavailable.
Your rights
You have the right to request from us access to your personal data, rectification, erasure, and restriction of processing. To exercise any of these rights, write to contact@redirectwhere.com.
The right to data portability under Article 20 applies only where processing is based on consent or on a contract. Because every purpose listed above relies on our legitimate interests instead, that right does not arise here.
Right to object
Right to complain
You have the right to lodge a complaint with a supervisory authority, normally the one where you live or work.
Storage on your device
This site sets no cookies. If you use the light/dark theme toggle, your choice is saved in your browser's local storage under the name rw-theme, is treated as expired after 90 days, and is never transmitted to us.
Storing it does not require your consent because it is strictly necessary to deliver something you explicitly asked for: remembering the display setting you just selected. Nothing is written unless you click the toggle, and apart from that single value nothing is stored on, or read from, your device.