Privacy Policy

Introduction

Teste.no is a website monitoring service operated by Kloner AS, and is part of the Kaduno platform. Kloner AS is the data controller. This policy explains what personal data we collect, why, and how we process it in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection law (personopplysningsloven).

Data Controller

What Data We Collect

We collect and process the following categories of data:

• Account data — Name, email address, and hashed password when you create an account.
• Target websites — URLs and domain names of websites you add for monitoring.
• Test results and findings — Technical scan results, security findings, performance metrics, and SEO data for your monitored websites.
• Technical data — IP addresses, session cookies, browser type, and access logs for security and service delivery.
• Guest scan data — For unauthenticated scans: IP address, scanned URL, and scan results. Automatically deleted after 24 hours.

Purpose of Processing

• Delivering the monitoring service (scanning websites, generating reports, sending alerts)
• Account management and authentication
• Billing and subscription management (via Stripe)
• Service improvement and product analytics (aggregated, non-identifying)

Legal Basis

• Contract (Art. 6(1)(b)) — Processing necessary to deliver the service you subscribed to.
• Legitimate interest (Art. 6(1)(f)) — Security logging, fraud prevention, and service improvement.
• Consent (Art. 6(1)(a)) — Optional notifications (SMS, email alerts) you configure.

Data Retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion.
• Test results and findings: retained while the target is active. Historical data retained for trend analysis.
• Guest scan data: automatically deleted after 24 hours.
• Access logs and IP addresses: retained for up to 90 days for security purposes.

Sub-processors

We use the following third-party services to deliver our service:

• Hetzner (Germany) — Server hosting and infrastructure (EU)
• Stripe (US/EU) — Payment processing
• OpenAI (US) — AI-powered finding analysis (optional, when enabled)

Your Rights

Under GDPR, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — delete your account and all associated data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest

To exercise your rights, contact us at post@kloner.no. We will respond within 30 days.

Cookies

Teste.no uses essential cookies only: a session cookie for authentication (session_id) and a guest session cookie for unauthenticated scans (guest_session_id, 24h TTL). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Data Processing Agreement (DPA)

For business customers who require a Data Processing Agreement, please contact us at post@kloner.no

Complaints

If you believe your data protection rights have been violated, you can file a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.