Privacy policy

Last updated: 8 October 2026 · See also our Terms.

Who is responsible

The site is operated by The SaaS Guy (TheSaaSGuy), Illés István Kristóf, a sole trader in Budapest. For a quote request, TheSaaSGuy only transmits the message. TheOnlineYou (hello@theonlineyou.hu) receives it and uses it to reply. We do not publish TheOnlineYou's registry number here.

The preview

• You send a public homepage address. We refuse localhost and private or internal addresses.
• In test mode (the default until it is switched off), we do not visit the site with a browser and we do not call Google Gemini. We store two labelled placeholder images instead.
• In live mode, Cloudflare Browser Run captures a screenshot of that public page, and that screenshot is sent to Google Gemini (model gemini-3.1-flash-image, or gemini-3.1-flash-lite-image if configured) to make the concept image. Gemini does not receive the quote form.
• Both images are stored in Cloudflare Workers KV for 35 days, then deleted automatically. The link is a long random address. It is not listed on the site.
• We also store the address you submitted and a job id next to those images, for the same 35 days, so the quote email can point at the right pictures.

The quote form

The form is shown only after a preview. If you send it:

• Your name, email, business name, website, optional phone, optional message, the time you ticked the box, the preview links and the job id are put into one email.
• That email goes only to hello@theonlineyou.hu. Reply-To is your email, so a reply from the studio comes back to you. The From address is SiteRefresh on thesaasguy.app, not your address.
• Cloudflare Email Service (or, if configured instead, an email HTTP API) transmits that message. They are not a second recipient and they are not allowed to use it for their own marketing. We do not add you to a newsletter.
• We do not write the form fields to a database. They exist in memory only for the time it takes to send the email.
• If sending is not configured, or the send fails, nothing is stored and nothing is emailed. The page keeps what you typed and offers a mailto link to hello@theonlineyou.hu so you can send it yourself.
• A one-way hash of your email address plus the site host is kept for 24 hours, with no name, phone or message, so a second identical request can be refused. The hash cannot be turned back into your email.
• If the hidden fax field is filled, we show the usual confirmation and send nothing. That field is not visible to people.

The line under the button ("Your details go only to TheOnlineYou…") describes this path: the only inbox that receives the form is hello@theonlineyou.hu, and the purpose is a reply to your request.

Limits, analytics and campaign tags

• Preview limits: 3 a day from one connection, plus a shared daily cap. We store a hash of the IP address with a counter for 48 hours. We do not store the IP itself.
• Quote limits: a small daily cap per connection, same kind of hash, 48 hours.
• Cloudflare Web Analytics counts page views (page, referrer, browser, rough country) without cookies. It does not support custom events. Four event names (preview started, preview shown, quote button, quote sent) are stored as daily totals in KV, with no IP and no page address attached. They are kept for about 400 days.
• If you arrive with utm_source, utm_medium, utm_campaign or utm_content, those four values stay in sessionStorage for this tab (attribution.js) and, if you send a quote, are copied into the email. They are not written to a database.
• If Turnstile keys are set, Cloudflare Turnstile checks the preview request. The secret key stays on the server. If the keys are unset, the check is skipped.

Legal basis: the preview and the quote are steps you ask for (GDPR Art. 6(1)(b)). The limits, the duplicate hash and cookieless counts are our legitimate interest in running a free tool without abuse (Art. 6(1)(f)). The consent tick is the record that you asked TheOnlineYou to use the details to reply.

How long

• Images, the page address and the job id: 35 days, then deleted by KV expiry.
• Quote form fields: not stored. The email is in the studio inbox and in normal mail transport logs of the sender.
• Duplicate hash: 24 hours. IP-hash counters: 48 hours. Event totals: about 400 days.

Email getrichwithsaas@gmail.com to ask for a deletion sooner. Say the job id if you have it, or the page address and the rough time. We can delete the images before the 35 days. We cannot delete the email from the studio inbox. Ask hello@theonlineyou.hu for that.

Your rights

You can ask to see, correct or delete data about you, or object to the legitimate-interest uses. We reply within one month. You can also complain to the Hungarian authority, NAIH, or to the authority where you live.