Privacy policy

Last updated 2026-09-13

This page explains what happens to your data when you use Fantastic Websites: paste a link, get new looks for your website, maybe buy one. We have tried to keep it short and honest. If anything is unclear, email hello@fantasticwebsites.co.

Who is responsible

Code & Beans AB (org. no 556772-5196), Västanäsgatan 6, 942 34 Älvsbyn, Sweden, is the data controller. Contact: hello@fantasticwebsites.co. We are a small Swedish company and have not appointed a data protection officer; write to that address for anything privacy-related.

What we collect and why

When you submit your website

• The web address you paste and your email address. We need both to build the previews and send them to you. Legal basis: performing the service you asked for (GDPR art. 6(1)(b)).
• The public content of that website. We fetch the pages, take a screenshot and copy the text, images and colours so the new looks use your own words and photos. Some of that content can be personal data about other people, for example staff names and photos on your "About" page. We use it only to rebuild your site and for nothing else. Legal basis: the service you asked for, and our legitimate interest in rebuilding the site you gave us (art. 6(1)(f)). Because we cannot practically notify each person named on your site, this policy serves as that notice (art. 14(5)(b)).
• Technical details of your request: IP address, browser type and the page you came from. We keep them to stop abuse, enforce our daily capacity limit and debug failures. Legal basis: legitimate interest in keeping the service secure (art. 6(1)(f)).
• Advertising click data (Meta's _fbp and _fbc identifiers and the click id in the link you arrived on), only if you accepted marketing cookies. See Cookies. Legal basis: your consent (art. 6(1)(a)).

Building the looks with AI

The copy and images from your site are sent to Anthropic (Claude) to write and lay out the new pages, and short descriptions of your business are sent to Google (Gemini) to create placeholder photos where your site had none. Both act as our processors: they may not use your data to train their models and keep it only briefly (up to 30 days) for abuse monitoring. Placeholder photos are AI-generated and illustrative; their file names start with placeholder-.

Emails

We email you when your looks are ready, remind you before the previews close, and send a few short follow-ups about them. Every follow-up email has a one-click unsubscribe link and we stop the moment you use it. Legal basis: the service you asked for, and our legitimate interest in following up on a request you made (art. 6(1)(f), recital 47). You told us this was fine when you submitted the form; you can object at any time by unsubscribing or emailing us.

We record whether you came back to look at your previews, watched the explainer video or sent us a message, so that a real person knows what to help with. Legal basis: legitimate interest (art. 6(1)(f)).

If you buy

Payment is handled by Stripe. We never see your card number. Stripe collects your billing address and, if you enter it, your business name and tax id; we receive your name, email, address, what you bought and the amount. Legal basis: the contract (art. 6(1)(b)) and our legal duty to keep accounting records (art. 6(1)(c), Swedish Bokföringslagen).

If we host your site

On the monthly plan, contact forms on your site post to our server and we forward each message to your inbox. For those messages you are the controller and we are your processor; the data processing annex in our Terms governs it. We keep each submission for 30 days so a lost email can be recovered, then delete it.

Who else sees your data

Our server is in the United States because most of our customers are. That is a transfer outside the EU/EEA; it rests on the safeguards above (GDPR chapter V). We do not sell your data.

How long we keep it

• If you never buy: your submission, the copy of your site, the screenshots and the generated looks are deleted automatically 90 days after your previews close (or 90 days after you submitted, if we never got that far).
• If you buy: the order, invoice and what we delivered are kept for seven years, as Swedish accounting law requires. The working files (the copy of your site, screenshots and generated looks) are kept with the order.
• Hosted-site form messages: 30 days.
• Server logs: rotated after 14 days.
• Unsubscribes: we keep your address on our stop list, for as long as we keep your data, so we do not email you again.

Ask and we delete earlier, unless the law makes us keep it.

Cookies

Nothing that tracks you is set until you choose "Accept" in the cookie banner. "Reject" is one click and just as easy. Change your mind any time under "Cookie settings" in the footer.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, to hand it over in a machine-readable form, and you can object to processing based on legitimate interest, including all marketing. Where we rely on consent you can withdraw it at any time, without affecting what was done before. Email hello@fantasticwebsites.co; we answer within a month.

If you are unhappy with how we handle your data you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, imy.se, or to the authority in your own EU country.

Changes

When this policy changes we update the date at the top. If a change matters to you, we will email you about it.