Privacy.

Who is responsible

Martin Thommesen, based in Norway and operating as Lammesen, is the controller for personal information processed to run lammesen.com and handle Lammesen support inquiries. Contact support@lammesen.com for privacy questions or requests.

This notice covers the website, the Super Review plugin, and support. Super Review is free, available worldwide, and does not process payments.

Visiting the website

Lammesen.com is a static website hosted on Cloudflare. Your browser sends technical request information, including your IP address, requested URL, browser information, and request time. Cloudflare processes that information to deliver pages and downloads and protect the service.

Our legal basis is legitimate interests under GDPR Article 6(1)(f): making the website available and keeping it secure. The website application does not persist request logs or run an analytics dataset. Cloudflare’s own service and security processing may involve retention according to its configuration and applicable policies.

The website’s own code does not set cookies or browser storage, run analytics, or offer accounts, payments, or contact forms. The optional copy-command button writes the displayed command to your clipboard when you activate it; it sends nothing to Lammesen.

Using Super Review

Super Review distributes skill instructions and static assets. It has no Lammesen-operated backend, analytics endpoint, account system, or payment system, and does not implement transmission of repository contents to Lammesen.

Your host app and the tools you authorize process the repository, review evidence, and conversation. The host may access files, run safely gated repository commands, and save a report at the repository’s root FINDINGS.md. That report can contain file paths, code excerpts, findings, and human notes.

The host provider’s privacy and retention practices apply to those inputs and outputs. Installing the plugin does not grant filesystem access by itself. You control repository access and tool permissions. Lammesen receives repository material only if you separately choose to include it in a support message.

Contacting support

If you email support@lammesen.com, we receive your email address, any name you provide, message content, attachments, and ordinary email metadata. We use this information to respond and address the issue you report.

Our legal basis is legitimate interests under GDPR Article 6(1)(f): answering questions and supporting our plugins. Providing a support message is voluntary. Without contact information or enough detail, we may be unable to respond or resolve the issue.

Support emails are deleted 90 days after the inquiry is closed. If a specific legal duty requires keeping particular information longer, only the information covered by that duty is retained for the legally required period. Responding to privacy-rights requests and complying with such duties uses the legal-obligation basis in GDPR Article 6(1)(c).

Send a small, redacted example. Do not send credentials, secrets, or private repository contents. Public GitHub issues are visible to others and are handled by GitHub under its own policies.

Services and international transfers

Cloudflare receives website request information as our hosting and security provider. Support messages are handled by Lammesen and the email services involved in delivery. Your chosen host app processes plugin inputs and outputs under its own practices; GitHub handles information you submit to its public issue tracker.

Cloudflare’s global service can involve processing outside the European Economic Area. Its Data Processing Addendum describes transfer safeguards, including European Commission Standard Contractual Clauses where applicable. Email services and host providers may also process data internationally, depending on the services and settings used.

You can ask support@lammesen.com for information about relevant safeguards and a copy where applicable.

Cloudflare privacy policy · Cloudflare Data Processing Addendum

Your privacy rights

Where applicable, you may request access to your personal data, correction, deletion, restriction of processing, or portability. You may object to processing based on legitimate interests. Portability applies where the GDPR’s conditions are met, including processing based on consent or contract by automated means; not every support record qualifies.

Contact support@lammesen.com to exercise your rights. We may ask for proportionate information to verify your identity. Your host provider’s controls govern its conversation and review-data settings.

We respond without undue delay, normally within one month. If the GDPR permits an extension because of a request’s complexity or the number of requests, we will notify you within that first month and explain the reason.

You may complain to a supervisory authority, including Norway’s Datatilsynet, or the authority where you habitually live, work, or where an alleged infringement occurred. You do not have to contact us first.

How to complain to Datatilsynet

The website and Lammesen support do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

Policy updates

Changes to these data practices will be reflected on this page with an updated date. A new plugin with different services or data handling will need its own clear privacy information before release.