Privacy Policy

Last updated: 2026-09-23

1. What We Collect

• Account data: your email address and authentication provider (email/password, Google, or GitHub).
• Monitoring data: the URLs, API endpoints, SSL hosts, and DNS records you choose to monitor, plus check results, response times, and status history.
• Notification settings: your alert preferences and connected channels (e.g. email address, Discord webhook).
• Usage data: basic logs such as request metadata, language, and timestamp used for diagnostics and abuse prevention.
• Page analytics (cookie-less): we collect aggregate page views and dwell time using a one-time session identifier that is discarded when you close the tab, plus the country you browse from (via Cloudflare). This cannot be used to track you across sessions or sites.
• Launch-list data: if you subscribe on our homepage or via a link from social, we store your email address, the language you were browsing in, and where you subscribed from. We use double opt-in: you must click the confirmation link in the email we send, and only confirmed addresses are kept as subscribers.

2. How We Use Data

We use your data solely to operate the Service: running checks, delivering alerts, displaying your dashboards and status pages, and providing support. We do not sell your personal data to third parties.

3. Processors & Transfers

We rely on vetted third-party processors: Cloudflare (DNS and edge delivery), Resend (transactional email), Supabase (database hosting), Fly.io (application hosting), and Creem (billing, acting as Merchant of Record). Each acts under contractual obligations to protect your data. Data may be processed in regions outside your country; we ensure appropriate safeguards are in place.

4. Cookies & Analytics

We use minimal local storage and session cookies to keep you signed in and remember your language preference. We do not use advertising or cross-site tracking cookies.

For aggregate traffic measurement we rely on Cloudflare Web Analytics and a first-party, cookie-less page-analytics snippet. Neither sets cookies, uses fingerprinting, or identifies individuals, so no consent banner is required under GDPR/ePrivacy.

5. Data Retention

Monitoring history is retained while your account is active. Deleted monitors and cancelled accounts are purged after a grace period. Billing records are retained as required by Creem and applicable tax law.

6. Your Rights

Depending on your jurisdiction (including GDPR/UK GDPR), you may access, correct, export, or delete your personal data. To exercise these rights, email martin@pingory.com. We respond within statutory timeframes.

Launch list: unsubscribing is self-service and needs no request — every launch email carries a one-click unsubscribe link that deletes your address immediately. Confirmed subscribers can also ask us to export or delete their entry.

7. Security

We apply reasonable technical and organizational measures (encrypted connections, access controls, secrets isolation) to protect your data. No online service can be guaranteed 100% secure.

Tip: if the URL you monitor requires HTTP Basic authentication, consider using a dedicated check-specific credential — the URL (including any embedded credentials) is stored to perform the check, so avoid reusing personal passwords there.

8. Contact

Questions about this policy? Contact martin@pingory.com.

← Back to Pingory