Privacy Policy

What we collect

Account data — your email address and identity-provider subject when you sign in (via OIDC); your notification email and agency name if you set them.

Configuration data — the domains, URLs, ports, keywords, intervals, notification channels (including webhook URLs), and API keys you create. API keys are stored only as hashes; we cannot recover a lost key.

Monitoring results — check history for your monitors: registry responses, DNS snapshots, HTTP statuses, TLS certificate metadata, and port states. This is data about the domains you watch, much of it already public.

Registrar credentials — if you add a registrar account for auto-registration, the API credentials and registrant contact profile you supply are stored encrypted and used solely to perform registrar operations you configure.

What we do with it

We use this data to run the service: performing checks, sending your alerts, billing credits, and operating auto-registration. We do not sell your data, do not use your monitored-domain list for advertising, and do not train machine-learning models on it.

Processors

To deliver the service we share limited data with: your payment provider (payment processing — we never see card numbers), an email relay provider (delivering alert emails — your address and alert content), your identity provider (authentication), and your chosen registrars (only when executing registrations you armed). Webhook alerts you configure are sent to URLs you control.

Retention

Check history is retained to provide the timeline views you see and pruned on a rolling window. Account and configuration data is kept while your account is active; deleting a monitor deletes its future checks, while history may persist in backups for a limited period. You may request account deletion at any time.

Security

Registrar credentials are encrypted at rest; API keys are stored hashed; connections are TLS-protected. No method is perfectly secure — if we become aware of a breach affecting your data we will notify you.

Cookies

We set only the cookies needed to keep you signed in and operate the service. No advertising or cross-site tracking cookies are used.

Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data, and to object to or restrict processing. Contact us to exercise them; exporting your monitor list is available via the API at any time.

Changes

We may update this policy; material changes will be announced on this page before they take effect.