Privacy policy
Last updated September 28, 2026
What we collect
- Account data: your email address and a salted hash of your password (never the password itself).
- What you monitor: the projects, page URLs, schedules and alert recipients you configure.
- Test results: performance metrics, resource timings, screenshots, network logs (HAR) and browser traces captured when we load your pages. These describe your pages as a logged-out visitor sees them.
- GitHub data (optional): if you connect GitHub, an OAuth token (encrypted at rest) plus the repository, deployment and commit metadata we need to match regressions to deploys.
How we use it
Only to run the service: testing your pages, detecting and investigating regressions, sending the alerts you asked for, and signing you in. We don’t sell your data or use it for advertising, and the site has no third-party analytics or tracking scripts.
Cookies
We set a sign-in cookie (httpOnly) and a cookie that remembers the last project you opened. Both are strictly necessary for the app to work.
Service providers
- Railway: application hosting and database
- Cloudflare: DNS and object storage for screenshots, network logs and traces
- Resend: delivery of alert emails
- OpenAI: only when you click for an AI explanation, we send that investigation’s evidence (metrics, resource URLs and sizes, deploy details). Your account data is not sent.
- GitHub: only if you connect it
Retention
Screenshots, network logs and traces are deleted after 30 days. Metrics and run history are kept while your account exists; older runs are condensed into daily summaries. Deleting a project removes its pages, runs and metrics from the app. To have your account and everything stored for it erased, email us (see below).
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account and all associated data. Email [email protected] and we’ll respond within 30 days.
Changes
If we change this policy in a way that matters, we’ll email account holders before it takes effect.