Privacy Policy

1. Information We Collect

Account information. When you create an account, we collect your name and email address. You can sign up via Google, GitHub, or email/password — all handled through Firebase Authentication.

Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We never see or store your full card number. Stripe provides us with a token, the last four digits of your card, and your billing email for receipt purposes.

Usage data. We store data related to your use of the service: monitors you create, check results (status codes, response times, error messages), incidents, alert history, and status page configurations.

Device and browser information. We collect your IP address and user agent string when you access PingGuard. This is used for rate limiting, fraud prevention, and security — not for tracking or advertising.

2. How We Use Your Information

• Provide the uptime monitoring service — running checks, recording results, detecting incidents
• Send alert notifications via email, webhook, or Slack when your monitored endpoints go down or recover
• Send weekly uptime report emails summarizing your monitoring data
• Process payments and manage your subscription through Stripe
• Improve the service — understanding usage patterns to build better features
• Prevent fraud and abuse — detecting malicious URLs, enforcing rate limits, identifying abusive accounts

3. Data We Monitor

PingGuard pings the URLs you configure at the intervals you choose. For each check, we store the HTTP status code, response time, and any error message (e.g., timeout, DNS failure, connection refused).

Check data is retained for 30 days and automatically cleaned up after that period.

We do not access, read, or store the content of the endpoints you monitor. We only record whether the endpoint responded and how quickly.

4. Third-Party Services

We use the following third-party services to operate PingGuard:

• Firebase (Google) — Authentication (login, signup, session management)
• Supabase — Database and realtime infrastructure
• Stripe — Payment processing and subscription management
• Resend — Transactional email delivery (alerts, reports, account emails)
• Vercel — Hosting, edge functions, and serverless infrastructure
• Slack — Optional integration for alert delivery (only if you connect your workspace)

Each service processes data only as necessary to provide its function. We do not sell or share your data with any third party for advertising or marketing purposes.

5. Data Retention

• Check data — Retained for 30 days, then automatically deleted
• Account data — Retained until you delete your account
• Incidents — Retained indefinitely to provide historical incident records
• Payment records — Retained as required by applicable tax and financial regulations

6. Your Rights

• Access your data — All your monitoring data, incidents, and account information are available in your dashboard at any time
• Export your data — You can export your monitoring data from the dashboard
• Delete your account — You can delete your account and all associated data from Settings. This permanently removes all monitors, check results, incidents, status pages, and alert configurations. We send a confirmation email when deletion is complete
• Opt out of marketing — We do not send marketing emails. The only emails you receive are alert notifications, weekly reports (which you can disable), and essential account emails

7. Security

• All traffic is served over HTTPS — no exceptions
• Session cookies are HttpOnly and Secure, preventing client-side access
• Rate limiting is enforced on all API endpoints to prevent abuse
• URL validation and abuse detection prevent the service from being used for malicious purposes
• Data is encrypted in transit (TLS) and at rest (Supabase infrastructure)

8. Cookies

PingGuard uses a single session cookie (pg-session) to keep you logged in. This cookie is HttpOnly, Secure, and required for the service to function.

We do not use tracking cookies, analytics cookies, or third-party advertising cookies. There are no cookie banners because there is nothing optional to consent to.

9. Contact

If you have questions about this privacy policy or how your data is handled, email us at support@pingguard.io.