CronPup

Privacy

Draft. It will be reviewed before public launch.

We store your email address, a salted hash of your password, the monitors you create, and the pings they receive: timestamp, source IP address and any body you send, up to 10 KB. We use this data only to run the service and send you alerts. We don't sell data or use third-party trackers. We count page views per day in aggregate (which page, and which site referred the visit), without cookies, IP addresses or anything that identifies you. Public pages may also use Cloudflare Web Analytics, which is cookieless and doesn't follow you across sites. For your own account we record when it first reached each setup step (signed up, first monitor, first ping, first alert, started checkout, upgraded) and the tag or referring site of the visit that led to the signup, so we can see where new users get stuck. These are part of your data export and are deleted with your account. Ping history is deleted after your plan's retention period. You can download all your data, or delete your account and all of its data, at any time from the Settings page.

If you turn on two-factor authentication, we store the shared secret your authenticator app uses.

Who else sees data. The service runs on Cloudflare (hosting, database and email delivery). Payments are handled by Stripe, and we never see card numbers. When a monitor alerts, the alert text (monitor name, status, reason and recent output) is sent to the channels you configure: an email provider, ntfy, Slack, Discord, PagerDuty or your own webhook. Note that a public ntfy.sh topic can be read by anyone who knows its name, so pick a hard-to-guess topic.