Privacy

Data used to deliver the beta

We store your sign-in email, hashed authentication tokens, site ownership proof, monitored URLs, bounded tag/header evidence, check history and notification status. Short-lived hashed login IP/email values are used for abuse limits.

Monitoring requires proof of ownership. Do not enter personal data, access tokens or confidential information in monitored URLs. We do not save full HTML bodies as check evidence.

Service providers

Cloudflare hosts the service and database. Resend delivers transactional sign-in and monitoring email. Creem hosts checkout and payment records when enabled; card details are not collected or stored by SiteTagWatch.

Retention and deletion

Check history and notification records are retained for 30 days. The current baseline and incident state remain while monitoring is active. Expired login tokens/sessions and login-abuse records are cleaned up. Deletion removes active account or monitoring data; opaque quota/deletion records may remain to prevent abuse and replay deletions after backup restoration.

Deleting data cannot recall an already-dispatched request. Cloudflare recovery backups may temporarily retain earlier data; deletion is reapplied if restored. Provider billing records may have separate retention requirements.

Cookies and contact

We use a secure first-party session cookie for login. No advertising, heatmap or analytics scripts are installed on these beta pages. Hosted checkout can use its own cookies. For access or deletion help, contact support@sitetagwatch.com.