Privacy Policy

This policy explains what AlertAnt ("alertant.com", the "Service") collects, why, and what you can do about it. We are the data controller for the information described here.

We collect the following, and nothing else:

• Your email address, which is how you sign in and how we reach you
• The alerts you create: the address of whatever you asked us to watch, the condition you set, how often it should be checked, and any note you added
• What we observed on each check, kept so we can tell when something changed, and a record of each notification we sent
• Basic account records such as when you signed up and which plan you are on
• Aggregate, non-identifying analytics about how the website is used

We do not collect your name, address or phone number, and we never see your card details.

The addresses you monitor are your content, and we store them so the Service can work. Be aware that a web address can itself contain personal information, for example a booking reference, an order number or an account identifier. Please do not monitor an address containing anything you would not want stored.

We use these addresses only to perform the checks you asked for. We do not sell them, share them for advertising, or use them to build a profile of you.

To run the checks you configured, to send you notifications, to authenticate you, to manage your subscription, to prevent abuse, and to answer you when you contact support. We use your email address for service messages about your account and your alerts. We do not send marketing email unless you ask us to.

We share the minimum necessary with the following processors:

• Creem (creem.io), our merchant of record, for billing, payment processing and sales tax. They handle your payment details directly. We never store or see them.
• Resend, for delivering email, which means they process your email address
• Hetzner, our hosting provider, where the Service and its database run
• Umami, for privacy-focused website analytics that does not use cookies

We also disclose information where we are legally required to. We do not sell your personal information.

To check something for you, our servers request it in the same way a browser would. That request comes from us, not from you, so the site being watched sees our infrastructure rather than your device or your address.

We use a single cookie to keep you signed in. It is required for the Service to function and is not used for advertising or tracking across sites. Our analytics does not use cookies.

We keep your account and alerts for as long as your account exists. If you cancel, we keep your alerts so that resubscribing restores them. Delete an alert and its configuration, observation history and notification records go with it. Ask us to delete your account and we will remove your data within 30 days, except where we are required to keep billing records for tax purposes.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict how we use it, and to complain to your data protection authority. Email [email protected] and we will action it. You do not need an account in good standing to ask.

Traffic is encrypted in transit. API keys are stored only as a hash, never in a form we can read back, which is why a new key can only be shown to you once. Access to production systems is limited. No system is perfectly secure, and we will tell affected users promptly if we become aware of a breach involving their data.

The Service is not intended for anyone under 16 and we do not knowingly collect their information. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. Material changes will be notified by email or through the Service, and the date at the top will change.

Privacy questions and requests: [email protected].