Privacy Policy
This policy explains how Pingeon handles personal data when you visit pingeon.page, use the Pingeon app, visit or subscribe to a status page hosted by Pingeon, or run a website that Pingeon checks. We collect as little as we can, never sell it, and don't use it for advertising.
- Who we are
- What we collect and why
- What we don't do
- Cookies and local storage
- Who we share data with
- International transfers
- How long we keep data
- Security
- Your rights
- Region-specific information
- Status page visitors and subscribers
- If your site is being checked
- Children
- Changes to this policy
- Contact
1. Who we are
Pingeon is operated by Stijn ter Steege, based in the Netherlands ("Pingeon", "we", "us"). For personal data of account holders and website visitors, we are the controller under the EU and UK General Data Protection Regulation (GDPR). For personal data that account holders put into Pingeon about other people, such as status page subscribers or extra alert recipients, the account holder is the controller and we act as their processor under our Data Processing Agreement.
Contact for anything privacy-related: [email protected]. Because of our size we are not required to appoint a Data Protection Officer, and we have not appointed one.
2. What we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Your email address | To create your account, send sign-in codes, and send the alerts you ask for. | Performance of a contract (Art. 6(1)(b)) |
| Your display name (optional) | Shown on incident timelines when you acknowledge or resolve an incident. | Performance of a contract |
| Alert settings: extra alert addresses, an escalation address, reminder preferences | To deliver alerts where you want them. | Performance of a contract |
| Monitor settings: URLs, hostnames, ports, keywords, custom request headers (encrypted) | To run the checks you configure. | Performance of a contract |
| Check results, response times, daily uptime totals | To show history and charts and decide when to alert you. | Performance of a contract |
| Incidents, incident notes and status page content | To keep incident timelines and publish your status page. | Performance of a contract |
| Sign-in codes (stored only as one-way hashes) and session tokens | To let you sign in securely without a password. | Performance of a contract; legitimate interest in security (Art. 6(1)(f)) |
| Emails waiting to be sent (recipient, subject, body) | So that an alert is never lost if the mail server is briefly unreachable. | Performance of a contract |
| IP address and basic request data (browser type, time, requested page) | To protect the service against abuse: rate limiting, the bot check on forms, and blocking attacks. | Legitimate interest in keeping the service secure and available |
| Messages you send us | To answer your question or handle your request. | Legitimate interest; or a legal obligation when you exercise a privacy right (Art. 6(1)(c)) |
Giving us your email address is necessary to use the app: without it we can't sign you in or alert you. Everything else is optional. If you add other people's email addresses (as alert recipients or escalation contacts), make sure you are allowed to do so.
3. What we don't do
- We don't sell or rent personal data, and we don't "share" it for cross-context behavioral advertising.
- We don't show ads and don't use advertising or analytics trackers, tracking pixels or fingerprinting.
- We don't build profiles about you and don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
- We don't send marketing emails. You only receive sign-in codes, the alerts you set up, and essential messages about your account or these terms.
4. Cookies and local storage
Pingeon doesn't set advertising, analytics or other tracking cookies, so we don't show a cookie banner. We only store what's strictly necessary to provide the service you ask for, in your browser's local storage:
- Sign-in token (app.pingeon.page): keeps you signed in. Removed when you sign out.
- Theme preference (app.pingeon.page): remembers whether you chose day or night mode.
- Last known status (status pages): lets a status page show the latest status it saw if our servers can't be reached.
Our sign-in and subscribe forms use Cloudflare Turnstile to tell people from bots. Turnstile evaluates technical signals from your browser and does not use them for advertising. Cloudflare may also set strictly necessary security cookies to protect our sites against attacks. See Cloudflare's privacy policy and Turnstile privacy addendum.
Under the EU ePrivacy rules (and similar laws elsewhere), storage that is strictly necessary for a service you explicitly request doesn't require consent. If we ever add anything that isn't strictly necessary, we'll ask first.
5. Who we share data with
We only share personal data with service providers that help us run Pingeon, under contracts that oblige them to protect it and to use it only on our instructions:
| Provider | What they do | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting of the website and app, DNS, content delivery, protection against attacks, the Turnstile bot check, and HTTPS for custom status page domains. | Global network; company in the USA |
| Our server hosting provider | Runs the server that hosts the API, the database, the check workers and outgoing email. | Germany (EU) |
Alert and status emails are sent from our own mail server on that host to your mail provider. We may also disclose personal data when the law requires it (for example a valid court order), to protect the rights, safety or property of our users, the public or Pingeon, or to a successor if Pingeon is ever transferred, in which case this policy continues to apply to your data and we'll tell you in advance.
6. International transfers
Our database and servers are in the EU. Cloudflare processes some data (such as IP addresses) on its global network, including in the United States. Where personal data leaves the European Economic Area, the UK or Switzerland, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses with the UK Addendum, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.
7. How long we keep data
| Data | Kept for |
|---|---|
| Account, alert settings, monitors, incidents, status page | Until you delete them or delete your account |
| Individual check results | 30 days |
| Daily uptime totals | About 400 days |
| Sign-in codes | Valid for 15 minutes, deleted one day after they expire |
| Sent and pending emails | 14 days |
| Unconfirmed status page subscriptions | 7 days |
| Rate limiting data (IP addresses) | Held in memory only, for minutes |
| Server and security logs | Up to 30 days, unless needed longer to investigate an incident |
| Backups | 14 days, after which deleted data is gone from backups too |
| Messages you send us | As long as needed to handle them, and no longer than 2 years |
When you delete your account, we immediately delete your account, monitors, check history, incidents, status page (including its subscribers) and custom domain. Remaining copies disappear from backups within 14 days.
8. Security
All traffic is encrypted with HTTPS. There are no passwords to leak: you sign in with one-time codes, which we store only as one-way hashes. Custom request headers you give us (which may contain secrets) are encrypted at rest. Our server only accepts traffic through Cloudflare, forms are protected by rate limits and a bot check, and access to production systems is limited to the operator. No system is perfectly secure, but if a personal data breach happens that is likely to put you at risk, we will tell you and the competent authority as the law requires.
9. Your rights
Wherever you live, you can:
- Access your data and get a copy of it. In the app, Settings > Your data > Download my data gives you a machine-readable JSON file (this also covers data portability).
- Correct it. You can change most data yourself in the app.
- Delete it. Settings > Delete account deletes everything immediately.
- Object to processing based on legitimate interests, and restrict processing in certain cases.
- Withdraw consent where we rely on it, for example by unsubscribing from a status page. Withdrawing doesn't affect earlier processing.
- Complain to a data protection authority. Our lead authority is the Dutch Autoriteit Persoonsgegevens, but you can also contact the authority where you live or work.
For anything you can't do in the app, email [email protected]. We'll respond within one month (or sooner where your local law requires), may ask you to confirm you control the account's email address, and won't charge you or treat you differently for exercising your rights. If we can't help, we'll explain why.
10. Region-specific information
European Economic Area, United Kingdom and Switzerland
This policy is written to meet the GDPR, the UK GDPR and Data Protection Act 2018, and the Swiss Federal Act on Data Protection. The legal bases are listed in section 2.
United States (including California)
For the purposes of the California Consumer Privacy Act as amended (CCPA) and other US state privacy laws, in the last 12 months we have collected: identifiers (email address, IP address), internet or network activity (request data and check results), and the content you provide. We collect them from you and your browser, for the business purposes described in section 2, and disclose them only to the service providers in section 5. We do not sell or share personal information, don't use or disclose sensitive personal information, and have no actual knowledge of selling or sharing data of consumers under 16. You have the right to know, access, correct and delete your personal information, to opt out of sale, sharing and targeted advertising (which we don't do), and not to be discriminated against for using these rights. You can use an authorized agent; we may ask for proof of authorization. If we deny a request, you may appeal by replying to our answer.
Brazil
Under the LGPD you have the rights listed in article 18, including confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, and to petition the ANPD. Contact us at the address below.
Canada, Australia, and elsewhere
We handle personal data in line with PIPEDA, the Australian Privacy Principles and comparable laws. You can access and correct your personal information and complain to us; if you're not satisfied, you can contact your local privacy regulator.
11. Status page visitors and subscribers
Status pages are published by Pingeon's users, under their own name and sometimes on their own domain. When you subscribe to updates, we store your email address for that page, send a confirmation email, and only start sending updates after you click the link in it (double opt-in). Every update email has a one-click unsubscribe link. The organization that runs the status page is the controller of your subscription and decides when to post updates; we process your email address on its behalf. Visiting a status page doesn't require any personal data beyond the technical request data described above.
12. If your site is being checked
Our checker, PingeonBot, requests the addresses our users configure and records the response (status code, response time, certificate dates, and whether a keyword appears). It doesn't crawl, follow links or store your pages. If personal data happens to appear in a response, we don't keep it beyond the check result. See About PingeonBot for how to recognize or stop it.
13. Children
Pingeon is a tool for website operators and isn't intended for children. You must be at least 16 years old to create an account. If you believe a child has given us personal data, contact us and we'll delete it.
14. Changes to this policy
We may update this policy when our service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your data, we'll email account holders at least 30 days before it takes effect.
15. Contact
Stijn ter Steege, the Netherlands. Email: [email protected]. We answer in English and Dutch.