This Privacy Policy explains what personal data DemonCheck ("we", "us") collects, how we use it, and your rights. It applies to demoncheck.com and related services.
1. Data We Collect
- Account data — when you sign in via Google, GitHub, Facebook, or Microsoft, we receive your email address, display name, and profile picture URL from the provider. We never receive or store your passwords.
- Monitor data — the URLs, names, and check settings you configure, plus the resulting check history (status, response time, timestamps).
- Notification data — the channels you connect, such as a Telegram chat ID or an email address for alerts.
- Billing data — subscription status and plan. Card details are processed entirely by our payment provider (merchant of record) and never touch our servers.
- Technical data — standard server logs (IP address, user agent, request time) kept for security and debugging.
2. How We Use Data
- To provide the Service: run checks, store history, send alerts.
- To manage your subscription and process payments.
- To secure the Service and prevent abuse.
- To communicate service-related announcements (downtime, changes to terms).
We do not sell your personal data. We do not use your data for advertising.
3. Third Parties We Share Data With
- Identity providers (Google, GitHub, Facebook, Microsoft) — for sign-in only.
- Telegram — if you connect it, we send alert messages to your chat via the Telegram Bot API.
- Email delivery provider — to send email alerts and service messages.
- Payment provider (merchant of record) — to process subscriptions.
- Hosting provider (Hetzner Online GmbH, Germany) — our servers are located in the EU.
4. Cookies and Local Storage
- A short-lived cookie is used during OAuth sign-in to prevent request forgery.
- Your session token is stored in your browser's local storage to keep you signed in.
- We do not use advertising or cross-site tracking cookies.
5. Data Retention
- Account data is kept while your account is active.
- Monitor check history is retained according to your plan's history limit.
- After account deletion, personal data is removed within 30 days, except where retention is required by law (e.g., billing records).
6. Your Rights
Depending on your jurisdiction (including under the GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local data-protection authority.
7. Security
Data is transmitted over TLS (HTTPS), stored on access-controlled servers in the EU, and backed up regularly. No method of transmission or storage is 100% secure, but we take reasonable industry-standard measures to protect your data.
8. Children
The Service is not directed at children under 16, and we do not knowingly collect their data.
9. Changes
We may update this Policy. Material changes will be announced on the website or by email before they take effect.
10. Contact
Data controller: DemonCheck (operator), Republic of Moldova.
Email: support@demoncheck.com