Privacy Policy

What this covers

This policy explains what Website Guardian collects when you create an account and add a site to monitor, why we collect it, and who else ever sees it.

Information you give us

• Account details — name, email address, and password (stored as a bcrypt hash, never in plain text). If you sign in with Google, we store your Google account ID instead of a password.
• Billing details — handled by LemonSqueezy or Freemius. We store a customer ID to match webhooks to your account; we never see or store your card number.
• Site details — the domain(s) you add for monitoring, and the check results/alert history we generate for them.
• Notification credentials — a Telegram bot token and chat ID, if you connect Telegram for alerts. These are encrypted (AES-256-GCM) before they're stored, and used only to send you alert messages.

How we check your sites

To monitor a site, we make outbound requests to it (HTTP requests, TLS handshakes, DNS/WHOIS lookups) at the frequency you configure, and query third-party safety databases (currently Google Safe Browsing) about the domain. These checks are passive — we never authenticate to your server or CMS.

Information collected automatically

Standard server logs (IP address, request timestamps) for security and abuse prevention. We don't use third-party advertising trackers on this site.

Cookies

We set one cookie: a signed, HTTP-only session token used to keep you signed in. It's not used for advertising or cross-site tracking.

Who we share data with

We use a small number of processors to run the product, each only for the purpose below:

• LemonSqueezy / Freemius — payment processing and subscription billing.
• Google Safe Browsing — checking whether a monitored domain is flagged as malicious.
• Domain WHOIS registries — checking domain registration/expiry status for a monitored domain.
• Telegram — only if you explicitly connect it for alert notifications.

We do not sell your data, and we do not share it with anyone for their own marketing purposes.

How long we keep it

We keep account and site data for as long as your account is active. If you delete a site or your account, we stop monitoring it; billing records are kept as long as required for tax and accounting purposes.

Your rights

You can review or update your account details from the dashboard at any time, disconnect Telegram whenever you want, and request a copy or deletion of your data by reaching out through our contact page.

Changes to this policy

If we make a material change to how we handle your data, we'll post an update here and, where appropriate, notify you directly.

Questions

Reach us any time through the contact page.