Who is responsible
Service: Website Oversight, website monitoring and reports.
Email: support@websiteoversight.com
This notice covers the Website Oversight website, account and monitoring service. Contact us using the details above to ask about your information.
Information we use
- Your email address, account identifier, sign-in requests and trial dates.
- Website addresses you submit; discovered public URLs, titles, descriptions, headings, technical observations, check timestamps, response times and alert history. Public page text can contain personal information. Only submit websites you own or are authorised to monitor; do not submit confidential or sensitive information.
- Subscription identifiers, customer identifiers and subscription status supplied by Lemon Squeezy. Our application does not collect or store full payment-card details.
- Email delivery status, rejection or complaint records and messages you send us.
- Technical connection information processed by our hosting provider. The application uses a hashed, daily IP-based value for trial request limits, plus an email-derived hash and website hostname to prevent repeated trials. Hashing does not make this information anonymous.
Why we use it
We use account, monitoring and service-email information to provide the service you request and perform our agreement with you. We use limited security, delivery and trial-eligibility records for our legitimate interests in preventing abuse, protecting accounts and keeping the service reliable. We use information where needed to meet legal obligations and deal with complaints or claims. We do not sell personal information or use monitoring results for advertising.
Service providers and international processing
Cloudflare hosts our website, application, database and processing queues. Resend delivers sign-in and alert emails. Lemon Squeezy handles checkout, payment and customer billing information under its own privacy notice. Your email provider also processes messages delivered to you. Infrastructure and providers may process information outside your country, including in the United States. Provider terms describe their data-protection and international-transfer arrangements; contact us for information about the arrangements applicable to your data.
Website traffic statistics
We count public page requests in daily totals by page, approximate country and broad referral category. Signed-in visits and recognised bots are excluded where possible. We do not store IP addresses, visitor identifiers or full referring URLs for these statistics, and do not use tracking cookies. These aggregate figures help us understand use of the service.
Cookies and browser storage
We use a secure, HTTP-only session cookie named session to keep you signed in for up to seven days. Signing out clears it. A local browser preference named oversight-view remembers Basic or Advanced report mode until you clear it. We do not add advertising cookies or third-party analytics scripts to our application. Hosting and payment providers may process their own essential security or checkout information.
Support correspondence
Messages sent to support@websiteoversight.com, including their sender details, message content and attachments, are processed by Cloudflare and stored in our private support inbox. Resend processes outgoing replies. Correspondence is kept while needed to answer your enquiry, support your account or address a complaint, then reviewed for deletion. It is not automatically deleted when a monitored website is removed. Contact us to request a copy or deletion. Do not send passwords, card details or sensitive personal information.
How long information is kept
Individual monitoring checks and alerts are kept for the lifetime of the monitored website, including after a trial or subscription ends, so you can access your full saved history. Removing a website deletes its monitoring records from the application. Account, subscription, email-delivery and trial-eligibility records are not automatically deleted when a website is removed or monitoring pauses. Trial records are retained to enforce the one-trial rule; delivery suppression records prevent further sending after a hard rejection or complaint. You can request account deletion or a review of retained information by email. We assess whether any limited records must remain for security, legal obligations or claims, and explain any retention that applies.
Sign-in links expire after fifteen minutes; expired token records are cleaned by scheduled processing. Expired trial request-limit records are also cleaned automatically. Payment providers maintain their own records under their policies. Deletion from the application does not mean all provider logs or backups are immediately erased.
Your choices and rights
You can export monitoring records from the dashboard and remove a monitored website. Depending on applicable law, you can request access, correction, deletion, restriction or a portable copy of personal information, and object to processing based on legitimate interests. We may need to verify your identity. These rights can have exceptions. Email us to make a request or raise a concern. You may complain to the UK Information Commissioner’s Office or your local data-protection authority.
Changes
We will update this notice when the service or our use of information changes. The date above identifies this version.