This policy explains what personal information Pulsecheck collects, why, who it's shared with and what you can do about it. We aim to follow the Australian Privacy Principles.
Pulsecheck (pulsecheck.run) is run by Simon Dufty, a sole trader based in Melbourne, Australia ("we", "us", "our"). For any privacy question or request, email hello@pulsecheck.run.
Payments are handled by Stripe. We never see or store your card details. When you choose a paid plan, we pass your email address and a Pulsecheck account reference to Stripe. Stripe tells us your customer and subscription IDs, the plan you're on, your subscription status and the end of your billing period, and we store those.
When you use our contact form, we store your name, email address and message. We also store your account ID if you're logged in, your browser's user-agent string, and a one-way hash of your IP address. We use the hash only to limit how many messages can be sent from one place.
Password-reset links contain a random token. We store only a hash of that token, never the token itself. Tokens expire after 60 minutes and are deleted once used. To prevent abuse, we keep one-way hashes of the email address and IP address used to request or use a reset, with the times of the requests. We use these only for rate limiting.
We count page views with our own simple counter. It doesn't use cookies. For each day, it records only totals: which of our pages were viewed, the domain name of the site that referred you (if any), and your country. Vercel works out the country from your connection, and we don't store your IP address. It doesn't record IP addresses, browser details or account IDs, and it doesn't run if your browser sends a Do Not Track signal. Automated traffic is counted separately, as a total.
When something goes wrong on our side, we record the page or API route, the response status and a short technical error message. Before saving, we remove email addresses, tokens, keys and other long strings. We don't record request bodies, headers or cookies in these logs.
We use a single cookie, pc_session. It keeps you logged in for up to 30 days and is set when you sign up or log in. It's essential for the service to work, so it can't be switched off. You can log out at any time to remove it. We don't use advertising or tracking cookies.
Our fonts are served from our own site, so displaying our pages doesn't send your details to a font provider.
When you create an account, we add your email address to our mailing list in ActiveCampaign. We use it to send occasional product emails, and we say so on the sign-up page. You can unsubscribe at any time using the link in any of those emails, or by emailing hello@pulsecheck.run.
We send alert emails and password-reset emails through Resend, from alerts@pulsecheck.run. Alerts go to your alert email address. If you add a Slack or webhook URL, we also send alert details (job name, status and any problems found) to that address. That service handles the information under its own terms.
We don't sell your personal information. We share it only with the service providers that run Pulsecheck for us, and only for that purpose:
We may also disclose information where the law requires it.
These providers may store or process your information outside Australia, including in the United States. Their services are hosted on their own infrastructure, and some of it is overseas. We choose established providers and use them only to run Pulsecheck.
You can see and change your alert email and Slack or webhook settings in your dashboard. To get a copy of the personal information we hold about you, or to correct it (including your login email address), email hello@pulsecheck.run. To ask us to delete any of it, email the same address.
We take reasonable steps to protect your information. The site is served only over HTTPS, passwords and reset tokens are stored as hashes, our data storage is private, the session cookie can't be read by scripts, and access to our systems is restricted. No system is completely secure, so please use a strong, unique password.
If you have a concern about how we've handled your personal information, please contact us first at hello@pulsecheck.run so we can try to fix it. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
We may update this policy from time to time. When we do, we'll post the new version here and change the "Last updated" date. See also our Terms of Service.