Privacy policy

1. Who we are

quietwatch is the service at quietwatch.app and is the controller of the personal data described in this policy. You can reach us at hello@quietwatch.app.

2. Information we collect

• Checked URLs and results. The address you submit and the results of the twelve checks, so that the result link works and, on the Pro plan, so that history and change alerts work.
• A salted hash of your IP address. Used only to apply the rate limit on the free checker and the waitlist form. The address itself is not stored.
• Account data. Your email address, the sites you register and their daily results and history, your settings, and your plan and billing status. Alert recipients, the extra addresses you add for alerts, are stored with the account once that feature is available.
• Sign-in links. When you ask for a link, we store the address it was sent to, a hash of the link, the time and a salted hash of the requesting address, so a link works once and requests can be rate limited.
• Waitlist email. If you left your email on the pricing page before sign-up opened: the address, the page you were on and the time, used for one message.
• Report email from the free checker. Only if you type your address under a result and press "Email me this report": the address, the checked address and its domain, the result it belongs to, the exact consent sentence shown on the page, the page you came from, the time and a salted hash of your IP address. We send that report once, then re-check the same page once a day for 30 days and email only if a check that passed in the report fails later. Every such email has a one-click unsubscribe, which stops all of them for that address. We never email the owner of a checked site unless they typed their address themselves.

3. Cookies, and what we do not collect

We set one cookie, and only after you sign in: the session cookie that keeps you signed in. It is strictly necessary for the service, holds no tracking identifier and is not shared with anyone, so there is no cookie banner. Anonymous visitors get no cookie at all. We use no advertising cookies, load no third-party analytics scripts and place no tracking pixels. We do not sell personal data and do not share it with anyone except the providers listed in section 6, to the extent needed to run the service.

4. How we use it

We use the data above to run the checks you ask for, show and keep the result link, apply rate limits, sign you in, keep the history of your monitored sites, and email you: sign-in links, alerts when a result changes, and account notices such as the end of a trial. We do not use it for advertising or profiling, and we send no marketing email.

5. How long we keep it

• Results from the free checker: 30 days from the check, then deleted.
• The IP hash on those results: deleted with the result.
• Sign-in links: 24 hours, then deleted. Waitlist emails: until the one message is sent, or until you ask for removal.
• Report emails from the free checker: re-checks stop after 30 days; the row is kept for 12 months as the record of consent, then deleted, or sooner if you ask.
• Copies of pages and files fetched during a check: cached for at most 15 minutes to avoid repeat requests to the same host, then discarded.
• Account data: for as long as the account exists. Daily results for monitored sites: 90 days. Deleting the account deletes the account, its sites, results, history and alert recipients.

6. Who we share it with

We use a small number of service providers to run quietwatch. Each processes data only to provide its service to us.

• Hosting provider. Runs the server the checks are made from.
• Database provider. Stores results, account data, sign-in link hashes and the IP hashes.
• Payment processor, acting as merchant of record. Handles Pro payments and holds your payment details. They never reach our servers.
• Email delivery provider. Delivers sign-in links, alerts and account notices. It receives the recipient address and the message; it does not receive your sites' results beyond what the message says.

7. What our crawler collects from checked sites

When you check a site, our crawler requests that site's public pages and files as any crawler would, identified by a User-Agent that names us and gives a contact address. It obeys robots.txt on every host it touches and only requests paths the page itself references, plus robots.txt, sitemap.xml and llms.txt. Site owners who want it to stop can block it in robots.txt or write to us; About the bot explains how.

8. Public result links

A result link from the free checker can be opened by anyone who has it. The location of a leaked secret found by a check is never shown on a public link. To have a result link for your site removed, send it to hello@quietwatch.app.

9. Security

The service is served over HTTPS. Access to the systems that hold data is limited to what operating the service requires. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

You can ask us what personal data we hold about you (access), ask for a copy in a portable form (export), ask us to correct it, or ask us to delete it. Write to hello@quietwatch.app from the email address concerned. We acknowledge requests within two business days and complete them within 30 days. A self-serve export of your sites, results and changes, and a Delete account button that removes everything in section 5 permanently, are being added to the Account page; until then, email works the same way. Where the law where you live gives you further rights, including the right to complain to a supervisory authority, those rights are unaffected.

11. Changes to this policy

When this policy changes, the date at the bottom of this page changes with it. Material changes are announced to Pro customers by email before they take effect.

12. Contact

Questions and requests about this policy: hello@quietwatch.app.

Last updated: 28 September 2026