PageAlert

Privacy Policy

Last updated: September 2026

Who we are

PageAlert is run by J M Dimonaco LTD, a company registered in England and Wales (company number 14260548, registered office 34 Llanberis Close, Tonteg, Cardiff, CF38 1HR). We are the data controller for everything described here. Questions about your data go to dimonaco.james@gmail.com.

What we collect

Your account. Your email address and name — from Google or GitHub if you sign in that way, or as you typed them if you signed up with a password. A password is stored hashed; we cannot read it. We use these to sign you in and to email you.

Your monitors. The URLs you give us, your search prompts, and what we find on each check. Every check is logged — when it ran, what we read from the page, and whether it matched. That log is the check history you see in the dashboard.

Trying it before you sign up. A scan run without an account stores the URL and prompt for 7 days. If you leave an email address so we can tell you about matches, we keep the address with the scan for 30 days. Sign up with that address and the monitor moves into your account.

Notification channels. If you connect one, we store your Telegram chat ID or Discord webhook URL. For browser push we store a subscription address and keys for each device you allow it on, along with that browser's user agent string.

Your mobile number. If you turn on text alerts we store your mobile number. We send a code to it first, and only a number that answers the code ever receives an alert. A code you do not finish with is deleted when it expires. We use the number for nothing but the texts you asked for, and never for marketing. Full detail is in our SMS opt-in and messaging policy.

Feedback and reviews. A thumbs up or down on an alert is stored with the entry it was about and the prompt you had at the time. If you leave a review, the display name and words you give us are shown on our homepage.

Emails we send you. One record per email: the address, what kind of email it was, and whether it was delivered, bounced, or marked as spam.

Activity. When you were last in the app, and when you created each monitor.

Billing. Which plan you are on and your Polar customer and subscription IDs. Polar holds your payment details; we never see them.

Analytics. We use PostHog to record page views, clicks, feature use and errors. This is not anonymous: once you sign in, it is linked to your account, with your email, name, sign-up date and how many monitors you have, so we can see how people use the product. PostHog also records session replays — the pages you visit, where you click, and how you move through the app. Anything you type into a form is masked before it leaves your browser. Vercel Analytics separately counts page views and load times in aggregate.

How we use your data, and on what basis

  • To run the service — checking your pages, sending alerts by email and any channel you connect, and taking payment. This is needed to provide what you signed up for.
  • To email you about your account — a welcome email when you sign up, a notice if we pause your monitors, and the occasional account-wide notice. Same basis.
  • To improve the product — the analytics above. Our legitimate interest in understanding how the app is used. You can turn this off; see Cookies and analytics below.
  • To prevent abuse — a limit on how fast monitors can be created, one Telegram chat or Discord webhook per free account, and suspending accounts that break the terms. Our legitimate interest in keeping the service running for everyone.
  • To know whether our emails arrive — the delivery records above. Same legitimate interest.

If you stop using the app and are on the free plan, we pause your monitors — after 30 days if an alert has gone unread, or after 90 days otherwise — and email you a link to restart them. This is so we are not checking pages nobody is reading.

Who else processes it

These services process your data on our behalf:

  • Convex — database and backend. Everything above is stored here.
  • Anthropic (Claude) — the text of each page we check is sent to Claude, with your prompt, to pull out the entries and judge whether they match.
  • Scrapfly — when a site blocks us, we fetch the page through Scrapfly's proxy service instead. They see the URL and return the page.
  • Resend — sends our email and tells us when one bounces.
  • Twilio — sends our text messages. Twilio is in the US and receives your mobile number and the content of each text: the monitor name, what changed, and a link. Twilio is certified under the UK–US data bridge and the EU–US Data Privacy Framework.
  • Polar — payments and subscriptions.
  • PostHog — analytics and session replay, hosted in the United States.
  • Vercel — hosts the site and provides the aggregate page analytics.
  • Railway — hosts the scraper that fetches pages.
  • Telegram and Discord — if you connect them, alerts go through their APIs. Telegram receives your chat ID and each message; Discord receives each message at the webhook URL you gave us.

Several of these providers are in the United States, so some of your data leaves the UK. Each one processes it under its own data processing terms. We do not sell your data to anyone.

Cookies and analytics

We use an essential cookie to keep you signed in. PostHog stores an identifier in a cookie and in local storage so it can tell one visit from the next.

Analytics requests go through our own domain, so a browser ad blocker may not stop them. Turn them off here — no account needed, because we start recording on the pages you can reach without one. The same switch is in Settings → Profile → Analytics once you have signed in.

We use PostHog to record page views, clicks and errors, and to replay sessions: the pages you visit and what you click, with anything you type masked. Turning this off stops both, in this browser only — other browsers and devices keep their own setting.

How long we keep it

Everything tied to your account is kept while the account exists, including your check history. How far back you can read that history depends on your plan: older checks are hidden rather than deleted, and upgrading brings them back. Scans run without an account are deleted after 7 days, or 30 days if you left an email address.

You can delete your account from Settings → Profile. That removes your monitors, results, check history, notifications, connected channels, your mobile number, push subscriptions, feedback, reviews, email delivery records, and the login itself, including your email and name. Deletion runs in the background: most accounts are cleared straight away, and a large account takes a few minutes. Checks that ran before you signed up, on a monitor you later claimed, are removed as well.

Two things stay after deletion: the record of any account-wide email we sent, which lists the addresses it went to; and the IDs of Polar orders we have applied, alongside Polar's own record of your payments. A suspended account cannot be deleted from Settings — email us instead.

Your rights

Under UK data protection law you can:

  • Access your data — your monitors, results and check history are all in the dashboard. Email us for anything else.
  • Correct it — email us and we will fix it.
  • Delete it — delete individual monitors or your whole account from Settings.
  • Export it — email us and we will send you a copy.
  • Object to analytics — use the switch above, or the one in Settings.
  • Complain to the Information Commissioner's Office at ico.org.uk if you think we have handled your data badly. We would rather hear from you first.

Security

All traffic uses HTTPS. Sign-in is handled by Better Auth, with Google, GitHub, or an email address and a hashed password. Our infrastructure providers encrypt data at rest.

Changes to this policy

If we make a significant change, we will email you or show a notice in the app.

Contact

Email dimonaco.james@gmail.com.

← Back to PageAlert