Privacy Policy

1. Introduction

DeadManPing ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (hashed and encrypted)
• Authentication tokens from third-party providers (Google OAuth)

2.2 Monitor Data

We store information about your monitors:

• Monitor names and configuration
• Ping timestamps and status
• Optional metadata you send with pings (messages, duration, custom fields)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store credit card information. We only store your Stripe customer ID and subscription status.

2.4 Usage Data

We automatically collect information about how you use the Service:

• IP addresses
• Browser type and version
• Pages visited and time spent
• Error logs and performance data

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send you technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Data is encrypted in transit (HTTPS/TLS)
• Passwords are hashed using bcrypt
• Database access is restricted with Row Level Security (RLS)
• We use Supabase (PostgreSQL) for data storage, which complies with SOC 2 Type II

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We retain ping data for up to 100 pings per monitor (older pings are automatically deleted). If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Third-Party Services

We use the following third-party services:

6.1 Core Services

• Supabase: Database and authentication (privacy policy)
• Stripe: Payment processing (privacy policy)
• Resend: Email delivery (privacy policy)
• Vercel: Hosting and infrastructure (privacy policy)

6.2 Analytics Services

We use analytics services to understand how users interact with our Service and to improve performance. These services are enabled by default based on our legitimate interest (GDPR Article 6(1)(f)) to improve our service quality and user experience.

Privacy-First Configuration: Our analytics services operate in cookieless and anonymized mode. No cookies are used for tracking, and IP addresses are anonymized before processing. This ensures that no personally identifiable information is collected.

• PostHog: Product analytics configured in cookieless mode with anonymized IP addresses. We collect anonymous page views, button clicks, and user interactions to improve our Service. No cookies or persistent identifiers are used. You can opt-out at any time via our opt-out page. (privacy policy)
• Vercel Analytics: Website usage analytics that is fully anonymous and cookieless by design. No personal data is collected or stored. This service measures performance and user experience without tracking individual users. (privacy policy)

Your Rights: Under GDPR Article 21, you have the right to object to processing based on legitimate interest. You can opt-out of PostHog analytics at any time by visiting our opt-out page.

6.3 Error Tracking

We use error tracking to maintain service quality and security. This is based on legitimate interest:

• Sentry: Error tracking and performance monitoring. We collect error logs, stack traces, and performance data to identify and fix issues. This does not require explicit consent as it is necessary for service reliability. (privacy policy)

These services have their own privacy policies. We encourage you to read them.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Object to processing based on legitimate interest (e.g., analytics) - visit our opt-out page
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us through our contact form.

8. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential cookies: Maintain your session and authentication state (required for Service functionality). These cookies are enabled by default and cannot be disabled.
• Analytics (Legitimate Interest): We use analytics services in cookieless/anonymized mode to analyze usage patterns and improve our Service. These services are enabled by default based on our legitimate interest (GDPR Article 6(1)(f)) and do not require explicit consent as they don't use cookies or collect personally identifiable information.
• Preference cookies: Remember your preferences and settings

Analytics Configuration: Our analytics services (PostHog and Vercel Analytics) operate in cookieless and anonymized mode. No cookies are used for tracking, and IP addresses are anonymized before processing. This means we can use these services without requiring explicit consent, as they don't collect personally identifiable information.

For detailed information about the cookies and analytics we use, please see our Cookie Policy.

Opting out of analytics: Under GDPR Article 21, you have the right to object to processing based on legitimate interest. You can opt-out of PostHog analytics at any time by visiting our opt-out page. Vercel Analytics is fully anonymous and cookieless, so it doesn't require opt-out, but you can block it using browser extensions if desired.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Data Controller Information

The administrator of your personal data is:

If you have questions about this Privacy Policy or wish to exercise your rights under GDPR, please contact us through our contact form.