Last updated: 1 March 2026
1. Who we are
Vulpine ("we", "us", "our") operates the website monitoring and auditing service available at vulpine.app. This policy explains how we handle personal data when you use our website and services.
2. Data we collect
Account information
When you create an account, we collect your name, email address, and payment details. If you sign in with Google, we receive your name and email from Google's OAuth service.
Website scan data
When you add a site for monitoring, we crawl its publicly accessible pages and store technical audit data including page URLs, HTTP status codes, performance metrics, and detected issues. We do not access password-protected areas or private content.
Usage data
We collect basic analytics about how you use the dashboard, including pages viewed, features used, and session duration. We do not use third-party tracking scripts.
Technical data
Our servers automatically log IP addresses, browser type, and referring URLs when you visit vulpine.app. This data is retained for 30 days for security purposes.
3. How we use your data
We use your data to:
- Provide and improve the Vulpine service
- Send scan reports and alert notifications you've opted into
- Process payments and manage your subscription
- Respond to support requests
- Detect and prevent abuse or fraud
We do not sell your personal data. We do not use your data for advertising.
4. Data sharing
We share data only with service providers who help us operate Vulpine:
- Payment processing: Stripe processes payments on our behalf. See Stripe's privacy policy.
- Email delivery: We use a transactional email provider to send notifications and reports.
- Infrastructure: Our servers are hosted in the EU. Scan data and backups are stored in EU data centres.
We may disclose data if required by law or to protect our legal rights.
5. Data retention
We retain your account data for as long as your account is active. Scan history is kept for 12 months. If you delete your account, we remove your personal data within 30 days. Anonymised, aggregated data may be retained for analytics.
6. Your rights
Under GDPR and applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict processing
- Withdraw consent at any time
To exercise any of these rights, email privacy@vulpine.app.
7. Security
We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and regular security audits. Access to personal data is restricted to team members who need it to provide the service.
8. Cookies
We use essential cookies to keep you logged in and remember your preferences. For full details, see our Cookie Policy.
9. Changes to this policy
We may update this policy from time to time. We'll notify you of significant changes by email or through the dashboard. The "last updated" date at the top reflects the most recent revision.
10. Contact
If you have questions about this privacy policy or your personal data, contact us at privacy@vulpine.app.