Privacy Policy

Who we are

CheckSitePulse (“we”, “us”) operates this website and its website-scanning service. The company responsible for your personal data (the “data controller”) is CheckSitePulse. For payments, Whop acts as Merchant of Record and is an independent controller of the payment data it collects (see “Billing and payments” below). Privacy contact for this policy and your data: support@checksitepulse.net.

What we collect

• Account data — your name, email address and a bcrypt hash of your password (we never store the password itself), whether your email is verified, and the organizations you belong to.
• Websites and scans you create — the website addresses you add, and the results of scans you run on them: the pages found (no page limit per scan, up to 10 links deep), response status, headers and timing, and details extracted from those pages such as titles, headings, links, images, scripts, detected technologies, structured data, and phone numbers or other contact details shown on the page, together with DNS, TLS-certificate and security-configuration findings and the resulting scores. We do not keep a copy of the pages' full content. If you set up monitoring, we also keep its schedule and the results of each run.
• Contact form and launch-notification sign-ups — the details you enter, the IP address it came from and the time.
• Service requests and service reviews — if you use the Request Services form, the services you pick, your name, email address, WhatsApp number, any details you write, the IP address it came from and the time. If you submit a review on a service page, your name, email address (never shown publicly), star rating, review text, the IP address and the time. A review is shown on the site only after we approve it; the name, rating and text you wrote are then public.
• Billing data — which plan you chose, its billing period and status, and the Whop customer, subscription and transaction identifiers linked to it, plus your email address where needed to match a purchase to your account. Payment is taken on Whop's checkout; we do not receive or store your card details.
• Security and abuse-prevention data — your IP address is recorded for login attempts, form submissions and ad impression/click checks. The throttling records used for login and ad checks are deleted after about one day. Administrator actions are written to an audit log.
• Cookies — see the Cookie Policy.

Scanning other people's websites

When you scan a website, our scanner (CheckSitePulseBot/1.0 (+https://checksitepulse.net/bot)) makes requests to that website on your behalf. These are ordinary read-only requests: the pages it crawls (it respects the site's robots.txt), robots.txt and sitemaps, links to other websites (to check that they work), and 17 fixed well-known file paths (such as /.env and /.git/HEAD) to check whether sensitive files are publicly readable. It also makes DNS lookups for the site's domain and opens a TLS connection to check its certificate. The scanner only contacts public internet addresses. It never logs in, submits forms, or sends attack payloads, and it does not store the content of any sensitive file it detects. The results belong to the organization that ran the scan and are visible to that organization's members.

How we use it, and our legal basis

We do not sell your data, and we do not use scan results for advertising. We use personal data for these purposes:

• Providing the service (running your account and scans, showing results and reports, sending the emails described below, enforcing plan limits, handling your subscription and replying to you). Legal basis: performing our contract with you.
• Security, fraud and abuse prevention (login throttling, form and ad-click checks, audit logs). Legal basis: our legitimate interest in keeping the service safe and reliable.
• Legal and accounting obligations and handling disputes or refunds. Legal basis: legal obligation and our legitimate interest in defending our rights.
• Advertising to Free-plan visitors where enabled (see below). Legal basis: consent where the law requires it, otherwise our legitimate interest in funding the free service.
• Launch notifications you asked for. Legal basis: your consent, which you can withdraw at any time.

Billing and payments

Our order process is conducted by our online payment platform Whop, which is the Merchant of Record for all our orders. Whop collects and processes your payment details, billing address and tax information to take payment, calculate and remit tax, prevent fraud, and handle refunds and customer service for payments. Whop is an independent controller of that data; see Whop's Privacy Notice. We receive from Whop only what we need to run your subscription, as described above.

Emails we send

Transactional emails only: email verification, password reset, scan completed or failed, monitoring alerts (a regression, the site being down or back up, an expiring SSL certificate, a changed sitemap or robots.txt), and subscription notices. If you signed up for launch notification, we send that announcement.

Advertising

Free-plan visitors may see ads: ones we place ourselves and, when enabled, Google AdSense. Paid plans do not show ads. When AdSense is enabled, Google may use cookies and similar technologies to serve and measure ads; see Google's policies for how it uses that data and how to control it. If you have no paid plan, ads can load on any page of this site.

Who we share data with

We share personal data only where needed to run the service:

• Whop, our reseller and Merchant of Record, for payments, tax, fraud prevention and refunds.
• Service providers (processors) acting on our instructions: our hosting provider and mail server (to host the site and send the emails above), and Google if AdSense is enabled.
• Professional advisers such as accountants and lawyers, under confidentiality.
• Authorities, where the law requires it or to protect the security of the service and the rights of others.

We do not sell personal data.

International transfers

Our providers, including Whop, may process data in countries other than where you live. Where personal data from the UK or European Economic Area is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum) in our providers' terms.

How long we keep it

We keep account, website and scan data for as long as your account exists, so that you can see your history. When you ask us to delete your account, or the account is closed, we delete or anonymise your personal data within 30 days, except records we must keep for legal, tax or accounting reasons or to resolve a dispute. Contact-form messages, service requests, service reviews and launch-notification sign-ups are kept until you ask us to delete them. Login and ad-check throttling records are deleted after about one day. You can delete a website from an organization at any time, which removes its scans. Whop keeps transaction records for as long as the law requires, under its own notice.

Security

We protect personal data with measures that include encrypted connections (HTTPS), hashed passwords (bcrypt), access controls, request throttling and an administrator audit log. No system is completely secure, but we work to keep your data safe and will tell you and the authorities about a breach where the law requires it.

Your rights and choices

You can change your password in your account settings and remove websites you added. Depending on where you live (including under the UK and EU GDPR), you also have the right to: access the personal data we hold about you; have it corrected; have it erased; restrict or object to its processing; receive it in a portable format; withdraw consent at any time where we rely on it; and complain to your data protection authority (in the UK, the ICO; in the EU, your local supervisory authority). To use any of these rights email support@checksitepulse.net; we handle these requests by hand and reply within one month. For payment data held by Whop, you can also contact Whop directly. If you own a website and do not want it scanned, see our scanner page.

Children's privacy

This site is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

When we change how we handle personal data, we will update this page and its "Last updated" date.

Contact

Questions about this policy: support@checksitepulse.net or the contact form. See also our Terms of Service, Refund Policy and Cookie Policy.