Privacy policy

Last updated: September 30, 2026

Alertoweb monitors public web pages for you and tells you when they change. To do so, we need a few pieces of data about you. Here is which ones, why, how long we keep them and how to exercise your rights.

Data controller

Data controller details: company name, registration number, registered office and contact address

The publisher is established in Thailand. Because Alertoweb is intended for people located in the European Union, the General Data Protection Regulation (GDPR) applies, as does the Thai Personal Data Protection Act (PDPA). Representative in the European Union (Article 27 of the GDPR): being appointed.

The data we process

Your account

  • your email address (sign-in identifier, sending the emails of the service);
  • your password, never stored in clear text (only an irreversible hash is kept);
  • your first and last name, if you provide them;
  • if you use “Continue with Google”: the identifier of your Google account, your email address and, if they are empty on our side, your first and last name. We receive neither your Google password nor access to your other Google data;
  • your plan, the creation date of your account, the date of your last sign-in, the confirmation of your email address, and the language you chose.

The pages you follow

  • the addresses of the pages you monitor, with your labels, your topics, the zones you follow or ignore and the display order you chose;
  • the successive versions of these public pages, as our robot fetches them, and their differences. A page followed by several users is stored only once; the other users do not know that you follow it.

Your notifications

  • your time zone (detected by your browser) and the time chosen for the daily summary;
  • for push notifications, for each device where you enabled them: the technical address provided by the notification service of your browser, the associated encryption keys, and the type of device (for example “Chrome on Windows”).

Your messages

  • if you write to us with the contact form: your email address, the subject and text of your message, the language of the page, your account if you are signed in and your IP address, kept 365 days, to reply to you and to limit abusive sending. The message also reaches us by email;
  • the anti-robot check of this form is a small computation made by your browser: it sets no cookie and calls no outside service.

The security of the service

  • after a failed sign-in: the IP address and the email entered, kept 15 minutes, to block repeated attempts;
  • after a registration: the IP address, kept 60 minutes, to limit mass account creation;
  • after a “forgot password” request: the email entered and the IP address, kept 30 days;
  • the email address confirmation links, kept 90 days;
  • the log of the emails sent (recipient, subject, result of the sending, without the content), kept 90 days;
  • the technical logs of the server (IP address, date, page requested, browser) and the logs of the application (sign-ins, registrations, administration actions), kept 3 months at most.

Why, and on what legal basis

  • Providing the service (account, page monitoring, summary, notifications): performance of the contract between us when you create an account.
  • Protecting the service and its users (limiting attempts, logs, preventing abuse): our legitimate interest in ensuring the security of the service.
  • Replying to your messages: our legitimate interest in replying to the people who write to us.
  • Push notifications: your consent, given by enabling them on a device; you can disable them at any time on the Notifications page or in your browser.

We do not sell your data, we do not use it for advertising and we do not do any profiling.

Cookies

Alertoweb only uses two cookies, both strictly necessary:

  • alertoweb_session keeps you signed in and protects the forms. It disappears when you close your browser or sign out;
  • alertoweb_locale remembers the language you chose (English or French), for one year. It is only set if you change the language.

No audience measurement or advertising cookie is set, which is why no banner asks for your consent.

Who has access to your data

Only the publisher of Alertoweb has access to it. We use the following service providers:

  • OVH SAS (France): hosting of the server and the database, in France, and sending of the emails;
  • Google: only if you choose “Continue with Google”, to authenticate you;
  • the notification services of the browsers (Google, Mozilla, Apple, Microsoft): only if you enable push notifications. They carry the notifications (the name of the pages that changed) to your device, under their own privacy policy.

Where your data is

Your data is hosted in France. The publisher, established in Thailand, administers the service from that country: this is an access to your data from a country outside the European Union. The notification services and Google may process the data that concerns them outside the European Union, under their own safeguards.

How long

  • the data of your account and of the pages you follow: as long as your account exists;
  • a page you no longer follow: it disappears from your account immediately, with your labels and your zones;
  • a device removed from push notifications: its data is deleted immediately;
  • the security data: the periods given above;
  • if you ask for your account to be deleted: your personal data is deleted within one month, except what the law requires us to keep.

Your rights

You can access your data, have it corrected or deleted, ask for a copy in a common format, object to a processing based on our legitimate interest or ask for its restriction, and withdraw your consent to push notifications at any time. Much of this can be done directly in the application (“My account”, “Notifications”, “Monitored pages”); for the rest, write to the contact address given above. We answer within one month.

If you believe that your rights are not respected, you can lodge a complaint with a data protection authority, for example the CNIL in France (www.cnil.fr), or the authority of your country of residence.

Security

The site is only accessible over HTTPS; passwords are stored as hashes; access to the server is limited and protected; the database is backed up every day. The monitored pages are shown in an isolated frame, without running their scripts.

Changes

We may change this policy, for example for a new service. The date of the last update is shown at the top of the page; in case of a significant change, we will tell you by email.

This English version is provided for convenience; in case of discrepancy, the French version prevails.