Privacy Policy

Last updated: April 2026

Pulsarc ("we", "our", "us") operates the Pulsarc uptime monitoring platform at pulsarc.live, including the web dashboard, mobile app, browser extension, and API. This Privacy Policy explains what data we collect, how we use it, and how we protect it.

Information We Collect

Account information

  • Email address (used for login, notifications, and account verification)
  • Password (stored as a one-way cryptographic hash — we never store or have access to your plaintext password)
  • Account plan (Free, Pro, etc.)

Monitor configuration

  • URLs you configure for monitoring
  • Check intervals, expected status codes, response assertions
  • Custom headers and credentials (encrypted at rest)

Monitoring results

  • HTTP status codes and response times from your monitored endpoints
  • SSL certificate details (issuer, expiry date) for HTTPS monitors
  • Uptime history and aggregated statistics

Notification preferences

  • Configured notification channels (email, Slack, Discord, Telegram, Jira, mobile push, browser extension)
  • Channel-specific configuration (e.g. Slack channel ID, Telegram chat ID)
  • Event type preferences (down, recovered, slow, SSL expiry)

Device information (mobile app)

  • Expo push token (for delivering push notifications)
  • Device platform and name

Team data

  • Team names, membership, and role assignments
  • Team invitations (email address and invite token)

Information We Do NOT Collect

  • Response bodies from your monitored endpoints (unless you configure response assertions, which are evaluated and discarded)
  • Browsing history or website content
  • Location data
  • Analytics or tracking data from third-party services
  • Advertising identifiers

How We Use Your Information

We use your data strictly to provide and improve the Pulsarc service:

  • Authenticate your account and verify your email address
  • Execute uptime checks against your configured monitors
  • Deliver notifications through your configured channels
  • Display monitoring dashboards and historical statistics
  • Check SSL certificate status for HTTPS monitors
  • Send transactional emails (account verification, team invites)

We do not use your data for advertising, profiling, or any purpose unrelated to the service.

Data Sharing

We do not sell, rent, or trade your data to anyone.

Your data may be transmitted to third-party services only when you explicitly configure a notification channel:

  • Slack (via Slack API, when you connect a workspace)
  • Discord (via Discord API, when you connect a server)
  • Telegram (via Telegram Bot API, when you connect a chat)
  • Jira (via Atlassian API, when you connect an instance)
  • Expo Push (via Expo API, for mobile push notifications)

Each third-party integration only receives the notification event data (monitor name, status, URL) required to deliver the alert. No other user data is shared.

Data Storage and Security

We take the security of your data seriously:

  • All traffic between your browser/app and our servers is encrypted via HTTPS/TLS
  • Passwords are stored as irreversible cryptographic hashes — we cannot retrieve your password
  • Monitor credentials (Bearer tokens, Basic Auth) are encrypted at rest
  • Authentication uses signed JSON Web Tokens (JWT) with short expiration
  • Email verification tokens are single-use and expire after 24 hours
  • Our servers are hosted in the European Union

Cookies and Local Storage

We use a single authentication cookie:

  • token — a JWT stored as a cookie with SameSite=Lax, used to authenticate your session. Expires after 24 hours.

We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

The mobile app stores authentication tokens securely via the operating system's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).

Data Retention

  • Monitor results: retained indefinitely (aggregated daily after 24 hours)
  • Browser extension notifications: pruned after 24 hours
  • Team invitations: expire after 7 days
  • Account data: retained until you delete your account

Your Rights

You can at any time:

  • Access your data through the Pulsarc dashboard and API
  • Update or correct your information
  • Delete monitors, notification preferences, and team memberships
  • Request complete deletion of your account and all associated data by contacting us
  • Export your monitoring data through the API

Children

Pulsarc is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy when features change. Updates will be reflected on this page with an updated "Last updated" date.

Contact

For privacy-related questions or account deletion requests: