Privacy policy

Last updated: 5 November 2026

Who we are

CrawlSentry is operated by GetInput Oy (business ID 3576055-2), Helsinki, Finland, which is the data controller for the personal data described here. Contact: support@crawlsentry.com.

What we collect and why

• Account data — your email address, used to sign you in (one-time email links), to send the alerts you ask for, a one-time welcome email and, if you haven't added any pages after a day, a single reminder (which you can unsubscribe from). Legal basis: performance of our contract with you.
• Monitored URLs and their snapshots — the URLs you add and the public SEO data we read from them (title, meta robots, canonical, robots.txt, redirects, certificate and domain expiry), plus the history of detected changes. Legal basis: contract.
• Billing data — if you subscribe, Stripe processes your payment details; we store only your Stripe customer and subscription IDs and your plan. Legal basis: contract and our accounting obligations.
• Technical data — a session cookie (sw_session) that keeps you signed in, and standard server logs (IP address, request path, user agent) kept briefly for security and debugging. Legal basis: legitimate interest in running a secure service.
• People our customers invite — if a customer adds your email to receive alerts for one of their projects, we store that address, send you one confirmation email, and only send alerts after you confirm. Every email lets you unsubscribe, and you can opt out of all future invites; we then keep your address on a do-not-email list so it can't be re-added. Legal basis: the customer's legitimate interest in informing you, and your consent once you confirm.
• Product analytics (only with your consent) — if you click Accept in the cookie banner, PostHog records pages viewed and interactions, linked to a random identifier and, once signed in, to your internal account number (never your email). Legal basis: consent, which you can withdraw anytime via Cookie settings.

We don't use advertising trackers and we don't sell personal data.

Cookies and local storage

• sw_session — keeps you signed in (30 days). Strictly necessary; no consent needed.
• cs_consent (local storage) — remembers your cookie choice.
• ph_* (cookie/local storage) — PostHog analytics, set only after you accept; removed if you later reject via Cookie settings in the footer.

Who processes data for us

• Cloudflare — hosting, database, email forwarding (global network).
• Resend — sending sign-in and alert emails (United States).
• Stripe — payments and invoicing (EU/United States).
• PostHog — product analytics, only with consent (EU cloud, Frankfurt).

Transfers outside the EU/EEA rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. To check certificate and domain expiry we send hostnames (never your email) to public lookup services: Cert Spotter (SSLMate), crt.sh and rdap.org.

How long we keep it

• Account, URLs and snapshots — until you delete them or your account.
• Change history — up to 12 months.
• Invited recipients — until the customer removes them or deletes the project; opt-out records are kept so we can honour them.
• Sign-in sessions — 30 days; sign-in links — 15 minutes.
• Billing records — as long as Finnish accounting law requires (generally 6–10 years).

Your rights

You can delete your account yourself anytime under Delete account in the dashboard; this immediately removes your email, URLs, snapshots and change history and cancels any subscription (billing records Stripe must keep for accounting are retained). Under the GDPR you can also request access to, correction of, export of, or deletion of your personal data, and object to or restrict its processing. Email support@crawlsentry.com and we'll respond within one month. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Changes

If we make material changes we'll update this page and, where appropriate, email you.