Privacy Policy

Last updated: 27 October 2026

1. Who is responsible

The WatchTower Project is responsible for your data. Privacy contact: [email protected].

2. What we collect

• Account: your Google account email and name, your role, and when you last signed in.
• Server data: what the agent on each server reports: host name, operating system, software versions, service and security check results, addresses seen attacking the server, and, for features you switch on, details such as the sites a module monitors.
• Activity log: a record of changes made in your account and of actions run on your servers.
• Technical data: IP addresses and request logs from our web server and our network provider.

3. Why we use it

To run the service, keep it secure, send the alerts you configure and provide support.

4. Who we share it with

Google (sign-in), Cloudflare (network and delivery) and Linode (hosting). We do not sell your data.

5. How it is separated

Each customer’s data is isolated from other customers in the database.

6. How long we keep it

Server history samples are kept for 31 days. Your account and activity log are kept until you close your account, then deleted within 30 days (backups within 90 days).

7. Your data

Email [email protected] to get a copy of your data, correct it or delete it.

8. Changes

We tell you about changes by email to the account owner and a notice on this site.