Privacy

Who is responsible

hostnag is operated by Proios Interactive LLC, [Registered address]. Contact: support@hostnag.com.

What we collect and why

We collect only what running your monitors and your account requires:

• Your account email, name and an optional picture, for sign in and invites.
• Organization and group names.
• Monitor names, targets and settings, including any custom HTTP headers, which are stored in plaintext, not in the vault.
• Channel secrets, webhook URLs, tokens and keys, stored encrypted in a vault, never in plaintext.
• Check results and alert history.
• The first forwarded address of a Beacon call or a browser calling a report URL.
• The address a monitor's target resolved to from each check location, matched against an IP-to-city table hostnag holds itself (DB-IP Lite) to place the monitor on your organization's map. Nothing is sent anywhere for it.
• Your billing name and invoices, held through Stripe; card numbers never touch hostnag.
• Any support email you send us.
• Which of the getting-started mails you have had (there are four, each sent once, only while it applies, with a stop link in every one) and whether you said stop; and, once you own an organization, your address in our announcements list at Resend, which mails about what is new at most once a month with an unsubscribe link in every one.

Processors

The services that run hostnag on our behalf, each receiving only what its job needs:

• Supabase: database, sign in and functions, hosted in us-east-1.
• Vercel: the web app. Its BotID service checks that sign-up, sign-in, the free tools and status page subscriptions come from a browser, to keep automated abuse out. Its Web Analytics and Speed Insights count page views on the public site, with your consent where the law asks for it.
• Fly.io: the check locations, one small machine in each of US East, US West, Frankfurt, Tokyo and Sydney. They run every check and free tool against the hosts and domains you name, and nothing else.
• Cloudflare: the Turnstile check on the sign-in and sign-up forms, which tells a browser from a script.
• Stripe: billing.
• Resend: email.
• Twilio: SMS.
• Featurebase: support conversations, feedback and the roadmap. Signed in, your name, email, picture and your organizations' names and plans travel with you, so a conversation is yours.

Cookies and analytics

hostnag sets two cookies: the sign in session cookie that keeps you signed in, and one that remembers your answer below for six months. There are no advertising cookies.

The public site and the sign-in pages use Vercel Web Analytics to count page views and Vercel Speed Insights to measure how fast those pages load. Neither sets cookies or stores personal data; nothing inside the app is measured. In the EU, the EEA, the UK and Switzerland we ask before measuring; everywhere else it is on until you turn it off. Either way the switch is here:

Featurebase's script never loads on the public site; inside the app it loads with the Help row, for you and nobody anonymous. Support on the public site, Roadmap and Feedback are Featurebase's own pages on hostnag.featurebase.app.

Public pages

A status page shows only what its owner chose to publish, never the underlying targets or error strings. A badge shows a single status word.

Retention

Check results are kept for 30, 90 or 365 days depending on your plan. Monthly reports are kept for 3 or 12 months; Free keeps none. A deleted organization or account is removed from the live database; backups roll off on our processors' own schedules.

Your rights

You can ask for access to, correction of, export of, or deletion of your data by writing to support@hostnag.com. Two factor sign in and a list of your active sessions are both available from your account settings.

Changes

We may update this policy. When we do, we post the change here with a new date at the top of this page.