How we keep your account safe
We keep as little as we can, protect what we do keep and let you delete it all whenever you like.
Passwords
Your password is never stored. We keep a one-way hash (PBKDF2 with SHA-256 and a unique salt), so even we can't read it.
Signing in
Sessions use a signed cookie that scripts can't read, sent only over secure connections. Sign out everywhere in one click.
Payments
Stripe takes card payments. Your card number never touches Site Patrol; we only keep Stripe's reference and your plan.
Everything encrypted
The whole site runs over HTTPS on Cloudflare's network, which also protects it from attacks.
API keys
Keys for the API and apps are stored as hashes and shown once. Remove any of them from your Account page.
Delete everything
Delete your account from the Account page and everything in it goes straight away. Any subscription is cancelled too.
What we keep
Your email address, your password's hash, the things you ask us to watch and their history, the places you want alerts sent and a copy of recent alerts. That's it. The full list is in our privacy notice.
Found a problem?
If you think you've found a security problem, please email hello@sitepatrol.app with the details. We'll reply quickly and keep you posted while we fix it.
Put Site Patrol on watch
Free for one website, live in under 60 seconds. We start watching the moment you add your URL.
Start free