Privacy

What we store and why. The controller of your data is Albion Ltda, which operates AlertWard.

What we store

• Your account: e-mail, name, a password hash (argon2id) and, if you enable it, an encrypted two-factor secret.
• What you monitor: hosts, domains, license details you enter, check results and the history of changes.
• For uploaded certificate files: only the metadata (holder, tax id, issuer, dates). Never the private key, never the password.

What we do not do

• No advertising. The app uses one session cookie. Visits to the public pages are counted with Cloudflare Web Analytics (no cookies, no personal identifiers) and Google Analytics.
• No selling or sharing of your data. Sub-processors: Stripe (billing) and our e-mail provider (reminders).

Cookies and audience measurement

• Necessary: the session cookie of the app (sign-in and form protection). It exists only after you open the sign-in or sign-up page.
• Optional — Google Analytics: on the public pages, Google Analytics sets cookies only if you press Accept. Until then, and if you decline, it receives only anonymous page views with no cookies and no identifiers. Advertising features stay off in every case, and page addresses are sent without their query string.
• Your choice is stored in your browser (not in a cookie). Change it any time with Cookie settings in the footer. A browser that sends Global Privacy Control is treated as a refusal.

Free tools

The SSL checker and domain lookup keep results in memory for five minutes to avoid repeated scans. Client addresses are only kept as salted hashes for rate limiting.