Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains how StripePing ("we") collects, uses, and protects information when you use https://stripeping.pages.dev.

1. Information we collect

• Account data: name, email address, and authentication details (password hash or Google account ID).
• Configuration data: webhook signing secrets, Telegram bot tokens, chat IDs, and Discord webhook URLs you provide in setup.
• Payment data: billing is handled by Bachs; we receive confirmation of payment and customer email, not full card numbers.
• Webhook payloads: payment events pass through our servers to generate alerts; we do not sell this data.
• Technical logs: standard request metadata (timestamps, paths, errors) for reliability and abuse prevention.

2. How we use information

We use your information to operate the service, verify webhooks, deliver alerts, process subscriptions, respond to support requests, and improve reliability. We do not use your payment webhook content for advertising.

3. Storage & security

Data is stored in Cloudflare KV and processed on Cloudflare Workers. Secrets are stored encrypted at rest by Cloudflare. Passwords are hashed with PBKDF2. You should treat setup URLs and webhook secrets as sensitive links.

4. Third parties

• Cloudflare — hosting and storage
• Bachs — subscription checkout and billing webhooks
• Google — optional OAuth sign-in (if enabled)
• Resend — optional password-reset emails (if enabled)
• Telegram / Discord — alert delivery to endpoints you configure

5. Retention

Account and tenant configuration persist while your subscription is active. Processed webhook event IDs may be cached briefly for deduplication (typically 30 days). You may request deletion by contacting us.

6. Your rights

Depending on your location, you may request access, correction, or deletion of personal data. Email support@stripeping.app.

7. Changes

We may update this policy; the "Last updated" date will change. Continued use after updates constitutes acceptance.