Privacy

What we store

• Account — your email address, display name, and the time you last signed in.
• Sites you add — the URL, name, and notes you provide, plus your per-site verification token (shown to you once when you add the site).
• Monitoring data — HTTP status codes, response times, PageSpeed performance scores, SSL certificate expiry, and detected WordPress plugin/theme versions. We store only what your sites expose publicly; we never install anything on them.
• Alerts — a log of alerts sent to your own email/webhook, and when.
• Sessions & tokens — only SHA-256 hashes of random sign-in and session tokens, with expiry (15 min / 30 days).

What we do NOT do

• We never send passwords (there are none), log file contents of your site, or write anything to your site. Monitoring is strictly read-only.
• We never share your data with other users of the service. Every dashboard, count, and chart is scoped to your account only.
• Public data from WordPress.org (latest plugin/theme versions) is cached globally to respect their rate limits; it is not tied to your identity.

Data retention

• Raw uptime checks: 30 days, then aggregated into daily stats.
• Daily stats: 1 year.
• Expired sessions and sign-in tokens: deleted automatically.

Deleting your data

Sign in and go to Settings → Delete my account and all data. This removes your account, sites, and every row we store about them — immediately and permanently.

Contact

Questions or abuse reports: support@sevenseven.tech. Domain owners who want their site removed from monitoring can contact us and we will add it to the blocklist.