Privacy policy

Last updated 7 September 2026. Applies to the ProofWatch service at https://proofwatch.app and the ProofWatch Chrome extension.

What ProofWatch does

ProofWatch is a website-monitoring service for agencies. You add the public web pages you look after for your clients; our server visits each page on a schedule, keeps a screenshot and a structural copy of the page, compares it with the previous visit and emails you when something changed or the page stopped answering. Once a month it produces a PDF report per client.

Data we store

Account: Your email address (used to sign you in and to send alerts and reports), the time of your last sign-in, and, if you provide them, an agency name and logo for the reports.
Monitoring configuration: Client names and colours; the URLs and page titles you add; per-page settings (check interval, sensitivity, CSS selectors to ignore); a note. When you add a page from the extension you can tick a box to also save a screenshot of your browser view at that moment; the box is off by default and nothing is captured unless you tick it.
Snapshots: For every check of a page you added: a desktop and a mobile screenshot, the rendered HTML structure, and the response status and timing. These are copies of public web pages held on your behalf so that changes can be shown side by side.
Alerts and reports: The change and issue history of your pages, when you acknowledged each alert, and the generated monthly PDFs.
Session tokens: Hashed sign-in links (valid 15 minutes, single use) and hashed session tokens (web sessions 30 days, extension sessions 90 days).
Operational logs: Request logs with IP address, path and timing, kept for seven days for debugging and abuse prevention.

What the extension sends, and when

The ProofWatch Chrome extension has one purpose: managing your ProofWatch account from the browser (adding pages, picking regions to ignore, showing your alerts). It collects only what that needs, and only when you act: your email address when you sign in; the current tab's address and title when you click "Watch this page"; the CSS selectors of the elements you click when you use the region picker and press Save; and, only if you tick the box on the add form, a screenshot of your current browser view. It reads your alert list from your own account every 15 minutes to show the badge. It keeps your session token and the last client you used in the browser's extension storage.

It does not collect browsing history, page content, keystrokes, clicks outside the picker, or anything from pages you have not invoked it on, and it talks only to https://proofwatch.app. ProofWatch's use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements: the data is used only to provide and improve the monitoring service you signed up for, is never sold, and is never used for advertising or transferred except to the sub-processors below.

Where and how long

Data is stored on Railway infrastructure in the European Union (Amsterdam, Netherlands). Screenshots are pruned after 30 days except the current baseline, snapshots referenced by an alert and one daily anchor; the storage budget can prune older non-evidence snapshots sooner. Daily database backups are kept for seven days. Deleting a page or client deletes its checks, snapshots and alerts; deleting your account (Settings → Delete this account) removes everything at once, and from the backups after their seven-day cycle.

Sharing

We do not sell or share your data and do not use it for advertising. Sub-processors: Railway (hosting and storage, EU West) and Resend (email delivery, EU region). Thumbnails linked from alert emails are served through signed links valid for 60 days so that they render in your inbox; anyone with such a link can view that thumbnail for that time.

Chrome extension permissions

The extension requests activeTab and scripting (read the current page's URL and let you click regions to ignore, only when you invoke it), storage (your session token and preferences), alarms (refresh the unread-alert count every 15 minutes), notifications (tell you when a monitored page changes) and access to the ProofWatch origin only. It has no access to other websites.

Changes to this policy

If what ProofWatch or its extension collects, or how it is used, ever changes, we will email every account holder before the change takes effect and update the date at the top of this page. An extension update that changes data handling will say so in its store listing and in the popup the first time you open it.

Your rights and contact

You can export or delete your data, or ask any question about this policy, by emailing hello@proofwatch.app from your account address. ProofWatch is operated by FuturePrep Ltd..