Privacy Policy

Last updated 13 November 2026

1. Introduction

Pinderlog ("we," "us," or "our") provides an automated sitemap monitoring service (the "Service"). Pinderlog is operated from Newcastle, New South Wales, Australia by an Australian business registered under ABN 35 910 404 693. There is no postal address for privacy requests: write to support@pinderlog.com and a person reads it.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign up, we collect your email address for authentication via magic link.
• Sitemap Targets: You provide sitemap.xml URLs for us to monitor and scan.
• Notification Settings: You may configure the email address that receives alert notifications.
• Billing Information: When you subscribe to a paid plan, we collect billing information. We do not store full credit card numbers — payment processing is handled securely by Stripe.
• Communications: If you contact our support team, we collect the information you provide.

2.2 Information Collected Automatically

• Scan Results: When we scan your sitemap, we collect HTTP status codes, response times, redirect chains, and error types for each discovered URL.
• Activity Logs: We record scan runs, alert dispatches, and configuration changes.
• Usage Data: Information about how you interact with the Service, including pages visited and features used.
• Device Information: Browser type, operating system, referring URLs, and language preferences.
• Cookies: We use essential cookies for authentication and security.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Scan your sitemap URLs and report issues
• Send alert notifications when issues are detected
• Process your subscription and send billing notifications
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data concerned and the context in which we collect it. We process your information:

• To perform our contract with you (e.g., providing the Service, processing payments)
• For our legitimate interests (e.g., improving the Service, security, fraud prevention)
• With your consent (e.g., for non-essential cookies)
• To comply with legal obligations

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Scan history and activity log retention depends on your plan:

Plan	Scan History Retention
Free	7 days
Pro ($12/mo)	90 days

When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or billing purposes.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We engage trusted third parties to perform functions on our behalf, including:
  • Stripe — Payment processing. Stripe's privacy policy applies to payment data.
  • Email Provider — Sending magic link emails and alert notifications.
• Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

7. Cookies

We use essential cookies required for authentication and security. These cannot be disabled. We do not use tracking cookies or third-party analytics cookies.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption of data in transit via TLS/SSL, secure session management, and regular security updates.

9. Your Rights

GDPR Rights (EEA Users): You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data.

CCPA Rights (California Users): You have the right to request disclosure of collected personal information, request deletion, and opt out of sale (we do not sell personal information).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through standard contractual clauses or equivalent mechanisms.

11. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

13. Australian Privacy Principles and Complaints

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In short: we collect only what the Service needs, we tell you why we collect it, we take reasonable steps to keep it secure, and we give you access to it on request.

If you think we have breached the APPs, write to us first at support@pinderlog.com. If our answer is not good enough, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at support@pinderlog.com.