Privacy policy

Last updated 10 November 2026

PulseGuard is run by Themicroforge Ltd, trading as The Microforge (registered in England and Wales, company number 17490600, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ), which decides what is kept and why.

What we hold

Your account: email address and a salted hash of your password. If you turn on two-factor sign-in, the authenticator app’s secret (encrypted), your passkeys’ public keys (the private half never leaves your device) and your recovery codes, as hashes. Links we email you are stored only as hashes.
Your teams: team names, who belongs to them, and pending invites (the invited email address; invite links are stored only as a hash).
Your monitors: the addresses you add and their settings, including any headers or request body you give an API check, and for each check the status code, response time and time. We don’t store the content of the pages we check.
Your status pages: their titles, addresses and own domains, and which monitors they show. What a status page shows is public.
Your alerts and reports: the email addresses, mobile numbers, webhook URLs or chat ids you give us to send alerts to, a count of the texts sent, for billing, and on Agency the addresses you add to receive the monthly report.
Billing: your team’s plan, whether it is paid monthly or yearly, and Paddle’s references for the customer and the subscription. Card details go to Paddle and never reach us.

What we use it for

To run the service: checking your sites, sending your alerts and reports, signing you in and keeping your plan. We also use it to keep the service secure and free of abuse, and to understand how many people sign up and pay. We don’t sell personal data and we don’t use it for advertising.

How long we keep it

Check results and resolved incidents are kept for the length of your plan’s history window (7 days on Free, 90 on Pro, 365 on Agency) and then deleted. Expired invites and emailed links are deleted a month after they expire. Deleting a team deletes its monitors, history, alert channels and invites. You can download a copy of your data, or delete your account with the teams only you are in, from the Account page. A record of plan changes, and of anything our support staff do to an account, is kept after the account is deleted, for our accounts.

Who else handles it

Paddle, which sells our paid plans. It collects what it needs to take a payment and charge tax (your name, email, card and billing address) and handles it under its own privacy policy. Paddle and we each answer for our own part. We never see your card.
Resend, which delivers our email.
Discord, Telegram or Slack, only when you add one as an alert channel.
Twilio, which delivers SMS alerts, only when you add a mobile number.
Our hosting provider, which runs the service and stores the database.

Cookies and advertising

None. No cookies of our own, no advertising and no visitor tracking. Nothing on the site is loaded from anyone else’s servers (the fonts are served from ours), except Paddle’s checkout, which opens only when you buy a plan and works under Paddle’s own policy.

If you sign in, your browser keeps two things in its own storage for this site, and sends them nowhere but here: the token that keeps you signed in, until you sign out, and the team you last chose.

Your rights

You can download a copy of your data, or delete it, from the Account page. You can also ask for a copy, for it to be corrected or deleted, or object to how it’s used, by emailing hello@getpulseguard.com. If you’re in the UK you can also complain to the Information Commissioner’s Office.