Your data
Your data stays in Europe.
The service and its database run in Germany. Here is who touches what, where, and for how long.
Hosted in Germany, inside the European Union
The service and the database are hosted at Hetzner Online GmbH, in Gunzenhausen, Germany. No American cloud, no replication of the database outside Europe.
Six processors, and you know which
Hetzner for hosting (Germany) · Resend for email delivery (EU) · Stripe for payment (EU and United States, standard contractual clauses) · Anthropic for the copilot (United States, standard contractual clauses) · Google (Safe Browsing, United States) for flagging dangerous sites and Sectigo (crt.sh) for the public certificate logs — both receive only the domain name. What each one processes is detailed in the privacy policy.
What the copilot receives, and what it does not
When an alert is raised, the copilot receives the domain name, its registrar and the technical data of the check. It receives neither your name, nor your email address, nor your payment method, nor the list of your other domains. These exchanges are not used to train any model.
We collect only what monitoring needs
Your domains, your client folders, your alert channels, and the history of checks. No resale, no advertising, no advertising tracker on the site.
History is kept according to your plan
Thirty days on Free, ninety on Pro, three hundred and sixty-five on Agency. Beyond that, watchtower runs are erased.
You leave when you want, and everything leaves with you
Deleting your account erases your domains, your clients, your channels and your history. You can also delete the Cloudflare token alone, without closing the account.