Privacy Policy

Last updated 13 November 2026

1. Introduction

Cron-Reminder ("we," "us," or "our") operates the Cron-Reminder service (the "Service"), a dead man's switch / heartbeat monitoring service. Cron-Reminder is operated from Newcastle, New South Wales, Australia by an Australian business registered under ABN 35 910 404 693. There is no postal address for privacy requests: write to support@cron-reminder.com and a person reads it.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign up, we collect your email address for authentication via magic link.
• Heartbeat Configuration: You provide names, check-in intervals, and alert email addresses for your heartbeat monitors.
• Billing Information: When you subscribe to a paid plan, we collect billing information. We do not store full credit card numbers — payment processing is handled securely by Stripe.
• Communications: If you contact our support team, we collect the information you provide.

2.2 Information Collected Automatically

• Activity Logs: We record timestamps of ping requests to your heartbeat URLs, along with IP addresses and HTTP headers.
• Usage Data: Information about how you interact with the Service, including pages visited and features used.
• Device Information: Browser type, operating system, referring URLs, and language preferences.
• Cookies: We use essential cookies for authentication and security.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your subscription and send billing notifications
• Send alert notifications when your heartbeats fail to check in
• Send recovery notifications when heartbeats resume
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your information depends on the data concerned and the context in which we collect it. We process your information:

• To perform our contract with you (e.g., providing the Service, processing payments)
• For our legitimate interests (e.g., improving the Service, security, fraud prevention)
• With your consent (e.g., for non-essential cookies)
• To comply with legal obligations

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Activity log retention depends on your plan:

When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or billing purposes (e.g., invoice records retained for 7 years as required by tax law).

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We engage trusted third parties to perform functions on our behalf, including:
  • Stripe — Payment processing. Stripe's privacy policy applies to payment data.
  • Email Provider — Sending magic link emails and alert notifications.
• Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

7. Cookies

We use the following types of cookies:

• Essential Cookies: Required for authentication and security. These cannot be disabled.
• Session Cookies: Temporary cookies that expire when you close your browser.

We do not use tracking cookies or third-party analytics cookies.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit via TLS/SSL
• Secure session management with HttpOnly, Secure, SameSite cookies
• SQLite database with WAL mode for data integrity
• Regular security updates and monitoring

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights

9.1 GDPR Rights (EEA Users)

If you are in the EEA, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request restriction of processing.
• Portability: Request transfer of your data to another service.
• Objection: Object to processing based on legitimate interests.

9.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Request disclosure of the categories and specific pieces of personal information we collect
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through standard contractual clauses or equivalent mechanisms.

11. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

13. Australian Privacy Principles and Complaints

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In short: we collect only what the Service needs, we tell you why we collect it, we take reasonable steps to keep it secure, and we give you access to it on request.

If you think we have breached the APPs, write to us first at support@cron-reminder.com. If our answer is not good enough, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at support@cron-reminder.com.