Privacy policy

What we store

• Your email address and a salted hash of your password (never the password itself).
• A SHA-256 hash of your API key. We cannot recover the key; nobody can.
• Your checks: names, backup-tool labels, schedules, and their ping tokens.
• Ping events: timestamp, pass/fail/start status, and, only if your agent sends them, a short message (typically a log tail) and a duration.
• Alert destinations you configure: webhook URLs, or the email address alerts go to.

That is the complete list. Vestal's architecture keeps your actual backup data on your machines: file contents, repository credentials, and encryption keys have no path into our systems at all.

What we don't do

• No analytics scripts, ad pixels, or fingerprinting. This site loads nothing from third-party domains.
• No selling, renting, or sharing of your data with anyone, for any reason.
• No marketing emails. Email from Vestal is an alert you asked for, a password reset you requested, or a genuinely important service notice.
• One cookie: your session, HttpOnly, created only when you log in.

Who processes data on our behalf

Vestal runs on Cloudflare (hosting, database, data encrypted at rest and in transit) and sends email through Resend (which sees only the recipient address and message content of emails we send you). Both are bound by their own published privacy commitments. There is no one else.

Deletion

The delete-account button in the dashboard permanently removes your user record, checks, ping history, alert channels, sessions, and reset tokens in one atomic operation, verified by our own end-to-end tests, which confirm the credentials stop working immediately. No soft-delete, no 30-day retention, no "contact support to really delete."

Questions

support@vestalapp.com, or read the security page for the technical detail behind these claims.