Privacy Policy

Effective 2026-05-02 · written to match the running code

1. What this document is

This page tells you exactly what NetCheq — the apps and the website at netcheq.com, both operated by Defensible Logic, Inc. — records about you, what it doesn't, and for how long. It's intentionally short and concrete.

NetCheq is local-first by design. The default experience involves no account, no cloud sync, and no data leaving your device beyond the HTTP requests you explicitly configure. Everything below describes that default, plus what changes when you opt into the optional hosted tier.

2. The apps — what they send over the network

By default, the local NetCheq apps make exactly two kinds of network requests:

  • HTTP requests to the URLs you configure as targets — that's the product. The requests carry a User-Agent of NetCheq/<version> (+https://netcheq.com) so target operators can identify and contact us if our checks misbehave.
  • Occasional version checks against netcheq.com so the app can notify you when a new version is available. No body, no payload — just a plain GET that returns the current version string.

That's the entire list. No telemetry, no crash reporting, no analytics SDKs, no advertising IDs.

3. The apps — what stays on your device

The following data is stored only in app-local storage and is never transmitted anywhere unless you opt in to the hosted tier (see Section 5):

  • Your list of monitored URLs and any names / matchers you've attached to them.
  • Each target's check history (status, HTTP code, latency, last-checked timestamp).
  • The app's settings (check interval, notification preferences, theme).

On Android the storage path is the app's private databases directory. On iOS / macOS it's the app's container with NSFileProtectionComplete. On Windows / Linux desktops, it lives at the OS-conventional user-data path (%APPDATA%/NetCheq / ~/.local/share/netcheq).

4. How NetCheq decides whether you're online

A core product decision: NetCheq won't tell you a target is down unless your own device is online. That answer is read from the OS — NWPathMonitor on Apple platforms, ConnectivityManager on Android, INetworkListManager on Windows, NetworkManager on Linux. We do not probe a beacon URL to check connectivity, so the app never leaks "this device is online" telemetry.

5. The hosted tier (opt-in, future)

NetCheq will offer an optional paid hosted tier that runs scheduled checks from netcheq.com infrastructure (so you get alerted while your devices are off) and can sync your target list across multiple devices. Signing in is an explicit, surfaced choice; the apps never silently start syncing.

When the hosted tier ships, this section will enumerate exactly what we hold for hosted-tier accounts (currently expected: email address, bcrypt-hashed password, target list, check history, Stripe customer + subscription IDs, alert-delivery channels) and the corresponding retention windows. The Play Store and App Store privacy declarations will be updated in the same release.

6. The website — what netcheq.com collects

For every page view on netcheq.com, our owned analytics records:

  • the URL path and HTTP status code;
  • the referrer URL, if your browser sends one;
  • your User-Agent string and a coarse country / region derived from your IP via a local MaxMind database — we do not store your IP address; it is mixed with your User-Agent, the date, and a daily-rotating secret salt to produce a session hash, and discarded.

No Google Analytics, no Plausible, no Cloudflare Analytics, no third-party tracking pixels, no advertising scripts. Aggregate counts only; we do not sell or share visitor data.

Retention: analytics events are kept for 90 days and then permanently deleted.

7. Cookies

netcheq.com sets one first-party cookie — _netcheq_key — that holds your signed session when (and only when) you're logged into the future hosted tier. It's HTTP-only, SameSite=Lax, and cleared on logout. We do not set third-party cookies.

8. Children

NetCheq is a tool for site operators and isn't directed at children under 13. We don't knowingly collect data from them.

9. Changes

Material changes will be reflected by an updated effective date at the top of this page; for the hosted tier specifically, registered users will be notified by email at least 30 days before the change takes effect.

10. Contact

Privacy questions: privacy@netcheq.com. Other questions: see Support.