Privacy Policy

Effective November 2, 2026. PONI monitors check-ins from devices you choose and sends interruption alerts. This policy explains the information PONI uses to provide the service.

Information we use

• Account and sign-in: your email address, sign-in requests, and sessions. If you connect Google or Microsoft, PONI stores the provider name and a unique identifier for your provider account. PONI does not keep provider access or ID tokens. A new Microsoft sign-in requires you to verify the email address that will receive alerts.
• Monitors: the names you give monitors, their current status, check-in times, interruption history, and ping sequence information. PONI stores a hash of each monitor token. A valid token identifies a check-in, but PONI does not use the ping's source IP address as a monitor identifier or save it in monitor history.
• Security and delivery: PONI uses a temporary hash of the source IP address to limit sign-in requests. It processes your email address and alert content to deliver sign-in, verification, and interruption messages.

How we use and share information

PONI uses this information to authenticate you, display monitor history, detect interruptions, send alerts, limit abuse, and operate the service. Google Cloud hosts PONI and its backups. Resend delivers email. If you choose Google or Microsoft sign-in, that provider handles your authentication under its own privacy terms. PONI does not sell your information or use it for advertising.

Cookies and public links

PONI uses secure, HTTP-only cookies for your session and, when needed, a short-lived sign-in flow. It does not use advertising cookies. Your dashboard is private. If you enable a monitor's public status link, anyone with that link can see its name, status, and timeline. You can disable the link from the monitor page.

Retention and deletion

Account and active monitor data remain while you use PONI. Completed interruption records are removed after 90 days. Sign-in links and flow records expire; the temporary sign-in rate-limit records are removed after about a day. Deleting a monitor removes its current record and history from the live database. Daily database backups are kept in private Cloud Storage for up to 30 days, so deleted information may remain in a backup during that period. To request deletion of your account, contact us below.

Security and changes

PONI uses HTTPS for the website and restricts access to its database and backups. Monitor tokens travel in ICMP ping payloads and may be visible to network observers; keep downloaded client files private and rotate a token if it is exposed. We may update this policy as the service changes, and will post the current version here with a new effective date.

Contact

For privacy questions or account deletion requests, email support@poni.watch.