Privacy Policy

Last updated: 1 July 2026

🇪🇺 Speccyfox is EU-hosted and GDPR-compliant. Your data is stored in the European Union and never sold to third parties.

1. Who we are

Speccyfox ("we", "us", "our") is a website change monitoring service operated by Max Filament ([email protected]). Our service is available at speccyfox.com.

For data protection enquiries, contact us at: [email protected]

2. What data we collect

Account data: When you register, we collect your name, email address and a hashed password. We never store your password in plain text.

Usage data: URLs you choose to monitor, monitoring frequency settings, and change history snapshots of those pages.

Billing data: If you subscribe to a paid plan, payment is processed by Stripe. We store only your Stripe customer ID — we never see or store your card number.

Technical data: Log files including IP address, browser type and access timestamps, retained for 30 days for security purposes.

3. How we use your data

To provide the monitoring service and send you change alerts
To send transactional emails (welcome, alerts, billing receipts)
To send service-related communications (trial reminders, important updates)
To process payments via Stripe
To prevent fraud and abuse
To improve our service based on aggregate usage patterns

We do not use your data for advertising, we do not sell it to third parties, and we do not use it to train AI models.

4. Legal basis (GDPR)

Contract performance — processing your account data and delivering the service you signed up for
Legitimate interests — security logs, fraud prevention, service improvement
Legal obligation — retention of billing records as required by law
Consent — marketing emails (you may opt out at any time)

5. Data storage and transfers

All data is stored on servers located in the European Union (Railway.app, EU region). We do not transfer personal data outside the EEA. Our email provider (Resend) and payment processor (Stripe) both operate under GDPR-compliant data processing agreements.

6. Data retention

Account data: retained while your account is active, deleted within 30 days of account deletion
Monitoring snapshots and change history: retained as per your plan; deleted within 30 days of account deletion
Billing records: retained for 7 years as required by EU accounting law
Security logs: retained for 30 days

7. Your rights under GDPR

You have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your data ("right to be forgotten")
Portability — receive your data in a machine-readable format
Restriction — limit how we process your data
Objection — object to processing based on legitimate interests
Withdrawal of consent — opt out of marketing emails at any time

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Cookies

We use strictly necessary cookies only — a session cookie to keep you logged in. We do not use advertising, tracking or analytics cookies. No cookie consent banner is required.

9. Third-party services

Stripe — payment processing (Stripe Privacy Policy)
Resend — transactional email delivery (Resend Privacy Policy)
Railway.app — EU cloud hosting

Each provider is bound by a Data Processing Agreement ensuring GDPR compliance.

10. Security

We implement appropriate technical measures including encrypted connections (HTTPS), hashed passwords, access controls and regular security reviews. No system is 100% secure — if you discover a vulnerability, please report it to [email protected].

11. Children

Speccyfox is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account immediately.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users at least 14 days before taking effect. The "last updated" date at the top reflects the most recent version.

13. Contact

For any privacy-related questions or to exercise your rights:
Email: [email protected]
Subject line: "Privacy Request"