Privacy Policy
Fassung vom 8. Oktober 2026
Diese Seite ist nur auf Englisch und Französisch verfügbar. Auf Französisch lesen
This is a translation. The French version prevails in case of any difference.
Domain Sentinel collects as little personal data as possible, and only what the service needs to work. The data controller is Grégory Boutte, sole proprietor (entrepreneur individuel, SIREN 130 455 447), publisher of the service (see the legal notice), reachable at contact@domain-sentinel.com.
1. The data we process
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (hashed) or Google identity | create and secure your account, send you the alerts and reports you chose | performance of the contract |
| Watched domains, settings, groups, notes | provide the monitoring | performance of the contract |
| History of checks and changes | show the history, detect changes | performance of the contract |
| Usage (number of checks per day, by type and by source) | apply the plan limits, show you your usage | performance of the contract |
| API keys (stored as a hash), webhooks | the programmatic access you set up | performance of the contract |
| Subscription data (plan, status, invoices, through Stripe) | the paid subscription | performance of the contract, legal obligations |
| Messages sent to contact@ or through the contact form | answer your request | legitimate interest |
| Origin of your first visit (landing page, referring site, campaign parameters), saved with your account when you sign up | know which channels make the service known | legitimate interest |
| Anonymous visit statistics (no cookie) | improve the website | legitimate interest |
| Technical logs and error reports | security, diagnosis | legitimate interest |
We sell no data and do no targeted advertising.
2. Domain name holders' data
Search results may show data published by registries and registrars (organization name, technical or abuse contacts). This data is public at the source; Domain Sentinel shows it for information, masks some of it, and lets anyone request its removal on the dedicated page.
3. Who has access: our processors
| Processor | Role | Location |
|---|---|---|
| OVH | hosting of the service, the database and the backups | France |
| Resend | sending emails (alerts, reports, account) | European Union (Ireland) |
| Stripe | payment, invoicing and taxes of the subscription (merchant of record) | European Union / United States (standard contractual clauses) |
| Sentry | technical error reports | European Union (Germany) |
| sign-in with a Google account, if you choose it | European Union / United States |
Visit statistics (Umami) are self-hosted.
4. Retention periods
- Account and related data: as long as the account exists; deleted within 30 days of a deletion request.
- History of checks: as long as the account exists (what is shown depends on the plan, what is kept does not).
- Billing data: the legal period (10 years for accounting records), at Stripe.
- Technical logs and error reports: 90 days at most.
5. What the website stores in your browser
- a language cookie, to show the website in your language;
- your sign-in session, in the browser's local storage;
- the origin of your first visit (see the table above), in local storage, until you sign up;
- if you use Google sign-in, the Google cookies needed for that sign-in.
Visit statistics set no cookie.
6. Your rights
Under the GDPR, you can access your data, correct it, delete it, ask for its portability, object to some processing or ask for it to be restricted. Write to contact@domain-sentinel.com. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.
7. Changes
This policy may change; the version in force is dated at the top of the page, and a significant change is announced by email.