Privacy Policy

This Privacy Policy explains how EOL Tracking ("we", "us", "our"), the data controller, collects, uses, and protects your personal data when you use eoltracking.com (the "Service"). For privacy questions, contact us at [email protected].

1. Information we collect

• Account data: your email address and a securely hashed password.
• Asset data you enter: hardware names, manufacturers, models, purchase and end-of-life dates, and related notes.
• Billing data: if you subscribe, payment is handled by Stripe; we store a Stripe customer identifier and your subscription status, but we do not store your card details.
• Support & contact data: the name, email, and message you submit through our contact form.
• Technical data: limited log data such as your IP address and timestamps, used for security and abuse prevention (e.g. rate limiting).
• Settings you choose: notification preferences, warning window, and any Slack/Microsoft Teams webhook URL you provide.

2. How we use your data

We use your data to: create and secure your account; provide the Service and store your assets; compute statuses and send the EOL/EOS notifications you configure (by email and/or your chosen webhook); process subscriptions and billing; respond to support requests; prevent fraud and abuse; and comply with legal obligations.

3. Legal bases (GDPR)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (to secure and improve the Service and prevent abuse); consent (where you opt in to optional notifications); and legal obligation (e.g. tax and accounting records).

4. How we share data

We do not sell your personal data. We share it only with service providers that help us run the Service, under appropriate safeguards:

• Stripe — payment processing and subscription management.
• Our email provider — to deliver verification, password-reset, and alert emails.
• endoflife.date — when you use the "look up EOL date" feature, the manufacturer/model text you enter is sent to their public API to retrieve suggestions.
• Your configured Slack/Microsoft Teams webhook — if you enable it, alert content is sent to that endpoint.

We may also disclose data where required by law or to protect our rights, users, or the Service.

5. Cookies

We use a single essential session cookie to keep you signed in. It is HttpOnly and set with SameSite=Lax (and marked Secure over HTTPS). We do not use advertising or third-party tracking cookies.

6. Data retention

We keep your account and asset data for as long as your account is active. If you delete your account or ask us to erase your data, we delete it (subject to any records we must retain for legal, tax, or security purposes). Short-lived security logs and one-time tokens are deleted or expire automatically.

7. Security

We protect your data with measures including password hashing, encryption in transit (HTTPS), CSRF protection, rate limiting, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to keep our safeguards current.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You can access and edit most data in the app directly, or contact us at [email protected] to exercise your rights. You also have the right to lodge a complaint with your local data-protection authority.

9. International transfers

Your data may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

10. Children

The Service is not directed to children and is not intended for anyone under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes here and update the date above; significant changes may also be notified by email.

12. Contact

For any privacy question or request, contact us at [email protected] or via our contact page.