1. Overview
This Privacy Policy explains how Compare Versions ("we", "us", or "our") collects, uses, and protects your information when you use Compare Versions ("Services"). By using the Services you agree to this policy.
2. Information we collect
Account information
When you create an account we collect your username and email address, and we record when your email address is confirmed. Your password is stored as a one-way bcrypt hash — we never store or see the original password.
Monitoring data
URLs you submit for monitoring, page snapshots (HTML/PDF-derived content), version history, generated diffs, folder assignments, and saved-diff review status.
Alert preferences
Whether you have enabled change-alert emails and any threshold settings you configure.
Billing information
When you subscribe, we store Lemon Squeezy customer and subscription identifiers, plan quantity, subscription status, and related billing metadata on your account so we can apply plan limits and open the customer portal. Card numbers and full payment details are collected and processed by Lemon Squeezy (our merchant of record); we do not store your full card number on our servers.
Usage and security logs
IP addresses, login timestamps, user-agent strings, and rate-limit counters. These are used to protect accounts and prevent abuse.
Cookies
We use a single session cookie to keep you signed in. We do not use analytics cookies, advertising cookies, or third-party tracking pixels.
3. How we use your information
- To provide the monitoring service — storing snapshots, generating diffs, and displaying your Main view inbox.
- To authenticate your account and protect it with rate limiting.
- To send transactional emails — email address confirmation, password resets, change-alert digests (when you opt in), and billing-related notices (for example when monitoring is paused after a paid period ends).
- To process subscriptions and apply plan limits via Lemon Squeezy and our billing webhooks.
- To enforce our Terms of Service, including robots.txt compliance and plan limits.
We do not sell, rent, or share your personal data with advertisers or data brokers.
4. Sub-processors
We use a limited number of third-party services to operate Compare Versions:
| Provider | Purpose | Data location |
|---|---|---|
| Contabo | VPS hosting — stores all application data | Germany |
| Resend | Transactional email delivery (email confirmation, password reset, change alerts, billing notices) | United States |
| Lemon Squeezy | Payment processing and merchant of record (checkout, subscriptions, invoices, customer portal) | United States |
We do not use analytics services, ad networks, or third-party trackers.
5. Data retention
- Active paid or Freemium accounts — account and monitoring data are kept while the account is in active use, subject to plan snapshot limits and Freemium rules in the Terms.
- Snapshots and versions — kept up to the configured limit per monitored page for your plan.
- After a paid period ends — scheduled monitoring is paused. We retain monitoring data (URLs, snapshots, versions, diffs, and related configuration) for approximately thirty (30) days so you can export it or resubscribe. If you do not resubscribe before that window ends, that monitoring data is permanently deleted. Your login may remain unless you delete the account. See Terms §5b.
- Deleted accounts — when you delete your account via the Account page, all your data (URLs, snapshots, diffs, folders, alert settings) is permanently purged immediately, and any active subscription is cancelled where applicable.
- Removed-links log — deletion audit entries are retained for up to 365 days, then automatically purged.
- Billing records — Lemon Squeezy may retain payment and invoice records according to its own policies and legal obligations; we may retain subscription identifiers needed for disputes and compliance.
6. Your rights
You can:
- View your data — your URLs, versions, diffs, folders, and alert settings are all visible in your account.
- Delete your account — the Account page lets you permanently delete your account and all associated data.
- Request information — contact us at support@compareversions.com for data access or correction requests.
7. Security
- Passwords are hashed with bcrypt (72-byte limit enforced).
- All traffic is served over HTTPS in production.
- Authentication endpoints are rate-limited to prevent brute-force attacks.
- Sessions are server-side only — no remember-me cookie is issued.
No system is perfectly secure. If you discover a vulnerability, please report it to support@compareversions.com.
8. Children
Compare Versions is not directed at children under 13. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated effective date. Continued use of the Services after a change constitutes acceptance.
10. Contact
For privacy questions or data requests, email support@compareversions.com.